last executing test programs: 13m15.300293289s ago: executing program 32 (id=144): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000001c0)={0x5}, 0x4) sendto$inet6(r0, &(0x7f0000000100)="b8", 0x1a000, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x6a16, @loopback, 0x3}, 0x1c) 12m50.978832031s ago: executing program 33 (id=498): perf_event_open(&(0x7f00000012c0)={0x1, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8800, 0xfd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mount$cgroup(0x0, 0x0, 0x0, 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/devices.allow\x00', 0x2, 0x48) write$cgroup_devices(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='c ', @ANYRESOCT=r0], 0x9) 12m25.329998322s ago: executing program 34 (id=668): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='map_files\x00') mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) lseek(r0, 0x2, 0x1) getdents(r0, 0x0, 0x0) 12m16.953649291s ago: executing program 35 (id=1089): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0xc48}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x410, 0x2000000, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 9m49.173442619s ago: executing program 36 (id=4495): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') 9m40.808272979s ago: executing program 37 (id=4683): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r1, 0x0) bind$bt_sco(r0, &(0x7f0000000040), 0x66) 8m13.276012759s ago: executing program 38 (id=6785): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 6m42.37258414s ago: executing program 39 (id=8587): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a800800", @ANYRES16=r2], 0x44}}, 0x2000850) 5m41.591210918s ago: executing program 40 (id=9690): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000380), 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000014c0)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_flow={{0x9}, {0x24, 0x2, [@TCA_FLOW_EMATCHES={0x20, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1, 0x8, 0x6}, {0x4, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0xd0) 5m23.843897281s ago: executing program 41 (id=9745): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001000370427bd0900ffffffff00000000", @ANYRES32=r2, @ANYBLOB="0b1b050000000000240012800900010069706970000000001400028008000100", @ANYRES32=r2, @ANYBLOB="08000300ff"], 0x44}, 0x1, 0x0, 0x0, 0xc045}, 0x20004) sendmmsg$inet(r0, &(0x7f0000002780)=[{{&(0x7f0000000000)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000040)="01d51675127d4d9bb56d3b5c37d479a53219210398cdc5c62e6ab4438458c4321c8a298edffa671124", 0x29}], 0x1, &(0x7f0000000240)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @dev={0xac, 0x14, 0x14, 0x23}, @remote}}}], 0x20}}], 0x1, 0xc0) 5m12.170944733s ago: executing program 42 (id=10144): r0 = openat$selinux_status(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000040)={{0x67, @multicast1, 0x4e23, 0x4, 'lc\x00', 0x10, 0x7fffffff, 0x6e}, {@empty, 0x4e21, 0x3, 0x2, 0x3, 0x3}}, 0x44) syz_usb_connect$uac3(0x0, 0x80, &(0x7f0000000100)=ANY=[@ANYBLOB="1201010200000040b421810040"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x28}, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\b\x00\b', 0x8, 0x3a, 0x0, @loopback, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x3, 0x31}}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x26}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xfffffffffffffd2e, &(0x7f0000000000)='e', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x48) 5m0.604374342s ago: executing program 43 (id=10319): r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, 0x0) socket(0x11, 0x800000003, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x5, {{0x2, 0x400, @multicast2}}, {{0x2, 0x4e22, @loopback}}}, 0x108) r2 = syz_open_procfs(0x0, &(0x7f0000002180)='net/mcfilter\x00') preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000f00)=""/46, 0x2e}], 0x1, 0x5e, 0x10003ff) 4m50.979219151s ago: executing program 44 (id=10475): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0xd90}}, 0x10, &(0x7f0000000480)=[{&(0x7f0000000180)="f7", 0x79ca}], 0x1}, 0x0) 4m44.638685337s ago: executing program 45 (id=10553): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000100)=':-\x00') syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x42, 0x0, 0x0) syz_usb_connect$midi(0x5, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000003880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000038c0)=@newlink={0x3c, 0x10, 0x801, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, [@IFLA_GROUP={0x8}, @IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x2, 0x0, 0x1, {0xc, 0x1, 0x0, 0x1, [{0x8, 0x1d, 0x0, 0x0, 0x1}]}}]}]}, 0x3c}}, 0x0) 3m17.704320954s ago: executing program 46 (id=12007): bpf$OBJ_PIN_PROG(0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x8}, 0x24, 0x5f2, 0x11000, 0x7, 0x40, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000400)=""/4096, 0x10c4}], 0x1}}], 0x4000210, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 2m57.119219307s ago: executing program 47 (id=12321): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000010000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6a2e4e0ed11fabf6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2m43.078377981s ago: executing program 48 (id=12564): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) socket(0xa, 0x3, 0x3a) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00') r1 = socket$netlink(0x10, 0x3, 0xb) open_by_handle_at(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="20000000f1000000", @ANYRES64=r1], 0x0) 1m47.50208997s ago: executing program 9 (id=13376): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='devices.list\x00', 0x26e1, 0x0) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000000700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f00000001c0), &(0x7f0000000280)=r0}, 0x20) 1m47.421536402s ago: executing program 9 (id=13380): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x38, 0x10, 0x439, 0x0, 0x4, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}}, 0x0) sendto$packet(r0, &(0x7f0000000240)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc9", 0x26, 0x40, &(0x7f0000000540)={0xc9, 0x0, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) 1m47.355919073s ago: executing program 49 (id=13381): socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f00000000c0)={[{@user_xattr}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0xf}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = open(&(0x7f0000000040)='./file1\x00', 0x8102, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r1, 0x0, 0x0, 0x8ffff) sendfile(r0, r0, 0x0, 0x800000020) 1m47.333620324s ago: executing program 9 (id=13384): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="0d2e0020fdcc6177d93790ff", @ANYRES32, @ANYBLOB="0800000000000000950000000000000045"], 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6_vti0\x00'}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="550ae0d309"], &(0x7f0000000000)='GPL\x00'}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f1, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f0, &(0x7f0000000080)) 1m47.294029814s ago: executing program 9 (id=13385): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 1m47.251513165s ago: executing program 9 (id=13387): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x10000000000005, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x7}, 0x0, 0x0, 0xfffc, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) read(r1, 0x0, 0x0) 1m46.512358531s ago: executing program 9 (id=13392): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000280)='./file0\x00', 0x202) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x6a, 0x0, &(0x7f0000000480)="07003d8cfa7dbecb9093317efc4e550fe40f9d55dfe5b573b9861c207b358592cca77412039e58ef41cb725dc463f283798900589cc275a3f91190a5ea9235ae83bfac8ecc05032000246ad645e09c87c5a817ef4b935f4509ccfb39e1106269dcd6a2a0b9abd30f947e", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 1m46.503572371s ago: executing program 50 (id=13392): ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r0 = creat(&(0x7f0000000100)='./file0\x00', 0x7a) r1 = inotify_init() inotify_add_watch(r1, &(0x7f0000000280)='./file0\x00', 0x202) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x6a, 0x0, &(0x7f0000000480)="07003d8cfa7dbecb9093317efc4e550fe40f9d55dfe5b573b9861c207b358592cca77412039e58ef41cb725dc463f283798900589cc275a3f91190a5ea9235ae83bfac8ecc05032000246ad645e09c87c5a817ef4b935f4509ccfb39e1106269dcd6a2a0b9abd30f947e", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) write$binfmt_elf32(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="7f454c46000000000000000000000000030006000000000000000000380000000000000000191bda0000200001000000000280000000000003"], 0x69) close(r0) execve(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) 59.060832015s ago: executing program 4 (id=14143): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x3c, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r3, {0xc}, {}, {0xe, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}, @TCA_CHAIN={0x8, 0xb, 0x4000000}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) close_range(r0, 0xffffffffffffffff, 0x0) 58.946551478s ago: executing program 4 (id=14146): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x24, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0x4}, {0xffff, 0xffff}, {0x2, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 58.783633151s ago: executing program 4 (id=14148): perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(0xffffffffffffffff, 0x0, 0x0) unshare(0x400) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000006"], 0x66) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c000000040000000400000009"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0xffffffff, r1}, 0x38) 58.636617435s ago: executing program 4 (id=14151): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)='./file0/file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000180)='./file0/file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1105858, 0x0) umount2(&(0x7f00000001c0)='./file0/file0\x00', 0x0) 58.264437493s ago: executing program 4 (id=14152): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x2c008050) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffff0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x10, 0x2, 0x0) io_setup(0x239f, &(0x7f0000000380)) syz_io_uring_setup(0x6621, &(0x7f0000000000)={0x0, 0x4c1f, 0x10, 0x1, 0x15c}, &(0x7f0000000200), &(0x7f00000000c0), &(0x7f0000000000)) 58.085649126s ago: executing program 4 (id=14158): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x22020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) 58.052794827s ago: executing program 51 (id=14158): socketpair$unix(0x1, 0x2, 0x0, 0x0) unshare(0x22020400) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) r1 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) r2 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000040)={r1, r0}) 56.687129116s ago: executing program 6 (id=14170): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd8073a46b08b94214d816f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb4147000001000000008f2b9000f22425e4097ed62cbc891061017cfa6f6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe68db8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3542646bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b40)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r3}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) sendmsg$inet(r1, &(0x7f0000000500)={0x0, 0x4003e80, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x20000281}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) 56.490229131s ago: executing program 6 (id=14174): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=ANY=[@ANYBLOB="09000000040000000400000007"], 0x48) r2 = fsmount(r0, 0x1, 0x0) fchdir(r2) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000000200)='.\x00', 0x400) bpf$OBJ_PIN_MAP(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000000)='./file0\x00', r1}, 0x18) 56.404575703s ago: executing program 6 (id=14175): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0xce23, @broadcast}}}, &(0x7f0000000040)=0x84) getsockopt$bt_hci(r0, 0x84, 0x80, &(0x7f0000000000)=""/4087, &(0x7f0000001040)=0xff7) 56.366631613s ago: executing program 6 (id=14176): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x10000, &(0x7f0000000800)=ANY=[@ANYBLOB='nodots,showexec,dots,uid=', @ANYRESHEX=0xee00, @ANYBLOB=',check=normal,fmask=00000000000000000000002,sys_immutable,nodots,dots,nodots,nodots,nodots,fmask=00000000000000000177777,dots,quiet,nodots,nodots,check=relaxed,nodots,umask=00000000000000000076645,nodots,nodots,nfs=stale_rw,nodots,smackfsfloor=fmask,defcontext=unconfined_u,permit_directio,permit_directio,fscontext=staff_u,seclabel,euid>', @ANYRESDEC, @ANYRES64, @ANYRESOCT], 0x1, 0x1f5, &(0x7f0000000600)="$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") syz_mount_image$vfat(&(0x7f00000006c0), &(0x7f0000001040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x100800, 0x0, 0x1, 0x0, &(0x7f0000000080)) fstat(0xffffffffffffffff, 0x0) mount$bpf(0x0, 0x0, 0x0, 0x2010000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) syz_io_uring_setup(0x4b6, 0x0, 0x0, 0x0, 0x0) rename(&(0x7f0000000000)='./file0\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') 56.192386057s ago: executing program 6 (id=14180): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000b11000/0x3000)=nil, &(0x7f0000413000/0x4000)=nil, &(0x7f000096a000/0x2000)=nil, &(0x7f0000f76000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000882000/0x1000)=nil, &(0x7f0000ff4000/0xb000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000400)='./file0\x00', 0x1000000, &(0x7f0000000140)=ANY=[@ANYBLOB='block=0x0000000000000800,nocompress,cruft,map=off,showassoc,hide,iocharset=ascXi,unhide,uid=', @ANYRESDEC, @ANYBLOB=',\x00'], 0x1, 0x3ec, &(0x7f0000000440)="$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") prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x6) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) 55.224350698s ago: executing program 6 (id=14193): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setreuid(0x0, 0xee00) r0 = socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socket$inet_udp(0x2, 0x2, 0x0) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) 55.212114938s ago: executing program 52 (id=14193): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x7, 0x3}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) setreuid(0x0, 0xee00) r0 = socket$netlink(0x10, 0x3, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) socket$inet_udp(0x2, 0x2, 0x0) write(r0, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r0) 40.866562818s ago: executing program 2 (id=14379): prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) r0 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f00000010c0)='.\x00', &(0x7f0000000000)='proc\x00', 0x80, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='ns\x00') readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) 40.819268489s ago: executing program 2 (id=14381): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x1f5, 0x4) setsockopt$inet_int(r0, 0x0, 0x14, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 40.222987712s ago: executing program 2 (id=14387): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x437, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r1, 0x50561}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @local}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket(0x10, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x4) sendmmsg$inet(r2, &(0x7f0000000bc0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @dev={0xac, 0x14, 0x14, 0x32}, @rand_addr=0x64010100}}}], 0x20}}], 0x1, 0x40) 40.119511194s ago: executing program 2 (id=14389): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x18f883, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) umount2(&(0x7f00000002c0)='./file0/../file0\x00', 0xa) 39.932387988s ago: executing program 2 (id=14391): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x89, @broadcast, 0x4e20, 0x6, 'dh\x00', 0x0, 0x10000004, 0x33}, 0x2c) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) 39.708244383s ago: executing program 2 (id=14393): connect$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 39.675392254s ago: executing program 53 (id=14393): connect$unix(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) pause() syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 26.767853882s ago: executing program 5 (id=14596): ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x3, 0x3}, 0x10c0e8, 0x0, 0x7, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) write$P9_RXATTRWALK(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40080) syz_open_dev$tty20(0xc, 0x4, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="79610a000000fedbdf257e00"], 0x20}, 0x1, 0x2000, 0x0, 0x8004800}, 0x8) 26.550418247s ago: executing program 5 (id=14605): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000340)={0x5, 0x0, 0xfffffe3f, 0xfffffffd, 0x0, "4d6b55f67e02bfc6aafbd98ec07c05a8765ccb", 0x8000388, 0x800}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000a40)=0x6) readv(r0, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/16, 0x10}], 0x1) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) 26.40383844s ago: executing program 5 (id=14613): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7d, 0x0, @perf_config_ext={0x3, 0xffffffffffffffff}, 0x80, 0x0, 0x0, 0x1, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x20000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000240)={0x1, [0x0]}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) syz_emit_ethernet(0x4a, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008"], 0x58}}, 0x0) 26.106190266s ago: executing program 5 (id=14620): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8052, &(0x7f00000005c0), 0x6, 0x4ef, &(0x7f0000000740)="$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") mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x10b440, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000280)='./file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x28a5291, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') lseek(r0, 0x10001, 0x0) 25.856407022s ago: executing program 5 (id=14622): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_rdma(0x10, 0x3, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000400000008000000000000", @ANYBLOB="0000000000000000000000000000000000000000979e20f6c6be2cd30f391dde213b823755a4289926e57cdb31ca57bf2c5e0fc271e750983f704b4917727dff6afca92bd53b1449cf42"], 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000180)=r0, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503"], 0x30}, 0x40880) 25.305878843s ago: executing program 5 (id=14634): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='^', 0x1) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000140)="da562c0050", 0x5}], 0x1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 25.282691035s ago: executing program 54 (id=14634): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x80782, 0x0) ioctl$TCXONC(r1, 0x540a, 0x0) write(r1, &(0x7f0000000100)='^', 0x1) writev(r1, &(0x7f0000000480)=[{&(0x7f0000000140)="da562c0050", 0x5}], 0x1) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 2.343792049s ago: executing program 1 (id=15012): syz_clone3(&(0x7f0000000540)={0x901400, &(0x7f0000000040), 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) wait4(r0, 0x0, 0x8, 0x0) 2.181156263s ago: executing program 8 (id=15020): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x3fd, &(0x7f0000000500)=0x0) io_submit(r2, 0xf000, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000001c0)='m', 0xfffffdfc}]) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000399000/0x4000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f000038b000/0x2000)=nil, &(0x7f0000a47000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000466000/0x2000)=nil, &(0x7f00003df000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.130278644s ago: executing program 1 (id=15021): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)={0x30, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}}, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f00000002c0)=@ethtool_sfeatures={0x1f, 0x1, [{0xfe, 0x8000ffa1}]}}) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x7, 0x0, 0x0) 2.008282377s ago: executing program 1 (id=15022): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x100402, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xdffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd63"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x14, 0x7, 0xa, 0x401, 0x0, 0x0, {0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x20000014) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.700081543s ago: executing program 1 (id=15023): r0 = syz_open_dev$loop(&(0x7f0000000000), 0x5, 0x189100) accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x80000) bind$llc(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_secret(0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000340)={0x0, 0x0, 0xffffffffffffffff, 0x7000, 0x80000}) lseek(0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000080)={0x1, 0x0, 0x98, &(0x7f00000004c0)={0x0, 0x100000100000000, 0x11}}) getuid() 1.614861205s ago: executing program 1 (id=15034): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x44010) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0xff81) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0x801, 0xfffffffd, 0x8000000, {0x0, 0x0, 0x0, 0x0, 0x0, 0x404a3}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000300)="89", 0x1, 0x4044840, 0x0, 0x0) 1.543893596s ago: executing program 0 (id=15026): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, @perf_bp={0x0, 0xf}, 0x10040, 0x0, 0x0, 0x9, 0x3, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mknod$loop(0x0, 0x6000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000840)={0x20, r1, 0x719, 0x70bd2b, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x880) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) 1.256939063s ago: executing program 8 (id=15027): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf47, 0x4cc, 0xffff, 0x9dff, 0x1, "8003e3ffff072000"}) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1010000, &(0x7f0000000180)=ANY=[@ANYBLOB='utf8=1,iocharset=default,iocharset=iso8859-9,shortname=winnt,uni_xltf8=1,shortname=winnt,shortname=winnt,shortname=lower,utf8=0,codepage=862,utf8=0,shortname=fower,rodir,shortname=lower,nonumtail=0,\x00'], 0x1, 0x370, &(0x7f0000000400)="$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") write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x3, 0x7fff, 0x16, "b0bf2ebb48c849ac0000000003000018bfff40"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0xff) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x12) 1.205712374s ago: executing program 8 (id=15028): r0 = socket$netlink(0x10, 0x3, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300), 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) 1.184085604s ago: executing program 3 (id=15029): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xe8c, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe58, 0x2, [@TCA_MATCHALL_ACT={0xe54, 0x2, [@m_pedit={0xe50, 0x1, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{0x3, 0xff, 0x3, 0x8000, 0x10001}, 0x6, 0xa}, [{0x101, 0x1663, 0x7, 0x3, 0x7f}, {0x1, 0x6, 0xffffff01, 0x200, 0x7f, 0x6}, {0x7, 0x9, 0xfffffffb, 0x40, 0xffffff00}, {0x8, 0x2, 0x527, 0x9, 0x101, 0x567}, {0xfffff001, 0x0, 0xff, 0x4, 0x9dc, 0xfff}, {0x80000001, 0xc, 0x2, 0x9, 0x2, 0xdb42}, {0x8000, 0x5, 0x1ff, 0x3, 0x8, 0x1}, {0xb, 0x158326f1, 0xc000000, 0x5, 0x1, 0xfffffffa}, {0x80000001, 0xfff, 0x3ff, 0x4, 0xfbe, 0x8100}, {0x2, 0x6, 0x6, 0x5, 0x80000000, 0xc}, {0x230, 0x7, 0x401, 0x0, 0x3, 0x40}, {0xffff, 0x0, 0x7, 0xff, 0x1ff, 0x6d}, {0x6, 0xfffffff7, 0x8000, 0x6d, 0x39a875de, 0xfffffffe}, {0xfff, 0xd2, 0x1, 0x1dc, 0x4, 0x7fffffff}, {0x5, 0x0, 0xfffffff5, 0xf, 0x6, 0x5}, {0x4, 0x1, 0x3, 0x49d7, 0x4, 0x10001}, {0x6, 0x7fffffff, 0x7fff, 0x94000000, 0x8, 0xc4}, {0xfff, 0x8eb, 0x5, 0x6, 0xc, 0x101}, {0xfff, 0x0, 0x7, 0x3, 0xffffffff, 0xfffffc8f}, {0x9, 0x3, 0x2d, 0xfff, 0xb, 0x3}, {0x1ff, 0xff, 0x6, 0x1, 0xffff510d, 0x8}, {0x9, 0x5, 0xe5, 0x1, 0x7, 0x8}, {0x1457, 0x50, 0x3, 0x1, 0x66fa}, {0x7f, 0x0, 0x3, 0x2}, {0x2, 0x40, 0x101, 0x8, 0x80, 0x7}, {0xffff5d0a, 0x80, 0x3, 0x4, 0x368, 0x7}, {0x7, 0x4, 0x7ff, 0x24000000, 0xff, 0xc8bf}, {0x8000, 0x8, 0x9, 0xe, 0x2, 0xf6}, {0x2, 0xb, 0x3, 0x9, 0x0, 0x8}, {0x5, 0x8, 0x7, 0x7, 0x25, 0x3}, {0xfffffff8, 0x7fff, 0x200, 0xfffffffc, 0x7, 0x672ba19a}, {0x0, 0x3, 0xa, 0x1, 0x8, 0x1}, {0x523, 0x6, 0xf, 0x8f6c, 0x6, 0x2}, {0xfffffffe, 0x7fffffff, 0x10001, 0x5, 0x0, 0xa4}, {0x5, 0x4, 0x3, 0x0, 0x7, 0x6}, {0x0, 0x0, 0xb, 0xbb38, 0x2, 0x5}, {0x40ef74fd, 0x3, 0x8, 0x10001, 0x7fffffff, 0x5}, {0x2, 0x3, 0x7fffffff, 0x40, 0x0, 0x80000000}, {0x100, 0x2, 0x7, 0x1, 0x1, 0x5}, {0x6, 0x80000001, 0x3ff, 0x7, 0x7, 0x2}, {0xffffffff, 0x7, 0x9, 0x7f, 0x4, 0xffffb8ec}, {0x8, 0x6, 0x7, 0x8000, 0x8a, 0x100}, {0x8, 0x8, 0x2, 0x1, 0xffffff80, 0x5}, {0x9, 0x3, 0x7, 0x4, 0xe5, 0x100}, {0x9, 0x1, 0x0, 0x6, 0x0, 0xfffffffa}, {0xb, 0x8, 0x8001, 0x8000, 0xfffffffb, 0x9}, {0x9, 0x4, 0xf, 0xcdd, 0x80000001, 0x4}, {0x6, 0xc0d9, 0x5, 0xd, 0xfffff954, 0x10000}, {0x5, 0x0, 0x5, 0x1, 0x4, 0x4}, {0xe, 0xd918, 0xd, 0x5, 0x1, 0x1}, {0x1c400000, 0x1, 0x9a, 0x8, 0x200, 0xd7}, {0xe4, 0x9, 0x1, 0x8, 0x2, 0x8}, {0x7, 0x9, 0x5, 0x9, 0xf}, {0x6, 0x0, 0x0, 0x695c0e03, 0x1, 0x6}, {0xd, 0x401, 0x3ff, 0xb26, 0x6, 0x5}, {0x1, 0xfffffff2, 0xff, 0x400, 0x9, 0x9}, {0x2, 0x3, 0x4, 0x6, 0x414, 0x7fff}, {0x5, 0x10000, 0xfb, 0x7f, 0x8, 0x1}, {0x15d356d2, 0x0, 0x80000000, 0x80000000, 0x3, 0x6}, {0x2, 0x4, 0x6, 0x4, 0x7fffffff, 0x4}, {0x4, 0x0, 0x9, 0x8, 0x10001, 0x2}, {0x1000, 0x5, 0x3, 0x0, 0x1, 0x4b78}, {0x8001, 0x3, 0x1, 0x13, 0x5, 0x1}, {0x6, 0x2eb, 0xa774, 0x3, 0x1, 0x9}, {0x4, 0x401, 0x1, 0x9, 0x0, 0x10}, {0x401, 0x2, 0xa65, 0x2, 0x0, 0xec}, {0x5, 0xfffff84a, 0xae8, 0x200000, 0x2, 0x4}, {0x7d82, 0x0, 0x9, 0x7e, 0xee4c, 0x9}, {0x18c, 0x4, 0x4, 0x6, 0x6, 0x4}, {0x1, 0x2, 0x6, 0x3, 0x2, 0x7}, {0xbec5, 0xf, 0x5e5, 0x80000000, 0x5, 0x1000}, {0x3, 0x24, 0x0, 0x1, 0x100, 0x6}, {0x1, 0xfffffc01, 0xe, 0x9, 0x5, 0x3}, {0x0, 0x8000, 0x4, 0x2, 0xccc2, 0xfffffffc}, {0x3, 0xfffff726, 0x80000001, 0x0, 0x1270, 0x1}, {0x6, 0x6, 0x7ff, 0xffffff00, 0x6, 0x2}, {0x1, 0x4, 0x3, 0x1ff, 0x0, 0x6}, {0x9, 0x8, 0x3, 0x5, 0x3, 0x7}, {0x6, 0x5, 0x92, 0x9, 0x0, 0x101}, {0x2, 0xcb, 0x2, 0xd0, 0x101, 0x7ff}, {0x5, 0xffff, 0x1, 0x1, 0xacf, 0x3a}, {0x6a8, 0x9, 0x6, 0x5932, 0x80, 0x3}, {0x4, 0x2, 0x273, 0xfffffe00, 0xfffffffc, 0x111}, {0x7, 0x4, 0xffffffff, 0x5, 0x7, 0x8}, {0x4, 0x0, 0x6, 0x2, 0x5}, {0xff, 0x4, 0x5, 0x9, 0xcc5, 0x6}, {0x8, 0x9, 0x0, 0x4, 0x40, 0x6378}, {0x4, 0xb, 0xffffffff, 0x0, 0x4, 0x37b}, {0x7fff, 0x4, 0x8, 0x7, 0x3, 0xb}, {0x9, 0x5, 0x3, 0x11, 0x4, 0x3}, {0x101, 0xfffff2bb, 0x10000000, 0x1, 0xa7b, 0x1aa}, {0x1ff, 0x4801ea46, 0x7, 0x5cf7, 0x7, 0x6}, {0xffff, 0x24603cae, 0xffff, 0x8, 0x80000001, 0x1}, {0x5, 0xf, 0x3, 0x7, 0x200, 0x7}, {0x7, 0x0, 0x4, 0x2, 0x8cdc, 0x3ff}, {0x9, 0x2, 0xb, 0x3}, {0x4e, 0x1, 0x8, 0x3, 0x1, 0x2}, {0x4, 0x2, 0x6, 0x0, 0x5, 0x956b}, {0x3, 0x4978, 0xffffffff, 0x373, 0xc, 0xd2}, {0x2, 0x2, 0x21b, 0x7, 0x5, 0x800}, {0x1ff, 0xf, 0xffffffff, 0x3, 0x401, 0x3}, {0xc, 0xd98, 0x1, 0x5, 0x9, 0x7dcf}, {0x2e2, 0x7, 0xb, 0x7fffffff, 0x6cd, 0xbc}, {0x8001, 0x10, 0x3, 0x400, 0x240}, {0x7f, 0x8, 0x5, 0x6, 0x7, 0x3}, {0x2, 0x4, 0xf, 0x9, 0x4, 0x8}, {0x7, 0x6, 0x1, 0x4, 0x0, 0x3}, {0xf, 0x4, 0x2, 0x7ff, 0x0, 0x8}, {0x2000000, 0x3, 0x10001, 0x0, 0x2, 0xa71}, {0xffff6e9f, 0x0, 0x10000, 0x80000000, 0x5, 0x4}, {0x8, 0xffffff81, 0x3, 0xce1b, 0x7ff, 0x7}, {0x200000, 0x5, 0x40, 0xfffffc01, 0xfffffffa, 0x5}, {0x5, 0x696, 0x2040, 0x6, 0x6}, {0x4, 0xffffffff, 0x7, 0x6, 0x0, 0xffffffc0}, {0x9, 0x9, 0x4, 0xffffffff, 0x3, 0xffff7fff}, {0x80000001, 0x8001, 0x6, 0xf000000, 0x6, 0x6}, {0x398, 0x81, 0x80, 0xfaa6, 0xf, 0xa}, {0xbf25, 0xf, 0xff, 0x4, 0x5, 0x8}, {0x8000, 0x9, 0x7, 0x2f50, 0x7, 0x8}, {0x40, 0x9, 0x3, 0x8, 0x63e, 0x2}, {0xfffffff9, 0xe, 0xfffffeff, 0x962, 0x1, 0x5}, {0x8, 0x4, 0x7, 0x1000000, 0xfffff801, 0x9}, {0x384, 0x8, 0x9f9, 0x1, 0x5, 0x1ff80000}, {0x4, 0x400, 0x5, 0x4, 0x2, 0x1}, {0x1b7, 0x638, 0x8, 0x7, 0x6, 0x9ab}, {0x401, 0x5, 0xe, 0x1400, 0x7, 0x1}, {0x4bb, 0x1, 0x3, 0x7, 0x3, 0x6}, {0xa, 0xaac, 0xe09, 0x0, 0x1, 0x5}], [{0x4, 0x1}, {0x5}, {0x3}, {0x5}, {0x4, 0x1}, {0x4, 0x1}, {}, {0x0, 0x1}, {0x2, 0x1}, {}, {0x5}, {0x5, 0x1}, {0x4, 0x1}, {}, {0x4}, {0xa, 0x1}, {0x5, 0x1}, {0x3}, {0x4, 0x1}, {0x4}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x2}, {0x3}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0x1}, {0x3}, {0x0, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x2}, {0x2, 0x1}, {}, {0x1, 0x1}, {}, {0x2}, {0x4}, {0x1}, {0x1}, {0x3, 0x1}, {0x4}, {0x5}, {0x1}, {0x3}, {0x4, 0x1}, {0x1, 0x1}, {0x3}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x2, 0x1}, {0x5}, {0x5}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x5}, {0x1, 0x1}, {0x1}, {}, {0x0, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x1, 0xef03a6718bc9ce6c}, {0x4, 0x1}, {0x3}, {0x1, 0x1}, {0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x0, 0x2}, {0x1}, {0x2}, {0x2, 0x1}, {0x1}, {0x98bcf35d982431ef}, {0x2}, {0x2, 0x1}, {0x4, 0x1}, {0x3}, {0x3, 0x1}, {0x1, 0x1}, {0x1}, {0x0, 0x1}, {0x1}, {0x3}, {0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x1}, {0x5}, {0x3}, {0x3, 0x1}, {0x4}, {0x1}, {0x2}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x5, 0x1}, {}, {0x3, 0x1}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x2, 0x1}], 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xe8c}, 0x1, 0x0, 0x0, 0x240440d5}, 0x0) 996.125698ms ago: executing program 1 (id=15032): timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) creat(&(0x7f0000000080)='./file0\x00', 0x2b) acct(&(0x7f0000000100)='./file0\x00') 952.842749ms ago: executing program 0 (id=15033): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00', 0x7f}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) 902.00758ms ago: executing program 0 (id=15035): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0x200000000000000}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_MCE_KILL(0x21, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000f40)=ANY=[@ANYBLOB="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"], 0x138}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 895.92717ms ago: executing program 3 (id=15036): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="10000000040000000800000008000000000000", @ANYBLOB="0000fdffffffffffffeffffffffd5f", @ANYRES16], 0x48) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001800dd8d000000000000000002140004ff000006"], 0x1c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x0, {0x2, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2900}}, 0x1c}}, 0x8c0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d7dda4108911930800000102030109022400020000000009046802006e02c000090468"], 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4000000000b) request_key(&(0x7f00000001c0)='keyring\x00', &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0xfffffffffffffffa) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000011740)=@newtaction={0x14, 0x30, 0x53b}, 0x14}}, 0x0) 735.198924ms ago: executing program 0 (id=15039): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x9}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x899, 0x0) madvise(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x1, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x20000000) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) 708.440235ms ago: executing program 7 (id=15040): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x124, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) setsockopt$inet6_IPV6_DSTOPTS(0xffffffffffffffff, 0x29, 0x3b, 0x0, 0x8) socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001840)={0x64, 0x19, 0x1, 0x70bd28, 0x25dfdbfb, {0x1d, 0xd601, 0x9}, [@nested={0x50, 0x10, 0x0, 0x1, [@nested={0x4c, 0xd5, 0x0, 0x1, [@nested={0x45, 0xcd, 0x0, 0x1, [@generic="3d4def163029b7d586404c8c9eb855e2ce74744ab81f164c8f21749ad92696225ffcd6ae31fb8e66717be4d01062924dc8327766831fd1198b0c9525908f7cfd82"]}]}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x5}, 0x0) 649.123966ms ago: executing program 7 (id=15041): ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wpan4\x00'}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffffc7}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000100)={r1, 0x6, 0x28000000}, 0x0) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x969e, 0x1f480, 0x0, 0x39a}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x33, 0x3d, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x1e, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xfffffffffffffdce) io_uring_enter(r2, 0x8ae, 0x6931, 0x17, 0x0, 0x0) 559.290288ms ago: executing program 7 (id=15042): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "00ee"}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 558.861618ms ago: executing program 7 (id=15043): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) close(0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40000c0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 472.42321ms ago: executing program 7 (id=15044): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000003c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000240), 0x12) pread64(r1, &(0x7f0000000340)=""/69, 0x45, 0x3) 449.92302ms ago: executing program 7 (id=15045): r0 = socket$packet(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0b00000008000000070000000300000001"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0xfffffffffffffe8b, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)={0x14, 0x23, 0x409, 0x70bd25, 0x25dfd3ff, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24040811}, 0x8410) 322.673193ms ago: executing program 0 (id=15046): r0 = creat(0x0, 0xecf86c37d53049cc) close(r0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0xc, &(0x7f0000000640)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa3d8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x7, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r2 = socket$kcm(0x11, 0x2, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x28, &(0x7f0000000040), 0x4) 256.828304ms ago: executing program 3 (id=15047): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0100000004000000080000000d"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000020000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000004000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000810000087b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 256.457654ms ago: executing program 8 (id=15048): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x9, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$selinux_create(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$sg(&(0x7f00000004c0), 0x0, 0x20c02) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="aefdda9d242003005a90f57f07703aeff0f64eb9ee07962c220a2e11b44e65d76641cb010852f426072a", 0x2a}], 0x1) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) 230.177665ms ago: executing program 0 (id=15049): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e23, 0x39, @empty, 0xf66e}}, 0x24) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0xfffffffffffffd6b, 0x0, 0x0, &(0x7f00000000c0)=[@ip_tos_int={{0x18, 0x110, 0x1, 0x2000000}}], 0x18, 0x4c00}, 0x0) recvfrom$rxrpc(r1, 0x0, 0x0, 0xe8ce25b3ffff0000, 0x0, 0x0) 221.893215ms ago: executing program 3 (id=15050): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x2}}, {{0xa, 0x0, 0xffffffff, @remote}}}, 0x108) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0xffff, 0x0, @mcast1={0xff, 0x7}, 0x10000}}, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f00000009c0)={0x0, {{0xa, 0x4, 0x0, @mcast1={0xff, 0x7}, 0x3}}, {{0xa, 0xfffd, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 165.196406ms ago: executing program 3 (id=15051): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r1], 0x78}, 0x1, 0x0, 0x0, 0x24008040}, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r3 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000380)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x2, 0x0, 0x2b}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1f, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x16}}, {0x4e20, 0x4e20, 0xfac, 0x0, @opaque="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"}}}, 0xfce) 148.789406ms ago: executing program 8 (id=15052): syz_open_dev$tty1(0xc, 0x4, 0x1) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000002c0)='./cgroup/cgroup.procs\x00', &(0x7f0000000300)=[0x0], 0x0, 0x0, 0x1}}, 0x40) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) close_range(r1, 0xffffffffffffffff, 0x0) 90.289138ms ago: executing program 8 (id=15053): socket$packet(0x11, 0x2, 0x300) socket(0x2, 0x5, 0x300) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="180000006a00040025bd1b13b3ecec7000fcdbdf25"], 0x18}, 0x1, 0x0, 0x0, 0x4004010}, 0x880) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x518, 0x0, 0x360, 0x1a0, 0x1a0, 0x1a0, 0x448, 0x448, 0x448, 0x448, 0x448, 0x6, 0x0, {[{{@ipv6={@remote, @private1={0xfc, 0x1, '\x00', 0x40}, [0xff, 0x0, 0x0, 0xffffff00], [0x0, 0xffffffff], 'pim6reg\x00', 'netdevsim0\x00', {}, {0xff}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x599c, 0x6}}}, {{@ipv6={@private1, @mcast2, [0xffffffff, 0xff, 0xff000000, 0xff000000], [0xff, 0x0, 0xff000000, 0xffffffff], 'veth0_vlan\x00', 'wlan0\x00', {}, {}, 0x11, 0x9, 0x5, 0x23}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xd0}}, {{@ipv6={@mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, [0xffffffff, 0xff, 0xffffff00], [0x0, 0xff000000, 0xffffff00, 0xff000000], 'pimreg1\x00', 'vlan1\x00', {0xff}, {}, 0x5e, 0x0, 0x3, 0x17}, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@multicast2, @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x27, 0xe, 0x3}}}, {{@ipv6={@local, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff000000, 0xff000000], [0x0, 0x0, 0xff], 'tunl0\x00', '\x00', {}, {0xf7d589580f149d60}, 0x9d, 0x45, 0x7}, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0xc, {0x4}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x578) 0s ago: executing program 3 (id=15054): setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x3, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x9}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) kexec_load(0xfffbfffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) kernel console output (not intermixed with test programs): 4.123043][T12720] EXT4-fs error (device loop4): ext4_free_inode:356: comm syz.4.13707: bit already cleared for inode 11 [ 754.138863][T12720] loop4: lost filesystem error report for type 5 error -117 [ 754.141062][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 754.142159][T12720] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 754.148415][ C1] EXT4-fs (loop4): initial error at time 3930757262: ext4_free_inode:356 [ 754.148436][ C1] EXT4-fs (loop4): last error at time 3930757262: ext4_free_inode:356 [ 754.189226][T12720] loop4: lost filesystem error report for type 5 error -117 [ 754.225531][T12720] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 754.248368][T12720] loop4: lost filesystem error report for type 5 error -117 [ 754.257176][T12720] EXT4-fs (loop4): 1 orphan inode deleted [ 754.272176][T12720] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 754.394355][T11377] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 754.483088][T12752] syz.4.13720 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 754.520837][T12757] syzkaller1: entered promiscuous mode [ 754.529353][T12757] syzkaller1: entered allmulticast mode [ 754.539016][T12754] can: request_module (can-proto-0) failed. [ 754.647493][T12766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 754.681493][T12766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 754.752019][T12770] netlink: 'syz.5.13727': attribute type 1 has an invalid length. [ 754.768145][T12770] netlink: 224 bytes leftover after parsing attributes in process `syz.5.13727'. [ 754.859950][T12773] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 755.097903][T12796] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13739'. [ 755.253574][T12810] lo speed is unknown, defaulting to 1000 [ 755.370985][T12816] lo speed is unknown, defaulting to 1000 [ 756.193565][T12839] loop0: detected capacity change from 0 to 512 [ 756.226728][T12834] loop5: detected capacity change from 0 to 1024 [ 756.228936][T12839] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 756.248829][T12834] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 756.280610][T12839] EXT4-fs: error: could not find journal device path [ 756.320304][T12847] futex_wake_op: syz.4.13759 tries to shift op by 144; fix this program [ 756.369466][T12834] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 756.447910][T12834] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.588165][T12856] loop4: detected capacity change from 0 to 512 [ 756.684992][T12856] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 756.745324][T12856] EXT4-fs error (device loop4): ext4_quota_enable:7228: comm syz.4.13761: Bad quota inum: 2, type: 1 [ 756.776418][T12856] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 756.857228][T12862] loop0: detected capacity change from 0 to 512 [ 756.897166][T12862] EXT4-fs: Ignoring removed bh option [ 756.927713][T12862] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 756.959187][T12862] EXT4-fs (loop0): 1 truncate cleaned up [ 756.974681][T12862] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 757.024253][T11377] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 757.070788][T11329] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.154471][T12880] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13771'. [ 757.215583][T12884] loop4: detected capacity change from 0 to 4096 [ 757.225452][T12884] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 757.249024][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 757.249038][ T28] audit: type=1400 audit(3930757265.665:4602): avc: denied { write } for pid=12883 comm="syz.4.13773" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 757.302616][T12886] loop6: detected capacity change from 0 to 512 [ 757.306902][ T28] audit: type=1400 audit(3930757265.675:4603): avc: denied { write } for pid=12883 comm="syz.4.13773" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 757.330994][ T28] audit: type=1400 audit(3930757265.705:4604): avc: denied { write } for pid=12883 comm="syz.4.13773" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 757.349107][T12886] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 757.353302][ T28] audit: type=1400 audit(3930757265.705:4605): avc: denied { write } for pid=12883 comm="syz.4.13773" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 757.353339][ T28] audit: type=1400 audit(3930757265.705:4606): avc: denied { write } for pid=12883 comm="syz.4.13773" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 757.431720][T12886] EXT4-fs: error: could not find journal device path [ 757.452325][T11377] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 757.478052][T12892] loop0: detected capacity change from 0 to 2048 [ 757.517325][T12892] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 757.575556][T12897] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13777'. [ 757.603110][ T28] audit: type=1400 audit(3930757266.015:4607): avc: denied { write } for pid=12891 comm="syz.0.13776" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 757.667800][T11329] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 758.383395][T12913] lo speed is unknown, defaulting to 1000 [ 758.753235][T12930] loop6: detected capacity change from 0 to 1024 [ 758.775465][T12930] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 758.819111][T12930] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 758.848380][T12930] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 759.778116][ C0] vcan0: j1939_tp_rxtimer: 0xffff88810cafc800: rx timeout, send abort [ 759.786492][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88810cafc800: 0x2f002: (3) A timeout occurred and this is the connection abort to close the session. [ 760.340217][T12952] netlink: 28 bytes leftover after parsing attributes in process `syz.5.13798'. [ 760.352108][T12952] netlink: 'syz.5.13798': attribute type 7 has an invalid length. [ 760.380270][T12952] netlink: 'syz.5.13798': attribute type 8 has an invalid length. [ 760.384753][T12956] loop0: detected capacity change from 0 to 128 [ 760.402049][T12952] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13798'. [ 760.417102][T12961] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13813'. [ 760.445159][T12961] netlink: 32 bytes leftover after parsing attributes in process `syz.6.13813'. [ 760.449416][T12956] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 760.468782][T12961] netlink: 28 bytes leftover after parsing attributes in process `syz.6.13813'. [ 760.480177][T12961] netlink: 32 bytes leftover after parsing attributes in process `syz.6.13813'. [ 760.494074][T12956] ext4 filesystem being mounted at /74/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 760.592629][T12971] sg_write: data in/out 498016/136 bytes for SCSI command 0x0-- guessing data in; [ 760.592629][T12971] program syz.4.13803 not setting count and/or reply_len properly [ 760.610952][T12969] loop6: detected capacity change from 0 to 2048 [ 760.611452][T12970] netlink: 56 bytes leftover after parsing attributes in process `syz.1.13806'. [ 760.628161][ T28] audit: type=1400 audit(3930757269.035:4608): avc: denied { write } for pid=12955 comm="syz.0.13800" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 760.706721][T12969] Alternate GPT is invalid, using primary GPT. [ 760.715189][T12969] loop6: p1 p2 p3 [ 760.719358][T12969] loop6: partition table partially beyond EOD, truncated [ 760.826540][ T3284] udevd[3284]: inotify_add_watch(7, /dev/loop6p3, 10) failed: No such file or directory [ 760.827526][ T4674] udevd[4674]: inotify_add_watch(7, /dev/loop6p2, 10) failed: No such file or directory [ 760.832490][ T4676] udevd[4676]: inotify_add_watch(7, /dev/loop6p1, 10) failed: No such file or directory [ 761.270373][T11329] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 762.222148][T13029] loop6: detected capacity change from 0 to 512 [ 762.259825][T13029] EXT4-fs: Ignoring removed bh option [ 762.281888][T13029] EXT4-fs: inline encryption not supported [ 762.308697][T13029] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 762.414678][T13029] EXT4-fs warning (device loop6): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 762.430161][T13029] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.13831: bg 0: block 248: padding at end of block bitmap is not set [ 762.451987][T13029] loop6: lost filesystem error report for type 5 error -117 [ 762.452350][T13029] Quota error (device loop6): write_blk: dquota write failed [ 762.467336][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 762.467360][ C1] EXT4-fs (loop6): last error at time 3930757270: ext4_validate_block_bitmap:441 [ 762.503706][T13029] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota [ 762.513802][T13029] EXT4-fs error (device loop6): ext4_acquire_dquot:7041: comm syz.6.13831: Failed to acquire dquot type 1 [ 762.527318][T13029] loop6: lost filesystem error report for type 5 error -28 [ 762.545357][T13029] EXT4-fs (loop6): 1 truncate cleaned up [ 762.600818][T13029] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 762.715978][ T28] audit: type=1326 audit(3930757271.135:4609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13037 comm="syz.0.13834" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e2fbde59 code=0x7ffc0000 [ 762.797400][ T28] audit: type=1326 audit(3930757271.135:4610): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13037 comm="syz.0.13834" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e2fbde59 code=0x7ffc0000 [ 762.871766][ T28] audit: type=1326 audit(3930757271.135:4611): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13037 comm="syz.0.13834" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e2fbde59 code=0x7ffc0000 [ 762.950019][ T28] audit: type=1326 audit(3930757271.135:4612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13037 comm="syz.0.13834" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e2fbde59 code=0x7ffc0000 [ 763.019647][ T28] audit: type=1326 audit(3930757271.165:4613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13037 comm="syz.0.13834" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f21e2fbde59 code=0x7ffc0000 [ 763.115162][ T28] audit: type=1326 audit(3930757271.185:4614): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13037 comm="syz.0.13834" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e2fbde59 code=0x7ffc0000 [ 763.222637][ T28] audit: type=1326 audit(3930757271.185:4615): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13037 comm="syz.0.13834" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f21e2fbde59 code=0x7ffc0000 [ 763.296787][ T28] audit: type=1326 audit(3930757271.185:4616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13037 comm="syz.0.13834" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f21e2f7e68e code=0x7ffc0000 [ 763.572645][T10581] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 763.693755][T13052] netlink: 'syz.1.13840': attribute type 4 has an invalid length. [ 763.731982][T17895] lo speed is unknown, defaulting to 1000 [ 763.737869][T17895] sz1: Port: 1 Link DOWN [ 763.760800][ T3396] lo speed is unknown, defaulting to 1000 [ 763.767008][T13052] netlink: 'syz.1.13840': attribute type 4 has an invalid length. [ 763.822734][ T3396] lo speed is unknown, defaulting to 1000 [ 763.836423][ T3396] sz1: Port: 1 Link ACTIVE [ 763.889226][ T3396] lo speed is unknown, defaulting to 1000 [ 764.179203][T13068] syzkaller0: entered promiscuous mode [ 764.203386][T13068] syzkaller0: entered allmulticast mode [ 764.429562][T13080] loop0: detected capacity change from 0 to 8192 [ 764.455482][T13080] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 764.484708][T13080] vfat filesystem being mounted at /88/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 764.854979][T13093] lo speed is unknown, defaulting to 1000 [ 765.911677][T13122] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 766.175778][T13148] loop5: detected capacity change from 0 to 2048 [ 766.213021][T13148] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 766.287625][T13148] ext4 filesystem being mounted at /343/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 766.402639][ T7137] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.756533][T13172] loop5: detected capacity change from 0 to 256 [ 766.794364][T13172] vfat filesystem being mounted at /345/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 766.910185][T13179] loop0: detected capacity change from 0 to 512 [ 766.919979][T13179] EXT4-fs error (device loop0): ext4_orphan_get:1399: inode #14: comm syz.0.13891: invalid orphan symlink nlink 1 [ 766.932270][T13179] loop0: lost file I/O error report for ino 14 type 5 pos 0x0 len 0x0 error -117 [ 766.932533][T13179] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.13891: couldn't read orphan inode 14 (err -117) [ 766.941734][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 766.941770][ C0] EXT4-fs (loop0): initial error at time 3930757275: ext4_orphan_get:1399: inode 14 [ 766.941794][ C0] EXT4-fs (loop0): last error at time 3930757275: ext4_orphan_get:1399: inode 14 [ 766.978942][T13179] loop0: lost filesystem error report for type 5 error -117 [ 766.979688][T13179] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 767.001833][T13179] ext4 filesystem being mounted at /98/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 767.044914][T11329] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 767.157455][T13197] netlink: 4 bytes leftover after parsing attributes in process `syz.0.13898'. [ 767.201616][T13197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13898'. [ 767.284557][T13199] loop4: detected capacity change from 0 to 256 [ 767.339043][T13199] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 767.353498][T13199] vfat filesystem being mounted at /74/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 767.362630][T13205] netlink: 'syz.0.13902': attribute type 4 has an invalid length. [ 767.409265][T13205] netlink: 'syz.0.13902': attribute type 4 has an invalid length. [ 767.424565][T13199] FAT-fs (loop4): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 767.438765][T13199] FAT-fs (loop4): Filesystem has been set read-only [ 767.765704][T13220] loop5: detected capacity change from 0 to 128 [ 767.816983][T13220] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 767.845251][T13225] syzkaller1: entered promiscuous mode [ 767.850922][T13225] syzkaller1: entered allmulticast mode [ 767.856108][T13220] ext4 filesystem being mounted at /347/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 767.883005][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 767.883079][ T28] audit: type=1400 audit(3930757276.305:4662): avc: denied { write } for pid=13219 comm="syz.5.13908" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 767.979396][ T7137] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 768.015069][T13234] netlink: 'syz.6.13914': attribute type 4 has an invalid length. [ 768.027073][T13234] netlink: 'syz.6.13914': attribute type 4 has an invalid length. [ 768.203771][T13249] netlink: 'syz.5.13920': attribute type 1 has an invalid length. [ 768.229782][T13249] 8021q: adding VLAN 0 to HW filter on device bond1 [ 768.281800][T13249] macvlan0: entered promiscuous mode [ 768.290149][T13249] macvlan0: entered allmulticast mode [ 768.309252][T13249] bond1: entered promiscuous mode [ 768.314681][T13249] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 768.323938][T13249] bond1: left promiscuous mode [ 768.512528][ T28] audit: type=1400 audit(3930757276.935:4663): avc: denied { connect } for pid=13258 comm="syz.5.13923" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 768.747154][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b74d800: rx timeout, send abort [ 768.755565][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88811b74d800: 0x2f002: (3) A timeout occurred and this is the connection abort to close the session. [ 769.046058][T13287] syz.0.13934: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 769.061258][T13287] CPU: 1 UID: 0 PID: 13287 Comm: syz.0.13934 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 769.061307][T13287] Tainted: [W]=WARN [ 769.061317][T13287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 769.061336][T13287] Call Trace: [ 769.061345][T13287] [ 769.061356][T13287] __dump_stack+0x1d/0x30 [ 769.061380][T13287] dump_stack_lvl+0x95/0xd0 [ 769.061401][T13287] dump_stack+0x15/0x1b [ 769.061455][T13287] warn_alloc+0x145/0x1c0 [ 769.061495][T13287] __vmalloc_node_range_noprof+0xaa/0x11e0 [ 769.061573][T13287] ? __futex_wait+0x1fd/0x260 [ 769.061610][T13287] ? __pfx_futex_wake_mark+0x10/0x10 [ 769.061639][T13287] ? should_fail_ex+0x30/0x270 [ 769.061741][T13287] ? xskq_create+0x36/0xe0 [ 769.061766][T13287] ? should_failslab+0x8c/0xb0 [ 769.061799][T13287] vmalloc_user_noprof+0x7d/0xb0 [ 769.061880][T13287] ? xskq_create+0x80/0xe0 [ 769.061904][T13287] xskq_create+0x80/0xe0 [ 769.061926][T13287] xsk_init_queue+0x70/0xb0 [ 769.062067][T13287] xsk_setsockopt+0x3ef/0x640 [ 769.062115][T13287] ? __pfx_xsk_setsockopt+0x10/0x10 [ 769.062156][T13287] __sys_setsockopt+0x184/0x200 [ 769.062200][T13287] __x64_sys_setsockopt+0x64/0x80 [ 769.062243][T13287] x64_sys_call+0x2327/0x3020 [ 769.062277][T13287] do_syscall_64+0x136/0x3c0 [ 769.062323][T13287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 769.062384][T13287] RIP: 0033:0x7f21e2fbde59 [ 769.062407][T13287] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 769.062433][T13287] RSP: 002b:00007f21e1a17028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 769.062493][T13287] RAX: ffffffffffffffda RBX: 00007f21e3245fa0 RCX: 00007f21e2fbde59 [ 769.062508][T13287] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 769.062521][T13287] RBP: 00007f21e3053e6f R08: 0000000000000004 R09: 0000000000000000 [ 769.062538][T13287] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 769.062555][T13287] R13: 00007f21e3246038 R14: 00007f21e3245fa0 R15: 00007fff753695e8 [ 769.062584][T13287] [ 769.062609][T13287] Mem-Info: [ 769.274409][T13287] active_anon:50368 inactive_anon:10 isolated_anon:38 [ 769.274409][T13287] active_file:2855 inactive_file:27629 isolated_file:0 [ 769.274409][T13287] unevictable:0 dirty:311 writeback:0 [ 769.274409][T13287] slab_reclaimable:4389 slab_unreclaimable:28101 [ 769.274409][T13287] mapped:30863 shmem:35061 pagetables:6314 [ 769.274409][T13287] sec_pagetables:0 bounce:0 [ 769.274409][T13287] kernel_misc_reclaimable:0 [ 769.274409][T13287] free:1748780 free_pcp:16759 free_cma:0 [ 769.321925][T13287] Node 0 active_anon:201472kB inactive_anon:40kB active_file:11420kB inactive_file:110516kB unevictable:0kB isolated(anon):152kB isolated(file):0kB mapped:123452kB dirty:1244kB writeback:0kB shmem:140244kB kernel_stack:6304kB pagetables:25256kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 769.376282][T13287] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 769.406297][T13287] lowmem_reserve[]: 0 2878 7857 7857 [ 769.411779][T13287] Node 0 DMA32 free:2944088kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947716kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3524kB free_cma:0kB [ 769.443519][T13287] lowmem_reserve[]: 0 0 4978 4978 [ 769.448777][T13287] Node 0 Normal free:4035672kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:201472kB inactive_anon:40kB active_file:11420kB inactive_file:110516kB unevictable:0kB writepending:1244kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:63408kB local_pcp:59540kB free_cma:0kB [ 769.484538][T13287] lowmem_reserve[]: 0 0 0 0 [ 769.489289][T13287] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 769.511300][T13287] Node 0 DMA32: 4*4kB (M) 1*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944088kB [ 769.527822][T13287] Node 0 Normal: 4928*4kB (UME) 1817*8kB (UME) 917*16kB (UME) 218*32kB (UME) 433*64kB (UME) 243*128kB (UME) 60*256kB (UME) 62*512kB (UME) 52*1024kB (UME) 46*2048kB (UME) 910*4096kB (UME) = 4036632kB [ 769.554441][T13287] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 769.570042][T13287] 65550 total pagecache pages [ 769.609303][T13287] 33 pages in swap cache [ 769.622591][T13287] Free swap = 118204kB [ 769.631157][T13287] Total swap = 124996kB [ 769.639185][T13287] 2097051 pages RAM [ 769.653733][T13287] 0 pages HighMem/MovableOnly [ 769.673482][T13287] 81723 pages reserved [ 769.682066][T13305] netlink: 'syz.1.13942': attribute type 3 has an invalid length. [ 769.690179][T13305] netlink: 'syz.1.13942': attribute type 3 has an invalid length. [ 769.735914][T13311] netlink: 2024 bytes leftover after parsing attributes in process `syz.6.13941'. [ 769.753982][T13311] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13941'. [ 769.806563][T14073] IPVS: starting estimator thread 0... [ 769.901467][T13319] IPVS: using max 2160 ests per chain, 108000 per kthread [ 769.914216][T30908] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 769.927715][T30908] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 769.937087][T13326] loop0: detected capacity change from 0 to 2048 [ 769.956163][T13328] netlink: 16 bytes leftover after parsing attributes in process `syz.5.13950'. [ 769.971118][T13326] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 769.983648][T13326] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 770.028709][T11329] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.053879][T13333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.13951'. [ 770.177241][T13338] loop5: detected capacity change from 0 to 164 [ 770.200094][T13338] iso9660: Unknown parameter 'GPL' [ 770.538278][T13360] loop6: detected capacity change from 0 to 128 [ 770.555330][T13360] FAT-fs (loop6): bogus number of reserved sectors [ 770.580659][T13360] FAT-fs (loop6): This looks like a DOS 1.x volume, but isn't a recognized floppy size (128 sectors) [ 770.618248][T13364] syzkaller1: entered promiscuous mode [ 770.620095][T13360] FAT-fs (loop6): Can't find a valid FAT filesystem [ 770.625619][T13364] syzkaller1: entered allmulticast mode [ 770.917866][T13388] netlink: 8 bytes leftover after parsing attributes in process `syz.0.13977'. [ 771.084438][T13399] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13982'. [ 771.230232][T13412] lo speed is unknown, defaulting to 1000 [ 771.469192][T13426] syzkaller1: entered promiscuous mode [ 771.484080][T13426] syzkaller1: entered allmulticast mode [ 772.345333][T13512] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14030'. [ 772.359224][T13512] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14030'. [ 772.488972][T13516] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 772.563344][T13526] loop0: detected capacity change from 0 to 512 [ 772.570163][T13526] EXT4-fs: Ignoring removed nobh option [ 772.577100][T13526] EXT4-fs (loop0): failed to initialize system zone (-117) [ 772.584755][T13526] EXT4-fs (loop0): mount failed [ 772.802947][ T28] audit: type=1326 audit(3930757281.225:4664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13532 comm="syz.0.14039" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f21e2fbde59 code=0x0 [ 773.245903][T13564] netlink: 8 bytes leftover after parsing attributes in process `syz.6.14050'. [ 773.284343][T13566] netlink: 24 bytes leftover after parsing attributes in process `syz.6.14051'. [ 773.523122][T13585] loop6: detected capacity change from 0 to 164 [ 773.562442][T13585] iso9660: Unknown parameter 'GPL' [ 773.923089][T13603] Option 'E‡£ÙäòèDâîòôˆâxómZy3Šj‹UÐ0´RÏû›‚·ìU–ȃá¨ã±ª¥³aÞ¢’‹¥åR¢™r»4Sž’kLÔ‹M·µÅ4&íg­Ž ÿ9RßÁ{+ÍA -þd' to dns_resolver key: bad/missing value [ 774.027752][T13616] loop5: detected capacity change from 0 to 4096 [ 774.069210][T13616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 774.089667][ T28] audit: type=1400 audit(3930757282.505:4665): avc: denied { write } for pid=13615 comm="syz.5.14073" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 774.154472][ T7137] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 774.354099][T13634] loop5: detected capacity change from 0 to 512 [ 774.381675][T13634] EXT4-fs warning (device loop5): dx_probe:861: inode #2: comm syz.5.14081: dx entry: limit 1024 != root limit 124 [ 774.397982][T13634] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.14081: Corrupt directory, running e2fsck is recommended [ 774.412516][T13634] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117 [ 774.421256][T13634] EXT4-fs error (device loop5): ext4_iget_extra_inode:5180: inode #15: comm syz.5.14081: corrupted in-inode xattr: invalid ea_ino [ 774.435007][T13634] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 774.435218][T13634] EXT4-fs (loop5): Remounting filesystem read-only [ 774.444413][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 774.444436][ C1] EXT4-fs (loop5): initial error at time 3930757282: ext4_iget_extra_inode:5180: inode 15 [ 774.444476][ C1] EXT4-fs (loop5): last error at time 3930757282: ext4_iget_extra_inode:5180: inode 15 [ 774.484127][T13634] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 774.585614][ T7137] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.452021][T13660] loop4: detected capacity change from 0 to 2048 [ 775.503329][T13660] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.518231][ T28] audit: type=1400 audit(3930757283.935:4666): avc: denied { write } for pid=13659 comm="syz.4.14088" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 775.560274][ T28] audit: type=1400 audit(3930757283.935:4667): avc: denied { read } for pid=13659 comm="syz.4.14088" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 775.593991][ T28] audit: type=1400 audit(3930757283.935:4668): avc: denied { write } for pid=13659 comm="syz.4.14088" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 775.729748][T11377] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.780973][T13667] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14091'. [ 775.919330][ T28] audit: type=1400 audit(3930757284.335:4669): avc: denied { watch } for pid=13679 comm="syz.6.14096" path="pipe:[145249]" dev="pipefs" ino=145249 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 776.877246][T13712] loop0: detected capacity change from 0 to 512 [ 776.913977][T13712] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 776.928528][T13712] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -2 [ 776.948644][T13712] EXT4-fs (loop0): 1 truncate cleaned up [ 776.955020][T13712] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 776.968639][T13712] EXT4-fs error (device loop0): ext4_append:79: inode #2: comm syz.0.14110: Logical block already allocated [ 776.980637][ T28] audit: type=1400 audit(3930757285.395:4670): avc: denied { write } for pid=13711 comm="syz.0.14110" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 777.080400][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14114'. [ 777.114035][T11329] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.129048][T13725] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14114'. [ 777.257775][T13735] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14118'. [ 777.304670][T13722] loop4: detected capacity change from 0 to 128 [ 777.312360][T13733] Option 'E‡£ÙäòèDâîòôˆâxómZy3Šj‹UÐ0´RÏû›‚·ìU–ȃá¨ã±ª¥³aÞ¢’‹¥åR¢™r»4Sž’kLÔ‹M·µÅ4&íg­Ž ÿ9RßÁ{+ÍA -þd' to dns_resolver key: bad/missing value [ 777.489266][T13756] VFS: Mount too revealing [ 777.526161][T13761] loop6: detected capacity change from 0 to 1024 [ 777.551800][T13761] EXT4-fs: Ignoring removed oldalloc option [ 777.565740][T13761] EXT4-fs: Ignoring removed nomblk_io_submit option [ 777.577429][T13770] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14130'. [ 777.594440][T13761] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 777.652116][T13761] EXT4-fs (loop6): can't mount with commit=, fs mounted w/o journal [ 777.673011][T13781] loop4: detected capacity change from 0 to 128 [ 777.682594][T13780] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14134'. [ 777.685011][T13768] loop5: detected capacity change from 0 to 256 [ 777.707883][T14073] IPVS: starting estimator thread 0... [ 777.731481][T13781] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 777.766145][T13780] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14134'. [ 777.791188][T13781] ext4 filesystem being mounted at /117/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 777.798420][T13780] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14134'. [ 777.811225][T13783] IPVS: using max 2256 ests per chain, 112800 per kthread [ 777.832122][ T28] audit: type=1400 audit(3930757286.255:4671): avc: denied { write } for pid=13778 comm="syz.4.14133" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 777.854348][ T28] audit: type=1400 audit(3930757286.255:4672): avc: denied { write } for pid=13778 comm="syz.4.14133" name="encrypted_dir" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 777.930845][T11377] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 777.962579][T13799] loop6: detected capacity change from 0 to 512 [ 778.004303][T13796] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13796 comm=syz.1.14139 [ 778.039891][T13799] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.061340][T13799] ext4 filesystem being mounted at /184/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 778.105114][ T28] audit: type=1400 audit(3930757286.525:4673): avc: denied { write } for pid=13798 comm="syz.6.14140" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 778.182417][T10581] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.287040][T13818] loop6: detected capacity change from 0 to 512 [ 778.310156][T13818] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 778.338292][ T28] audit: type=1400 audit(3930757286.755:4674): avc: denied { write } for pid=13817 comm="syz.6.14147" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 778.438346][T10581] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 778.507731][T13825] netlink: 132 bytes leftover after parsing attributes in process `syz.6.14149'. [ 779.115268][T30952] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.312579][T30952] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.330365][T13854] loop0: detected capacity change from 0 to 1024 [ 779.359768][T13854] EXT4-fs: Ignoring removed oldalloc option [ 779.379890][T13854] EXT4-fs: Ignoring removed nomblk_io_submit option [ 779.390812][T30952] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.411709][T13854] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 779.432357][T13854] EXT4-fs (loop0): can't mount with commit=, fs mounted w/o journal [ 779.475320][T30952] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 779.500342][T14074] IPVS: starting estimator thread 0... [ 779.537997][T13844] lo speed is unknown, defaulting to 1000 [ 779.591315][T13865] IPVS: using max 1824 ests per chain, 91200 per kthread [ 779.610676][T30952] bridge_slave_1: left allmulticast mode [ 779.620206][T30952] bridge_slave_1: left promiscuous mode [ 779.633721][T30952] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.659181][T30952] bridge_slave_0: left allmulticast mode [ 779.673453][T30952] bridge_slave_0: left promiscuous mode [ 779.688205][T30952] bridge0: port 1(bridge_slave_0) entered disabled state [ 779.816364][T14073] hid-generic 0000:0000:0000.000E: unknown main item tag 0x0 [ 779.829665][T14073] hid-generic 0000:0000:0000.000E: hidraw0: HID v0.00 Device [syz1] on syz0 [ 779.891548][T30952] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 779.918318][ T28] audit: type=1400 audit(3930757288.335:4675): avc: denied { write } for pid=13873 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 779.965445][T30952] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 780.001942][T30952] bond0 (unregistering): Released all slaves [ 780.029359][ T28] audit: type=1400 audit(3930757288.445:4676): avc: denied { write } for pid=13892 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 780.106778][ T3020] 8021q: adding VLAN 0 to HW filter on device eth21 [ 780.194536][T30952] hsr_slave_0: left promiscuous mode [ 780.206355][T30952] hsr_slave_1: left promiscuous mode [ 780.222830][T30952] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 780.233952][T30952] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 780.249182][T30952] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 780.261081][T30952] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 780.282785][T30952] veth1_macvtap: left promiscuous mode [ 780.289901][T30952] veth0_macvtap: left promiscuous mode [ 780.302561][T30952] veth1_vlan: left promiscuous mode [ 780.323148][T30952] veth0_vlan: left promiscuous mode [ 780.340869][ T28] audit: type=1400 audit(3930757288.755:4677): avc: denied { write } for pid=13900 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 780.389356][ T28] audit: type=1400 audit(3930757288.805:4678): avc: denied { write } for pid=13912 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 780.628589][T30952] team0 (unregistering): Port device team_slave_1 removed [ 780.671440][T30952] team0 (unregistering): Port device team_slave_0 removed [ 780.701578][ T28] audit: type=1400 audit(3930757289.115:4679): avc: denied { watch } for pid=13924 comm="syz.6.14174" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 780.729578][T13927] netlink: 4 bytes leftover after parsing attributes in process `syz.1.14173'. [ 780.768338][ T3020] 8021q: adding VLAN 0 to HW filter on device eth22 [ 780.816737][T13935] loop6: detected capacity change from 0 to 256 [ 780.823894][T13919] lo speed is unknown, defaulting to 1000 [ 780.858442][T13935] msdos filesystem being mounted at /197/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 781.041055][ T28] audit: type=1400 audit(3930757289.455:4680): avc: denied { write } for pid=13939 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 781.043486][T13844] bridge0: port 1(bridge_slave_0) entered blocking state [ 781.072243][T13844] bridge0: port 1(bridge_slave_0) entered disabled state [ 781.079496][T13844] bridge_slave_0: entered allmulticast mode [ 781.091711][T13844] bridge_slave_0: entered promiscuous mode [ 781.098996][T13844] bridge0: port 2(bridge_slave_1) entered blocking state [ 781.106131][T13844] bridge0: port 2(bridge_slave_1) entered disabled state [ 781.113630][T13844] bridge_slave_1: entered allmulticast mode [ 781.120229][T13844] bridge_slave_1: entered promiscuous mode [ 781.164575][T13844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 781.177094][ T28] audit: type=1400 audit(3930757289.595:4681): avc: denied { write } for pid=13969 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 781.199689][T13844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 781.244909][T13844] team0: Port device team_slave_0 added [ 781.260272][T13844] team0: Port device team_slave_1 added [ 781.281495][ T3020] 8021q: adding VLAN 0 to HW filter on device eth23 [ 781.341997][T13844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 781.354923][T13844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.429637][T13844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 781.483324][T13844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 781.498007][T13844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 781.541061][T13844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 781.629399][T13844] hsr_slave_0: entered promiscuous mode [ 781.640381][T13844] hsr_slave_1: entered promiscuous mode [ 781.649316][T13844] debugfs: 'hsr0' already exists in 'hsr' [ 781.665139][T13844] Cannot create hsr debugfs directory [ 781.675614][T13982] veth1_to_hsr: Caught tx_queue_len zero misconfig [ 781.815502][T14000] SELinux: policydb string length 0 does not match expected length 8 [ 781.828727][ T28] audit: type=1400 audit(3930757290.245:4682): avc: denied { write } for pid=13985 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 781.852997][T14000] SELinux: failed to load policy [ 781.872644][T14000] netlink: 20 bytes leftover after parsing attributes in process `syz.5.14192'. [ 781.893720][ T28] audit: type=1400 audit(3930757290.315:4683): avc: denied { write } for pid=14004 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 781.941890][ T3020] 8021q: adding VLAN 0 to HW filter on device eth24 [ 781.989998][T30932] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.052030][T30932] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.163589][T30932] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.259234][ T28] audit: type=1400 audit(3930757290.675:4684): avc: denied { write } for pid=14018 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 782.286177][T14014] lo speed is unknown, defaulting to 1000 [ 782.296594][T30932] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.456772][T14044] bridge0: port 3(syz_tun) entered disabled state [ 782.469365][T14044] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.476607][T14044] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.494871][T14054] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14199'. [ 782.586864][T14044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 782.600669][T14044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 782.630314][T14044] hsr1: left promiscuous mode [ 782.636666][T14044] ipip0: left promiscuous mode [ 782.782011][T30952] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.801555][T30952] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.810587][T30952] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.819742][T30952] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 782.844145][T30932] bridge_slave_1: left allmulticast mode [ 782.850994][T30932] bridge_slave_1: left promiscuous mode [ 782.864453][T14090] tmpfs: Too small a size for current use [ 782.873124][T30932] bridge0: port 2(bridge_slave_1) entered disabled state [ 782.882044][T30932] bridge_slave_0: left allmulticast mode [ 782.887843][T30932] bridge_slave_0: left promiscuous mode [ 782.894640][T30932] bridge0: port 1(bridge_slave_0) entered disabled state [ 782.959699][T30932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 782.969803][T30932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 782.980023][T30932] bond0 (unregistering): Released all slaves [ 782.988135][T30952] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 782.997118][T30952] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 783.030200][T13844] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 783.041901][T13844] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 783.069773][T13844] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 783.087944][T13844] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 783.100032][T13844] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 783.112688][T13844] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 783.121638][T13844] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 783.130778][T13844] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 783.144458][T30932] hsr_slave_0: left promiscuous mode [ 783.150184][T30932] hsr_slave_1: left promiscuous mode [ 783.156553][T30932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 783.164492][T30932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 783.172790][T30932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 783.180319][T30932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 783.191210][T30932] veth1_macvtap: left promiscuous mode [ 783.196917][T30932] veth0_macvtap: left promiscuous mode [ 783.334051][T13844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 783.346644][T13844] 8021q: adding VLAN 0 to HW filter on device team0 [ 783.356033][T30908] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.363156][T30908] bridge0: port 1(bridge_slave_0) entered forwarding state [ 783.405114][T30942] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.412249][T30942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 783.426561][T14014] bridge0: port 1(bridge_slave_0) entered blocking state [ 783.439614][T14014] bridge0: port 1(bridge_slave_0) entered disabled state [ 783.447118][T14014] bridge_slave_0: entered allmulticast mode [ 783.454172][T14014] bridge_slave_0: entered promiscuous mode [ 783.472791][T14014] bridge0: port 2(bridge_slave_1) entered blocking state [ 783.483532][T14014] bridge0: port 2(bridge_slave_1) entered disabled state [ 783.498996][T14014] bridge_slave_1: entered allmulticast mode [ 783.512146][T14014] bridge_slave_1: entered promiscuous mode [ 783.534683][T14014] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 783.545448][T14014] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 783.566578][T30932] IPVS: stop unused estimator thread 0... [ 783.601818][T14014] team0: Port device team_slave_0 added [ 783.618656][T14014] team0: Port device team_slave_1 added [ 783.684450][T14014] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 783.700978][T14014] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.739204][T14014] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 783.754013][T14014] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 783.767578][T14014] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 783.795036][T14014] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 783.825473][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14214'. [ 783.858898][T14014] hsr_slave_0: entered promiscuous mode [ 783.888939][T14014] hsr_slave_1: entered promiscuous mode [ 783.959527][T14175] netlink: 64 bytes leftover after parsing attributes in process `syz.5.14219'. [ 784.327346][T13844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 784.718956][T13844] veth0_vlan: entered promiscuous mode [ 784.738127][T14014] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 784.759544][T14014] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 784.772040][T14014] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 784.790131][T14014] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 784.812765][T14014] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 784.838423][T14014] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 784.854693][T13844] veth1_vlan: entered promiscuous mode [ 784.866614][T14014] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 784.892770][T14014] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 784.925327][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 784.925369][ T28] audit: type=1400 audit(3930757293.345:4707): avc: denied { write } for pid=14273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 784.980799][T13844] veth0_macvtap: entered promiscuous mode [ 784.994771][ T28] audit: type=1400 audit(3930757293.415:4708): avc: denied { write } for pid=14296 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 785.017157][T14287] syzkaller1: entered promiscuous mode [ 785.024890][T14287] syzkaller1: entered allmulticast mode [ 785.039543][T13844] veth1_macvtap: entered promiscuous mode [ 785.089099][T13844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 785.113167][T14014] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.122219][T13844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 785.140386][T30941] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.151329][T30941] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.176236][T14014] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.185429][T30941] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.195560][T30941] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 785.208834][T30932] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.216025][T30932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 785.234745][T30952] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.241927][T30952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 785.366093][ T28] audit: type=1400 audit(3930757293.785:4709): avc: denied { write } for pid=14302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 785.449687][ T28] audit: type=1400 audit(3930757293.865:4710): avc: denied { write } for pid=14336 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 785.582948][T14014] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 785.774443][ T28] audit: type=1400 audit(3930757294.195:4711): avc: denied { write } for pid=14354 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 785.844463][T14376] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.876092][ T28] audit: type=1400 audit(3930757294.295:4712): avc: denied { write } for pid=14381 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 786.081552][T14376] vxlan0: left allmulticast mode [ 786.086849][T14376] vxlan1: left allmulticast mode [ 786.092327][T14376] ip6gre1: left allmulticast mode [ 786.100436][T14376] bridge1: left promiscuous mode [ 786.106712][T14376] bridge1: left allmulticast mode [ 786.157255][T14376] bridge2: left promiscuous mode [ 786.170355][T14376] bridge2: left allmulticast mode [ 786.177549][T14376] bond2: left promiscuous mode [ 786.182821][T14376] bond2: left allmulticast mode [ 786.240282][T14376] gtp1: left allmulticast mode [ 786.306972][T14376] vlan0: left promiscuous mode [ 786.346466][T14376] vlan1: left promiscuous mode [ 786.357393][T14376] bridge0: left promiscuous mode [ 786.383189][T14376] hsr1: left promiscuous mode [ 786.390534][T14376] bond8: left promiscuous mode [ 786.398458][T14376] gre2: left promiscuous mode [ 786.436945][ T35] lo speed is unknown, defaulting to 1000 [ 786.450727][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 786.454630][ T35] sz1: Port: 1 Link DOWN [ 786.464049][T11506] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.472580][T11506] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 786.493927][T11506] netdevsim netdevsim1 eth0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 786.516293][T11506] netdevsim netdevsim1 eth0: unset [1, 2] type 2 family 0 port 6081 - 0 [ 786.545321][T11506] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.553984][T11506] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 786.562666][T11506] netdevsim netdevsim1 eth1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 786.571376][T11506] netdevsim netdevsim1 eth1: unset [1, 2] type 2 family 0 port 6081 - 0 [ 786.595448][ T35] lo speed is unknown, defaulting to 1000 [ 786.601301][T11506] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.625505][T11506] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 786.651169][T11506] netdevsim netdevsim1 eth2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 786.666845][T11506] netdevsim netdevsim1 eth2: unset [1, 2] type 2 family 0 port 6081 - 0 [ 786.692599][T11506] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 786.709062][T14405] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14249'. [ 786.718230][T11506] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 786.751083][T11506] netdevsim netdevsim1 eth3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 786.759746][T11506] netdevsim netdevsim1 eth3: unset [1, 2] type 2 family 0 port 6081 - 0 [ 786.810742][T14014] veth0_vlan: entered promiscuous mode [ 786.815933][T14408] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14250'. [ 786.870589][T14014] veth1_vlan: entered promiscuous mode [ 786.898076][T14014] veth0_macvtap: entered promiscuous mode [ 786.920178][T14014] veth1_macvtap: entered promiscuous mode [ 786.956839][T14014] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 786.989754][T14014] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 787.007858][T30908] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.018388][T30908] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.047900][ T28] audit: type=1400 audit(3930757295.465:4713): avc: denied { write } for pid=14412 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 787.093820][T30908] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.103152][T30908] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 787.138501][ T28] audit: type=1400 audit(3930757295.555:4714): avc: denied { write } for pid=14432 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 787.188709][T14437] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14257'. [ 787.214952][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 787.272596][T14444] loop2: detected capacity change from 0 to 7 [ 787.470645][T14468] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 787.484334][ T28] audit: type=1400 audit(3930757295.905:4715): avc: denied { write } for pid=14447 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 787.523579][T14468] batman_adv: batadv0: Adding interface: gretap1 [ 787.546337][T14468] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 787.579605][ T28] audit: type=1400 audit(3930757295.995:4716): avc: denied { write } for pid=14475 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 787.612934][T14468] batman_adv: batadv0: Interface activated: gretap1 [ 787.635305][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 787.842956][T14486] loop5: detected capacity change from 0 to 8192 [ 787.859395][T14486] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 787.913443][T14486] vfat filesystem being mounted at /432/file1 supports timestamps until 2107-12-31 (0x10391447e) [ 787.950545][T14486] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 787.969701][T14486] FAT-fs (loop5): Filesystem has been set read-only [ 787.983981][T14486] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 788.002754][T14486] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 788.022850][T14486] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 788.035875][T14486] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 788.057067][T14486] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 788.057999][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 788.074300][T14486] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 788.090223][T14486] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 788.119766][T14486] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 788.131576][T14506] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 788.814842][T14545] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.822143][T14545] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.977232][T14567] loop5: detected capacity change from 0 to 256 [ 789.017915][T14567] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 789.057037][T14545] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 789.067489][T14567] vfat filesystem being mounted at /435/bus supports timestamps until 2107-12-31 (0x10391447e) [ 789.100436][T14545] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 789.195679][T14573] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779264) [ 789.236480][T14573] FAT-fs (loop5): Filesystem has been set read-only [ 789.283366][T30942] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.298804][T30942] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.330131][T14573] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 789.362402][T30942] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.392693][T30942] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.440968][T14573] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 789.518863][T14573] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 789.538175][T14573] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 789.593399][T14573] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 789.645906][T14573] FAT-fs (loop5): error, corrupted file size (i_pos 196, 16779008) [ 789.969679][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 789.969699][ T28] audit: type=1400 audit(3930757298.385:4727): avc: denied { write } for pid=14596 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 790.087085][ T28] audit: type=1400 audit(3930757298.505:4728): avc: denied { write } for pid=14611 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 790.363339][ T28] audit: type=1400 audit(3930757298.785:4729): avc: denied { write } for pid=14619 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 790.465892][ T28] audit: type=1400 audit(3930757298.885:4730): avc: denied { write } for pid=14646 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 790.666277][T14658] loop2: detected capacity change from 0 to 4096 [ 790.689054][T14669] loop8: detected capacity change from 0 to 512 [ 790.698870][T14658] EXT4-fs: Ignoring removed nomblk_io_submit option [ 790.723747][T14669] EXT4-fs (loop8): invalid journal inode [ 790.729743][T14669] EXT4-fs (loop8): can't get journal size [ 790.767516][T14669] EXT4-fs (loop8): 1 truncate cleaned up [ 790.776650][T14669] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 790.857398][ T28] audit: type=1400 audit(3930757299.275:4731): avc: denied { write } for pid=14666 comm="syz.8.14303" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 790.879418][ T28] audit: type=1400 audit(3930757299.275:4732): avc: denied { write } for pid=14666 comm="syz.8.14303" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 790.901582][ T28] audit: type=1400 audit(3930757299.275:4733): avc: denied { write } for pid=14666 comm="syz.8.14303" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 790.923995][ T28] audit: type=1400 audit(3930757299.285:4734): avc: denied { write } for pid=14666 comm="syz.8.14303" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 790.963170][ T28] audit: type=1400 audit(3930757299.295:4735): avc: denied { write } for pid=14666 comm="syz.8.14303" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 790.995006][T13844] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.034592][ T28] audit: type=1400 audit(3930757299.435:4736): avc: denied { write } for pid=14657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 791.165282][T14694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14308'. [ 791.242929][T30932] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 791.254457][T14694] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14308'. [ 791.259691][T30932] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 791.288551][T30932] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 791.322516][T30932] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 791.839793][T14739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14317'. [ 792.595587][T14794] loop5: detected capacity change from 0 to 136 [ 792.626819][T14794] iso9660: Bad value for 'uid' [ 792.677910][T14794] iso9660: Bad value for 'uid' [ 793.465360][T30932] Bluetooth: hci0: Frame reassembly failed (-84) [ 795.030464][ T28] kauditd_printk_skb: 56 callbacks suppressed [ 795.030482][ T28] audit: type=1400 audit(3930757303.445:4793): avc: denied { write } for pid=14885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 795.084701][ T28] audit: type=1400 audit(3930757303.505:4794): avc: denied { write } for pid=14896 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 795.202916][T30952] Bluetooth: hci1: Frame reassembly failed (-84) [ 795.228871][T14908] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14357'. [ 795.242593][T14904] Bluetooth: hci1: Received unexpected HCI Event 0x00 [ 795.315563][ T28] audit: type=1400 audit(3930757303.735:4795): avc: denied { write } for pid=14901 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 795.388758][ T28] audit: type=1400 audit(3930757303.775:4796): avc: denied { write } for pid=14922 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 795.491187][ T3905] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 796.052726][T14961] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14373'. [ 796.237000][ T28] audit: type=1400 audit(3930757304.655:4797): avc: denied { watch watch_reads } for pid=14968 comm="syz.0.14377" path="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 796.705582][ T28] audit: type=1400 audit(3930757305.125:4798): avc: denied { write } for pid=14986 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.779122][ T28] audit: type=1400 audit(3930757305.195:4799): avc: denied { write } for pid=15000 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.813370][T15003] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 796.838771][ T28] audit: type=1400 audit(3930757305.255:4800): avc: denied { create } for pid=15002 comm="syz.0.14386" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 796.934629][ T28] audit: type=1400 audit(3930757305.255:4801): avc: denied { associate } for pid=15002 comm="syz.0.14386" name=E91F7189591E9233614B scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 797.029837][ T28] audit: type=1400 audit(3930757305.335:4802): avc: denied { unlink } for pid=11329 comm="syz-executor" name=E91F7189591E9233614B dev="tmpfs" ino=1040 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon=2321202E2F6367726F75702F66696C6530616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 797.252034][T24605] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 797.281174][T14904] Bluetooth: hci1: command 0x1003 tx timeout [ 797.404847][T15018] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14392'. [ 797.414968][T15018] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14392'. [ 797.688562][T15022] lo speed is unknown, defaulting to 1000 [ 797.829820][T15022] bridge0: port 1(bridge_slave_0) entered blocking state [ 797.837023][T15022] bridge0: port 1(bridge_slave_0) entered disabled state [ 797.844460][T15022] bridge_slave_0: entered allmulticast mode [ 797.850993][T15022] bridge_slave_0: entered promiscuous mode [ 797.857850][T15022] bridge0: port 2(bridge_slave_1) entered blocking state [ 797.864989][T15022] bridge0: port 2(bridge_slave_1) entered disabled state [ 797.872275][T15022] bridge_slave_1: entered allmulticast mode [ 797.878910][T15022] bridge_slave_1: entered promiscuous mode [ 797.898276][T15022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.908999][T15022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.930443][T15022] team0: Port device team_slave_0 added [ 797.937215][T15022] team0: Port device team_slave_1 added [ 797.954508][T15022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 797.961879][T15022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 797.989345][T15022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.000893][T15022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.007986][T15022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 798.034142][T15022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.063902][T15022] hsr_slave_0: entered promiscuous mode [ 798.070097][T15022] hsr_slave_1: entered promiscuous mode [ 798.076029][T15022] debugfs: 'hsr0' already exists in 'hsr' [ 798.081825][T15022] Cannot create hsr debugfs directory [ 798.404306][T15022] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 798.424545][T15061] loop8: detected capacity change from 0 to 512 [ 798.443325][T15022] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 798.465486][T15022] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 798.466428][T15061] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 798.491279][T15022] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 798.502216][T15061] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 798.526110][T15022] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 798.538158][T15061] EXT4-fs (loop8): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 798.570237][T15022] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 798.578608][T15061] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.609336][T15022] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 798.631559][T15022] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 798.690394][T15084] gretap1: entered promiscuous mode [ 798.735124][T15022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 798.760323][T15022] 8021q: adding VLAN 0 to HW filter on device team0 [ 798.782498][T30932] bridge0: port 1(bridge_slave_0) entered blocking state [ 798.789619][T30932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 798.812726][T11506] bridge0: port 2(bridge_slave_1) entered blocking state [ 798.819860][T11506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 799.090477][T15022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 799.279503][T15022] veth0_vlan: entered promiscuous mode [ 799.308500][T15022] veth1_vlan: entered promiscuous mode [ 799.336891][T15022] veth0_macvtap: entered promiscuous mode [ 799.349546][T15022] veth1_macvtap: entered promiscuous mode [ 799.365923][T15022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 799.380905][T15022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 799.410616][T30942] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.419602][T30942] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.468779][T30942] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.493852][T30942] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.574177][T15165] netlink: 4 bytes leftover after parsing attributes in process `syz.3.14395'. [ 799.617876][T15168] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14410'. [ 799.960855][T15211] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14418'. [ 800.098969][T30942] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 800.132701][T30942] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.208568][ T28] kauditd_printk_skb: 20 callbacks suppressed [ 800.208588][ T28] audit: type=1400 audit(3930757308.625:4823): avc: denied { write } for pid=15221 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 800.259352][T30942] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 800.286723][T30942] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.307912][ T28] audit: type=1400 audit(3930757308.725:4824): avc: denied { write } for pid=15241 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 800.334259][T15243] netlink: 24 bytes leftover after parsing attributes in process `syz.8.14425'. [ 800.419554][T30942] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 800.460703][T30942] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.547246][T30942] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 800.571493][ T28] audit: type=1400 audit(3930757308.985:4825): avc: denied { write } for pid=15245 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 800.623946][T30942] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 800.653093][ T28] audit: type=1400 audit(3930757309.055:4826): avc: denied { write } for pid=15267 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 800.767054][T30942] bridge_slave_1: left allmulticast mode [ 800.789148][T30942] bridge_slave_1: left promiscuous mode [ 800.804416][T30942] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.839329][T30942] bridge_slave_0: left allmulticast mode [ 800.873720][T30942] bridge_slave_0: left promiscuous mode [ 800.894726][T30942] bridge0: port 1(bridge_slave_0) entered disabled state [ 800.986477][ T28] audit: type=1400 audit(3930757309.405:4827): avc: denied { write } for pid=15271 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 801.077619][ T28] audit: type=1400 audit(3930757309.495:4828): avc: denied { write } for pid=15285 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 801.174931][T30942] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 801.215086][T30942] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 801.251348][T30942] bond0 (unregistering): Released all slaves [ 801.477255][T30942] hsr_slave_0: left promiscuous mode [ 801.490244][T30942] hsr_slave_1: left promiscuous mode [ 801.507355][T30942] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 801.517418][T30942] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 801.528589][ T28] audit: type=1400 audit(3930757309.945:4829): avc: denied { write } for pid=15287 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 801.555943][T30942] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 801.569270][T30942] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 801.600002][T30942] veth1_macvtap: left promiscuous mode [ 801.621378][T30942] veth0_macvtap: left promiscuous mode [ 801.628777][ T28] audit: type=1400 audit(3930757310.045:4830): avc: denied { write } for pid=15300 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 801.654618][T30942] veth1_vlan: left promiscuous mode [ 801.672551][T30942] veth0_vlan: left promiscuous mode [ 801.887717][ T28] audit: type=1400 audit(3930757310.305:4831): avc: denied { write } for pid=15302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 801.914746][T15319] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14435'. [ 801.945780][ T28] audit: type=1400 audit(3930757310.365:4832): avc: denied { write } for pid=15321 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 801.977027][T30942] team0 (unregistering): Port device team_slave_1 removed [ 802.025235][T30942] team0 (unregistering): Port device team_slave_0 removed [ 802.181535][T15334] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14438'. [ 802.231590][T15341] netlink: 'syz.0.14437': attribute type 1 has an invalid length. [ 802.288767][T15341] 8021q: adding VLAN 0 to HW filter on device bond1 [ 802.344308][T15341] bond1: (slave dummy0): making interface the new active one [ 802.360525][T15341] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 802.419986][T15350] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14441'. [ 802.522946][T15366] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=15366 comm=syz.1.14444 [ 802.537509][T15350] netlink: 'syz.0.14441': attribute type 1 has an invalid length. [ 802.739344][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 802.759927][T15376] bridge0: port 2(bridge_slave_1) entered listening state [ 802.871220][T15376] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.033190][T15398] lo speed is unknown, defaulting to 1000 [ 803.242521][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 803.723081][T15456] loop5: detected capacity change from 0 to 512 [ 803.769998][T15456] ext4: Unknown parameter 'fsuuid' [ 803.951224][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 804.344556][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 805.108078][T15542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.190425][T15542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.452708][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 805.452803][ T28] audit: type=1400 audit(3930757313.875:4847): avc: denied { write } for pid=15547 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 805.511160][T15567] netlink: 'syz.0.14489': attribute type 1 has an invalid length. [ 805.526206][T15567] bond2: entered promiscuous mode [ 805.531950][T15567] 8021q: adding VLAN 0 to HW filter on device bond2 [ 805.552071][T15567] bond2: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 805.565263][ T28] audit: type=1400 audit(3930757313.985:4848): avc: denied { write } for pid=15569 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 805.571663][T15567] bond2: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 805.597831][T15567] bond2: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 805.710984][ T28] audit: type=1400 audit(3930757314.125:4849): avc: denied { write } for pid=15573 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 805.775338][ T28] audit: type=1400 audit(3930757314.175:4850): avc: denied { write } for pid=15584 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 805.878843][T15596] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14495'. [ 805.993173][T15602] bridge0: port 2(bridge_slave_1) entered listening state [ 806.068921][T15602] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.141318][T15620] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14501'. [ 806.153504][T15620] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14501'. [ 806.483852][T15648] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14512'. [ 806.502405][T15641] IPv6: sit1: Disabled Multicast RS [ 806.511513][ T28] audit: type=1326 audit(3930757314.925:4851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15649 comm="syz.8.14513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173242de59 code=0x7ffc0000 [ 806.556059][T15641] sit1: entered allmulticast mode [ 806.557750][ T28] audit: type=1326 audit(3930757314.925:4852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15649 comm="syz.8.14513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173242de59 code=0x7ffc0000 [ 806.635601][ T28] audit: type=1326 audit(3930757314.925:4853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15649 comm="syz.8.14513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173242de59 code=0x7ffc0000 [ 806.642483][T15657] program syz.3.14515 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 806.711304][ T28] audit: type=1326 audit(3930757314.925:4854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15649 comm="syz.8.14513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173242de59 code=0x7ffc0000 [ 806.740524][ T28] audit: type=1326 audit(3930757314.925:4855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15649 comm="syz.8.14513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f173242de59 code=0x7ffc0000 [ 806.766683][ T28] audit: type=1326 audit(3930757314.925:4856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15649 comm="syz.8.14513" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f173242de59 code=0x7ffc0000 [ 807.014077][T15682] netlink: 24 bytes leftover after parsing attributes in process `syz.0.14526'. [ 807.139112][T15686] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14526'. [ 807.197431][T15692] netlink: 'syz.1.14528': attribute type 1 has an invalid length. [ 807.206594][T15692] netlink: 'syz.1.14528': attribute type 2 has an invalid length. [ 807.215014][T15692] netlink: 24 bytes leftover after parsing attributes in process `syz.1.14528'. [ 807.347185][T15715] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14537'. [ 808.162976][T15767] ip6gretap1: entered promiscuous mode [ 808.270797][T15778] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.14564'. [ 808.284268][T15787] netlink: 'syz.5.14567': attribute type 1 has an invalid length. [ 808.292747][T15787] netlink: 5 bytes leftover after parsing attributes in process `syz.5.14567'. [ 808.304087][T15788] lo speed is unknown, defaulting to 1000 [ 809.230491][T15811] sctp: [Deprecated]: syz.0.14575 (pid 15811) Use of struct sctp_assoc_value in delayed_ack socket option. [ 809.230491][T15811] Use struct sctp_sack_info instead [ 809.255698][T15812] netlink: 104 bytes leftover after parsing attributes in process `syz.8.14574'. [ 809.273087][T15812] netlink: 16 bytes leftover after parsing attributes in process `syz.8.14574'. [ 809.388194][T15828] netlink: 12 bytes leftover after parsing attributes in process `syz.1.14581'. [ 809.518712][T15841] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14587'. [ 809.546339][T15843] loop5: detected capacity change from 0 to 512 [ 809.575115][T15843] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 809.589255][T15843] ext4 filesystem being mounted at /477/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 810.061178][T30932] batman_adv: batadv1: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 810.247169][ T7137] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.396372][T15863] netlink: 'syz.8.14594': attribute type 1 has an invalid length. [ 810.410794][T15863] netlink: 64583 bytes leftover after parsing attributes in process `syz.8.14594'. [ 810.449486][T15865] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14596'. [ 810.742609][T15897] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.14608'. [ 810.770307][T15902] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14611'. [ 810.846949][T15908] lo speed is unknown, defaulting to 1000 [ 810.931646][T15905] IPv6: sit1: Disabled Multicast RS [ 810.980298][T15905] sit1: entered allmulticast mode [ 811.062627][T15920] loop5: detected capacity change from 0 to 512 [ 811.089803][T15920] EXT4-fs error (device loop5): ext4_quota_enable:7232: comm syz.5.14620: inode #262144: comm syz.5.14620: iget: illegal inode # [ 811.110268][T15920] loop5: lost filesystem error report for type 5 error -117 [ 811.111023][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 811.124988][ C1] EXT4-fs (loop5): initial error at time 3930757319: ext4_quota_enable:7232 [ 811.133735][ C1] EXT4-fs (loop5): last error at time 3930757319: ext4_quota_enable:7232 [ 811.142453][T15920] EXT4-fs error (device loop5): ext4_quota_enable:7235: comm syz.5.14620: Bad quota inode: 262144, type: 2 [ 811.154034][T15920] loop5: lost filesystem error report for type 5 error -117 [ 811.155382][T15920] EXT4-fs warning (device loop5): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-117, ino=262144). Please run e2fsck to fix. [ 811.181538][T15920] EXT4-fs (loop5): mount failed [ 811.199599][T15924] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.282013][ T7137] syz_tun (unregistering): left allmulticast mode [ 811.288684][ T7137] syz_tun (unregistering): left promiscuous mode [ 811.300777][ T7137] bridge0: port 3(syz_tun) entered disabled state [ 811.334381][T15924] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.425544][T15924] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.492054][T15924] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 811.562814][T11500] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.577898][T11500] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.600737][T30942] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.614360][T30942] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.640896][T15943] ip6_vti0: Caught tx_queue_len zero misconfig [ 812.109758][T15962] lo speed is unknown, defaulting to 1000 [ 812.424876][T15962] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.432635][T15962] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.440222][T15962] bridge_slave_0: entered allmulticast mode [ 812.447442][T15962] bridge_slave_0: entered promiscuous mode [ 812.454498][T15962] bridge0: port 2(bridge_slave_1) entered blocking state [ 812.461771][T15962] bridge0: port 2(bridge_slave_1) entered disabled state [ 812.469004][T15962] bridge_slave_1: entered allmulticast mode [ 812.476150][T15962] bridge_slave_1: entered promiscuous mode [ 812.495415][T15962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 812.506240][T15962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 812.527380][T15962] team0: Port device team_slave_0 added [ 812.534016][T15962] team0: Port device team_slave_1 added [ 812.552424][T15962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 812.559474][T15962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.585823][T15962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 812.602038][T15962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 812.615758][T15962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 812.665579][T15962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 812.721855][T15962] hsr_slave_0: entered promiscuous mode [ 812.737317][T15962] hsr_slave_1: entered promiscuous mode [ 812.855572][T16007] netlink: 'syz.0.14648': attribute type 10 has an invalid length. [ 812.867349][T16007] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 812.876341][T16007] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 813.055444][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 813.055465][ T28] audit: type=1400 audit(3930757321.475:4892): avc: denied { write } for pid=16008 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 813.119695][ T28] audit: type=1400 audit(3930757321.525:4893): avc: denied { write } for pid=16019 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 813.210184][T15962] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 813.235359][T15962] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 813.245020][T15962] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 813.260350][T15962] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 813.278364][T15962] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 813.288720][T15962] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 813.298690][T15962] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 813.320846][T15962] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 813.343185][ T28] audit: type=1400 audit(3930757321.765:4894): avc: denied { write } for pid=16021 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 813.410974][ T28] audit: type=1400 audit(3930757321.825:4895): avc: denied { write } for pid=16038 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 813.434075][T15962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 813.457508][T15962] 8021q: adding VLAN 0 to HW filter on device team0 [ 813.467427][T30942] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.474556][T30942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.494961][T30952] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.502111][T30952] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.589019][ T28] audit: type=1400 audit(3930757322.005:4896): avc: denied { write } for pid=16040 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 813.630503][ T28] audit: type=1400 audit(3930757322.045:4897): avc: denied { write } for pid=16055 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 813.763367][T15962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 813.829639][ T28] audit: type=1400 audit(3930757322.245:4898): avc: denied { write } for pid=16059 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 813.888457][ T28] audit: type=1400 audit(3930757322.305:4899): avc: denied { write } for pid=16078 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.025062][T15962] veth0_vlan: entered promiscuous mode [ 814.045543][T15962] veth1_vlan: entered promiscuous mode [ 814.066524][ T28] audit: type=1400 audit(3930757322.485:4900): avc: denied { write } for pid=16084 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.073308][T15962] veth0_macvtap: entered promiscuous mode [ 814.120058][ T28] audit: type=1400 audit(3930757322.535:4901): avc: denied { write } for pid=16099 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 814.128524][T15962] veth1_macvtap: entered promiscuous mode [ 814.165240][T15962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 814.189055][T15962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 814.200821][T30941] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.211915][T30941] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.245538][T30941] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.256994][T30941] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.847531][T16169] sctp: [Deprecated]: syz.3.14656 (pid 16169) Use of struct sctp_assoc_value in delayed_ack socket option. [ 814.847531][T16169] Use struct sctp_sack_info instead [ 814.892930][T16172] SELinux: invalid class [ 814.903194][T16172] SELinux: failed to load policy [ 815.177345][T16215] syz.7.14671: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz7,mems_allowed=0 [ 815.194538][T16215] CPU: 1 UID: 0 PID: 16215 Comm: syz.7.14671 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 815.194583][T16215] Tainted: [W]=WARN [ 815.194637][T16215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 815.194660][T16215] Call Trace: [ 815.194668][T16215] [ 815.194678][T16215] __dump_stack+0x1d/0x30 [ 815.194711][T16215] dump_stack_lvl+0x95/0xd0 [ 815.194740][T16215] dump_stack+0x15/0x1b [ 815.194832][T16215] warn_alloc+0x145/0x1c0 [ 815.194873][T16215] __vmalloc_node_range_noprof+0xaa/0x11e0 [ 815.194917][T16215] ? __futex_wait+0x1fd/0x260 [ 815.194958][T16215] ? __pfx_futex_wake_mark+0x10/0x10 [ 815.195010][T16215] ? should_fail_ex+0x30/0x270 [ 815.195048][T16215] ? xskq_create+0x36/0xe0 [ 815.195072][T16215] ? should_failslab+0x8c/0xb0 [ 815.195102][T16215] vmalloc_user_noprof+0x7d/0xb0 [ 815.195130][T16215] ? xskq_create+0x80/0xe0 [ 815.195148][T16215] xskq_create+0x80/0xe0 [ 815.195167][T16215] xsk_init_queue+0x70/0xb0 [ 815.195211][T16215] xsk_setsockopt+0x3ef/0x640 [ 815.195314][T16215] ? __pfx_xsk_setsockopt+0x10/0x10 [ 815.195358][T16215] __sys_setsockopt+0x184/0x200 [ 815.195459][T16215] __x64_sys_setsockopt+0x64/0x80 [ 815.195499][T16215] x64_sys_call+0x2327/0x3020 [ 815.195529][T16215] do_syscall_64+0x136/0x3c0 [ 815.195643][T16215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 815.195672][T16215] RIP: 0033:0x7f47309cde59 [ 815.195693][T16215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 815.195719][T16215] RSP: 002b:00007f472f427028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 815.195759][T16215] RAX: ffffffffffffffda RBX: 00007f4730c55fa0 RCX: 00007f47309cde59 [ 815.195844][T16215] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 815.195862][T16215] RBP: 00007f4730a63e6f R08: 0000000000000004 R09: 0000000000000000 [ 815.195921][T16215] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 815.195939][T16215] R13: 00007f4730c56038 R14: 00007f4730c55fa0 R15: 00007ffd8043a068 [ 815.195982][T16215] [ 815.198205][T16215] Mem-Info: [ 815.415439][T16215] active_anon:35928 inactive_anon:46 isolated_anon:0 [ 815.415439][T16215] active_file:2855 inactive_file:27456 isolated_file:0 [ 815.415439][T16215] unevictable:0 dirty:265 writeback:0 [ 815.415439][T16215] slab_reclaimable:4391 slab_unreclaimable:28790 [ 815.415439][T16215] mapped:29452 shmem:17277 pagetables:6384 [ 815.415439][T16215] sec_pagetables:0 bounce:0 [ 815.415439][T16215] kernel_misc_reclaimable:0 [ 815.415439][T16215] free:1776338 free_pcp:4042 free_cma:0 [ 815.461312][T16215] Node 0 active_anon:143712kB inactive_anon:184kB active_file:11420kB inactive_file:109824kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117808kB dirty:1060kB writeback:0kB shmem:69108kB kernel_stack:6544kB pagetables:25536kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 815.494080][T16215] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 815.581759][T16215] lowmem_reserve[]: 0 2878 7857 7857 [ 815.601334][T16215] Node 0 DMA32 free:2944088kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947716kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:3524kB free_cma:0kB [ 815.649969][T16215] lowmem_reserve[]: 0 0 4978 4978 [ 815.663652][T16215] Node 0 Normal free:4145284kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:143936kB inactive_anon:184kB active_file:11420kB inactive_file:109832kB unevictable:0kB writepending:1068kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:12344kB local_pcp:6048kB free_cma:0kB [ 815.700267][T16215] lowmem_reserve[]: 0 0 0 0 [ 815.705174][T16215] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 815.718338][T16215] Node 0 DMA32: 4*4kB (M) 1*8kB (M) 4*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944088kB [ 815.736714][T16215] Node 0 Normal: 4507*4kB (UME) 2998*8kB (UME) 1381*16kB (UME) 1609*32kB (UME) 841*64kB (UME) 301*128kB (UME) 98*256kB (UME) 67*512kB (UME) 53*1024kB (UME) 47*2048kB (UME) 910*4096kB (UME) = 4145228kB [ 815.778721][T16215] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 815.788247][T16215] 47654 total pagecache pages [ 815.793184][T16215] 71 pages in swap cache [ 815.797471][T16215] Free swap = 118192kB [ 815.801814][T16215] Total swap = 124996kB [ 815.806023][T16215] 2097051 pages RAM [ 815.809884][T16215] 0 pages HighMem/MovableOnly [ 815.816442][T16215] 81723 pages reserved [ 816.401985][T16319] hsr0: entered promiscuous mode [ 816.423352][T16319] __nla_validate_parse: 4 callbacks suppressed [ 816.423381][T16319] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14692'. [ 817.024771][T16359] netlink: 'syz.7.14701': attribute type 1 has an invalid length. [ 817.473168][T16411] netlink: 'syz.7.14712': attribute type 9 has an invalid length. [ 817.533905][T16411] netlink: 399 bytes leftover after parsing attributes in process `syz.7.14712'. [ 817.589683][T16418] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 817.610088][T16418] SELinux: failed to load policy [ 817.641546][T16414] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14714'. [ 817.659265][T16423] loop7: detected capacity change from 0 to 256 [ 817.697452][T16423] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 817.773994][T16423] vfat filesystem being mounted at /18/file0 supports timestamps until 2107-12-31 (0x10391447e) [ 817.961920][T16449] loop7: detected capacity change from 0 to 512 [ 818.021910][T16449] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 818.037453][T16449] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 818.078375][T16449] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 818.100748][T16449] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 818.127165][T16449] System zones: 0-2, 18-18, 34-35 [ 818.159471][T16449] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 818.185764][T16462] 8021q: adding VLAN 0 to HW filter on device bond0 [ 818.232585][T16462] 8021q: adding VLAN 0 to HW filter on device team0 [ 818.239637][T16474] netlink: 16 bytes leftover after parsing attributes in process `syz.1.14733'. [ 818.256795][T16462] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 818.324379][T16462] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 818.342707][T16462] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 818.351351][T15962] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 818.376766][T16462] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 818.430779][T16462] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 818.463525][T16462] veth1_vlan: left promiscuous mode [ 818.479999][T16462] veth0_vlan: left promiscuous mode [ 818.499838][T16462] veth0_vlan: entered promiscuous mode [ 818.515746][T16462] veth1_vlan: entered promiscuous mode [ 818.539260][T16462] veth1_macvtap: left promiscuous mode [ 818.554920][T16462] veth0_macvtap: left promiscuous mode [ 818.570176][T16462] veth0_macvtap: entered promiscuous mode [ 818.591702][T16462] veth1_macvtap: entered promiscuous mode [ 818.613932][T16462] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 818.625170][T16462] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 818.640502][T16462] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 818.670605][T16462] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 818.687993][T30941] bridge0: port 1(bridge_slave_0) entered blocking state [ 818.695131][T30941] bridge0: port 1(bridge_slave_0) entered forwarding state [ 818.718888][T30941] bridge0: port 2(bridge_slave_1) entered blocking state [ 818.726044][T30941] bridge0: port 2(bridge_slave_1) entered forwarding state [ 818.784319][T30942] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.794415][T30942] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.809435][T30942] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.819764][T30942] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.859565][T16492] lo speed is unknown, defaulting to 1000 [ 818.915988][T16504] netlink: 'syz.3.14743': attribute type 1 has an invalid length. [ 818.941336][T16504] netlink: 'syz.3.14743': attribute type 4 has an invalid length. [ 818.951867][T16504] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.14743'. [ 819.077095][T16517] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14749'. [ 819.328291][T16530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 819.370065][T16530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 819.492776][T16530] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 819.515798][T16530] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 819.547084][T16530] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 819.584040][T16530] veth1_macvtap: left promiscuous mode [ 819.600320][T16530] veth0_macvtap: left promiscuous mode [ 819.612370][T16530] veth0_macvtap: entered promiscuous mode [ 819.627857][T16530] veth1_macvtap: entered promiscuous mode [ 819.649018][T16530] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 819.667945][T16530] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 819.750906][T16530] 8021q: adding VLAN 0 to HW filter on device bond1 [ 819.776807][T16530] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 819.862062][T17898] lo speed is unknown, defaulting to 1000 [ 819.874113][T30928] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 819.885213][T17898] sz1: Port: 1 Link ACTIVE [ 819.891690][T30928] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 819.902314][ T3396] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 819.913566][T16580] netlink: 12 bytes leftover after parsing attributes in process `syz.3.14761'. [ 819.933660][T30942] bridge0: port 2(bridge_slave_1) entered blocking state [ 819.940785][T30942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 819.983209][T30908] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.996921][T30908] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.022866][T30908] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.050770][T30908] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.082397][ T281] lo speed is unknown, defaulting to 1000 [ 820.116630][T30908] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.137919][T16596] netlink: 24 bytes leftover after parsing attributes in process `syz.8.14763'. [ 820.171584][T30908] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.237015][T30908] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 820.268960][T30908] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 820.543488][T16628] netlink: 28 bytes leftover after parsing attributes in process `syz.7.14764'. [ 820.545076][T17898] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 820.659196][T16638] lo speed is unknown, defaulting to 1000 [ 820.842624][ T3396] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 821.444326][T16665] netlink: 12 bytes leftover after parsing attributes in process `syz.8.14777'. [ 821.754137][T16697] netlink: 12 bytes leftover after parsing attributes in process `syz.0.14792'. [ 822.320424][T16723] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14804'. [ 822.340891][T16723] netlink: 8 bytes leftover after parsing attributes in process `syz.3.14804'. [ 823.355164][T16735] netlink: 12 bytes leftover after parsing attributes in process `syz.7.14807'. [ 823.384017][T16732] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14809'. [ 823.428362][T16739] xt_hashlimit: size too large, truncated to 1048576 [ 823.579383][T30932] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.586519][T30932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.888321][T16783] netlink: 'syz.0.14827': attribute type 4 has an invalid length. [ 823.935212][T16783] netlink: 'syz.0.14827': attribute type 4 has an invalid length. [ 823.953197][T16788] lo speed is unknown, defaulting to 1000 [ 824.044577][T16783] bridge0: port 2(bridge_slave_1) entered disabled state [ 824.051839][T16783] bridge0: port 1(bridge_slave_0) entered disabled state [ 824.157040][T16783] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 824.188906][T16783] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 824.274950][T30941] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.285819][T30941] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.346478][T30941] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.361088][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 824.374855][T30941] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 824.401060][T16791] lo speed is unknown, defaulting to 1000 [ 824.624928][T16796] 8021q: adding VLAN 0 to HW filter on device eth0 [ 824.668410][T16796] 8021q: adding VLAN 0 to HW filter on device eth1 [ 824.694035][T16796] 8021q: adding VLAN 0 to HW filter on device eth2 [ 824.714724][T16796] 8021q: adding VLAN 0 to HW filter on device eth3 [ 824.746650][T30932] bridge0: port 2(bridge_slave_1) entered blocking state [ 824.753781][T30932] bridge0: port 2(bridge_slave_1) entered forwarding state [ 825.071209][T16807] lo speed is unknown, defaulting to 1000 [ 825.428586][T16818] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 825.984582][T16844] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=16844 comm=syz.1.14849 [ 826.597929][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 826.597948][ T28] audit: type=1326 audit(3930757335.015:4926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16878 comm="syz.1.14862" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d128dde59 code=0x0 [ 826.598459][T16870] block device autoloading is deprecated and will be removed. [ 827.184961][ T28] audit: type=1326 audit(3930757335.605:4927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16916 comm="syz.7.14876" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47309cde59 code=0x7ffc0000 [ 827.221099][ T28] audit: type=1326 audit(3930757335.605:4928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16916 comm="syz.7.14876" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47309cde59 code=0x7ffc0000 [ 827.257082][T16920] lo speed is unknown, defaulting to 1000 [ 827.266297][ T28] audit: type=1326 audit(3930757335.635:4929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16916 comm="syz.7.14876" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47309cde59 code=0x7ffc0000 [ 827.300319][T16922] loop7: detected capacity change from 0 to 1024 [ 827.308937][ T28] audit: type=1326 audit(3930757335.635:4930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16916 comm="syz.7.14876" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47309cde59 code=0x7ffc0000 [ 827.340294][ T28] audit: type=1326 audit(3930757335.635:4931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16916 comm="syz.7.14876" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f47309cde59 code=0x7ffc0000 [ 827.346159][T16922] EXT4-fs: Ignoring removed nobh option [ 827.384800][ T28] audit: type=1326 audit(3930757335.635:4932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16916 comm="syz.7.14876" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47309cde59 code=0x7ffc0000 [ 827.412557][ T28] audit: type=1326 audit(3930757335.635:4933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16916 comm="syz.7.14876" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47309cde59 code=0x7ffc0000 [ 827.438359][T16922] EXT4-fs: Ignoring removed i_version option [ 827.463475][ T28] audit: type=1326 audit(3930757335.635:4934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16916 comm="syz.7.14876" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47309cde59 code=0x7ffc0000 [ 827.497843][ T28] audit: type=1326 audit(3930757335.635:4935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16916 comm="syz.7.14876" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f47309cde59 code=0x7ffc0000 [ 827.525308][T16922] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 827.623053][T15962] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.832381][T16943] tipc: Enabling of bearer rejected, failed to enable media [ 828.028213][T16955] xt_hashlimit: size too large, truncated to 1048576 [ 828.048433][T16958] xt_hashlimit: size too large, truncated to 1048576 [ 828.247131][T16966] netlink: 16 bytes leftover after parsing attributes in process `syz.7.14894'. [ 828.280731][T16966] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14894'. [ 828.524896][T16983] tipc: Enabling of bearer rejected, failed to enable media [ 829.063458][T16988] netlink: 24 bytes leftover after parsing attributes in process `syz.3.14913'. [ 829.351084][T17005] netlink: 'syz.3.14910': attribute type 1 has an invalid length. [ 829.365859][T17005] 8021q: adding VLAN 0 to HW filter on device bond1 [ 829.367458][T17003] netlink: 16 bytes leftover after parsing attributes in process `syz.8.14908'. [ 829.389309][T17005] bond1: (slave gretap1): making interface the new active one [ 829.398906][T17005] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 829.433086][T17003] netlink: 8 bytes leftover after parsing attributes in process `syz.8.14908'. [ 829.565036][T17025] bridge_slave_1: left allmulticast mode [ 829.570800][T17025] bridge_slave_1: left promiscuous mode [ 829.577011][T17025] bridge0: port 2(bridge_slave_1) entered disabled state [ 829.688086][T17033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14923'. [ 829.698317][T17033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14923'. [ 829.762999][T17041] netlink: 16 bytes leftover after parsing attributes in process `syz.0.14928'. [ 829.773521][T17041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14928'. [ 830.419784][T17064] netlink: 'syz.8.14937': attribute type 10 has an invalid length. [ 831.497740][T17105] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14955'. [ 831.593402][T17108] bridge_slave_0: left allmulticast mode [ 831.609514][T17108] bridge_slave_0: left promiscuous mode [ 831.625421][T17108] bridge0: port 1(bridge_slave_0) entered disabled state [ 831.659000][T17108] bridge_slave_1: left allmulticast mode [ 831.692298][T17108] bridge_slave_1: left promiscuous mode [ 831.730352][T17108] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.767697][T17108] bond0: (slave bond_slave_0): Releasing backup interface [ 831.799383][T17108] bond0: (slave bond_slave_1): Releasing backup interface [ 831.836634][T17108] team0: Port device team_slave_0 removed [ 831.888802][T17108] team0: Port device team_slave_1 removed [ 831.917800][T17108] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 831.954916][T17108] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 831.976230][ T28] kauditd_printk_skb: 45 callbacks suppressed [ 831.976248][ T28] audit: type=1400 audit(3930757340.395:4981): avc: denied { write } for pid=17119 comm="syz.3.14961" name="mdstat" dev="proc" ino=4026532009 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_mdstat_t tclass=file permissive=1 [ 832.009632][T17108] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 832.017872][T17108] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 832.051809][T17108] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 832.132365][T17122] loop7: detected capacity change from 0 to 4096 [ 832.150434][T17122] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 832.166670][ T28] audit: type=1400 audit(3930757340.585:4982): avc: denied { write } for pid=17121 comm="syz.7.14962" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 832.601800][ T28] audit: type=1400 audit(3930757341.025:4983): avc: denied { shutdown } for pid=17152 comm="syz.0.14974" lport=9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 832.725953][ T28] audit: type=1400 audit(3930757341.145:4984): avc: denied { ioctl } for pid=17158 comm="syz.0.14976" path=2F7365637265746D656D202864656C6574656429 dev="secretmem" ino=155349 ioctlcmd=0x2103 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 833.043472][T15962] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 833.696253][T17204] netlink: 'syz.8.14996': attribute type 1 has an invalid length. [ 833.721271][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 833.782683][T17204] 8021q: adding VLAN 0 to HW filter on device bond1 [ 833.847368][T17204] bond1: (slave geneve2): making interface the new active one [ 833.858811][T17204] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 834.769266][T14073] hid-generic 0000:0000:0000.000F: unknown main item tag 0x0 [ 834.790158][T14073] hid-generic 0000:0000:0000.000F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 834.849388][T17248] fido_id[17248]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 835.566847][T17276] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 835.597284][T17278] bridge_slave_0: left allmulticast mode [ 835.603431][T17278] bridge_slave_0: left promiscuous mode [ 835.609669][T17278] bridge0: port 1(bridge_slave_0) entered disabled state [ 835.620535][T17278] bridge_slave_1: left allmulticast mode [ 835.626966][T17278] bridge_slave_1: left promiscuous mode [ 835.633711][T17278] bridge0: port 2(bridge_slave_1) entered disabled state [ 835.647243][T17278] bond0: (slave bond_slave_0): Releasing backup interface [ 835.657974][T17278] bond0: (slave bond_slave_1): Releasing backup interface [ 835.671648][T17278] team0: Port device team_slave_0 removed [ 835.704360][T17278] team0: Port device team_slave_1 removed [ 835.722539][T17278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 835.744665][T17278] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 835.754557][T17278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 835.762969][T17278] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 835.773826][T17278] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 836.022274][ T3397] lo speed is unknown, defaulting to 1000 [ 836.028281][T30932] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.038374][ T3397] sz1: Port: 1 Link DOWN [ 836.044366][T30932] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.059301][T30932] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.069208][T30932] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.091052][ T3397] lo speed is unknown, defaulting to 1000 [ 836.137696][T30932] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.154323][T30932] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.163553][T30932] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 836.172290][T30932] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 836.188160][T17298] ref_ctr increment failed for inode: 0x191 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88812e420000 [ 836.286402][T17307] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 836.310893][T17307] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 836.345863][T17304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15035'. [ 836.386270][T17304] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15035'. [ 837.010226][T17340] netlink: 64 bytes leftover after parsing attributes in process `syz.3.15051'. [ 837.025421][ T28] audit: type=1400 audit(3930757345.445:4985): avc: denied { unmount } for pid=17341 comm="syz.8.15052" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 837.052153][T17340] syzkaller1: entered promiscuous mode [ 837.063407][T17340] syzkaller1: entered allmulticast mode [ 837.159831][T17300] ================================================================== [ 837.167989][T17300] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 837.174971][T17300] [ 837.177310][T17300] read-write to 0xffff88812dab3424 of 4 bytes by task 17306 on cpu 0: [ 837.185478][T17300] fifo_open+0x89/0x5b0 [ 837.189659][T17300] do_dentry_open+0x49f/0xa60 [ 837.194385][T17300] vfs_open+0x37/0x1e0 [ 837.198503][T17300] path_openat+0x1b39/0x2000 [ 837.203132][T17300] do_file_open+0x16c/0x290 [ 837.207812][T17300] file_open_name+0xfa/0x120 [ 837.212436][T17300] __se_sys_acct+0x8c/0x500 [ 837.216994][T17300] __x64_sys_acct+0x1f/0x30 [ 837.221525][T17300] x64_sys_call+0x2e7f/0x3020 [ 837.226239][T17300] do_syscall_64+0x136/0x3c0 [ 837.230862][T17300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.236777][T17300] [ 837.239132][T17300] read to 0xffff88812dab3424 of 4 bytes by task 17300 on cpu 1: [ 837.246779][T17300] wait_for_partner+0x109/0x1d0 [ 837.251653][T17300] fifo_open+0x491/0x5b0 [ 837.255914][T17300] do_dentry_open+0x49f/0xa60 [ 837.260618][T17300] vfs_open+0x37/0x1e0 [ 837.264719][T17300] path_openat+0x1b39/0x2000 [ 837.269368][T17300] do_file_open+0x16c/0x290 [ 837.273929][T17300] do_sys_openat2+0xa0/0x130 [ 837.278552][T17300] __x64_sys_creat+0x65/0x90 [ 837.283177][T17300] x64_sys_call+0x2ea0/0x3020 [ 837.287995][T17300] do_syscall_64+0x136/0x3c0 [ 837.292615][T17300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.298536][T17300] [ 837.300876][T17300] value changed: 0x00000001 -> 0x00000002 [ 837.306691][T17300] [ 837.309033][T17300] Reported by Kernel Concurrency Sanitizer on: [ 837.315221][T17300] CPU: 1 UID: 0 PID: 17300 Comm: syz.1.15032 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 837.326268][T17300] Tainted: [W]=WARN [ 837.330087][T17300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 837.340163][T17300] ==================================================================