last executing test programs: 4m33.714556597s ago: executing program 32 (id=211): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x37}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 4m19.021639419s ago: executing program 33 (id=310): r0 = socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0xb4, "e5ba43e59c35b94a6676d7c6fa133fd4ff3d843e5d51a1f93c1757b9e03b7fd289f96cd29c4f4431a136825b124860b868dd87cd4b367d807a48a38d2a7c18e7ca9e9b399bed7f0400a08db8bb68ea585a8242e3aced926065065cf8e2b0a043a7350bd04cac3c6f5e2432605ec134af321f8c68e206c254f6d7f4660b54900d447f89b2e5c30b83ab6f9c86d41cb8b2a501cc751b8410e48d93f95566bcb5dbf512489e6123e5f5c105dbcb3a810199345d15fe"}, &(0x7f00000000c0)=0xbc) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r1, 0xccd, 0x10}, 0xc) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000280)={0x7, 0x0}, 0x8) (async) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0xffffffffffffffff, 0xfffff7a2, 0x18}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{0x1, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, [@alu={0x7, 0x1, 0x3, 0x7, 0x3, 0xfffffffffffffff4, 0x830aade1f5e03b93}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x4d, &(0x7f00000001c0)=""/77, 0x40f00, 0x10, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x2, &(0x7f00000003c0)=[0x1, r3, r4, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000400)=[{0x3, 0x4, 0xc, 0x4}, {0x1, 0x5, 0x8, 0x1}], 0x10, 0x9}, 0x94) r6 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000500)='.log\x00', 0x800, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'gretap0\x00', &(0x7f0000000540)={'syztnl2\x00', 0x0, 0x10, 0x8000, 0x3, 0x101, {{0x18, 0x4, 0x2, 0x0, 0x60, 0x68, 0x0, 0x7, 0x4, 0x0, @rand_addr=0x64010100, @broadcast, {[@noop, @timestamp_addr={0x44, 0x1c, 0x8b, 0x1, 0x9, [{@multicast2, 0x5}, {@multicast2, 0x10}, {@multicast2, 0x3e39}]}, @timestamp={0x44, 0x20, 0x4d, 0x0, 0x4, [0x7, 0x0, 0x5d, 0x78, 0xfeaa, 0x3, 0x2785]}, @end, @generic={0x86, 0xd, "3124963dbc87cca4f720ba"}, @noop]}}}}}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r6, r7, 0x25, 0x4, @void}, 0x10) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x101, '\x00', r7, r6, 0x0, 0x3}, 0x50) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000880)={r3, 0xffffffffffffffff}, 0x4) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x9, 0xb, &(0x7f0000000640)=@framed={{0x18, 0x0, 0x0, 0x0, 0xb6, 0x0, 0x0, 0x0, 0x7fffffff}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10}}]}, &(0x7f00000006c0)='GPL\x00', 0x4, 0x8c, &(0x7f0000000700)=""/140, 0x41100, 0x0, '\x00', r7, @cgroup_sock=0x2, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x5, 0xb, 0x0, 0xfff}, 0x10, r2, r6, 0x1, &(0x7f00000008c0)=[r4, r4, r4, r4, r3, r3, r6, r8, r9], &(0x7f0000000900)=[{0x5, 0x4, 0x1, 0x8}], 0x10, 0x4}, 0x94) getsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000a00), &(0x7f0000000a40)=0x4) (async) socket$netlink(0x10, 0x3, 0x8) (async) getsockopt$llc_int(r6, 0x10c, 0x9, &(0x7f0000000a80), &(0x7f0000000ac0)=0x4) ioctl$OCFS2_IOC_GROUP_ADD64(r4, 0x40186f03, &(0x7f0000000b00)={0x1, 0x4, 0x3, 0xb9}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000b40)={'vlan0\x00'}) (async) connect$netlink(r6, &(0x7f0000000b80)=@unspec, 0xc) (async) r10 = syz_io_uring_setup(0x782, &(0x7f0000000bc0)={0x0, 0x3c4a, 0x100, 0x2, 0x15f, 0x0, r6}, &(0x7f0000000c40), &(0x7f0000000c80), &(0x7f0000000cc0)) io_uring_register$IORING_REGISTER_ENABLE_RINGS(r10, 0xc, 0x0, 0x0) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0x40880, 0x0) ioctl$TUNSETSTEERINGEBPF(r11, 0x800454e0, &(0x7f0000000d40)=r5) (async) sync() ioctl$IOC_PR_CLEAR(r6, 0x401070cd, &(0x7f0000000d80)={0x80000001}) (async, rerun: 64) r12 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000dc0), 0x0, 0x0) (rerun: 64) ioctl$EXT4_IOC_CHECKPOINT(r12, 0x4004662b, &(0x7f0000000e00)=0x2) (async) fsetxattr$security_capability(r11, &(0x7f0000000e40), &(0x7f0000000e80)=@v1={0x1000000, [{0x4, 0x1}]}, 0xc, 0x3) (async, rerun: 32) socket$rxrpc(0x21, 0x2, 0x2) (async, rerun: 32) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000ec0)=0x7000, 0x4) 4m3.114172858s ago: executing program 34 (id=426): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="0401020028000b05d25a806f8c6394f90324fc600d00020016000100ff3582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) openat$snapshot(0xffffffffffffff9c, 0x0, 0x1, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file0\x00', 0x1010000, &(0x7f0000000340)=ANY=[], 0x88, 0x2bb, &(0x7f00000007c0)="$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") statfs(&(0x7f0000000000)='./file1\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x60, 0x10, 0x503, 0x0, 0x700, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1406}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @loopback}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x200}, @IFLA_IPTUN_LINK={0x8, 0x1, r2}, @IFLA_IPTUN_TTL={0x5, 0x4, 0x9}]}}}, @IFLA_IFALIASn={0x4}, @IFLA_TXQLEN={0x8, 0xd, 0x6d3b}]}, 0x60}, 0x1, 0x0, 0x0, 0x800}, 0x440b0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000003340)=@newtfilter={0x88c, 0x2c, 0xd3f, 0x70bd24, 0x25dfdbfd, {0x0, 0x0, 0x0, r9, {0x5}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_bpf={{0x8}, {0x860, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x9, 0x4}]}}, @TCA_BPF_POLICE={0x848, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x10000, 0x80000001, 0x3, 0x3, 0x80000000, 0x5, 0xbf, 0x4, 0xf4, 0xffffffff, 0x7, 0x1, 0x81, 0x80000000, 0x81, 0x6, 0x0, 0x7, 0x9cc7, 0xfff, 0xff, 0x9, 0x9, 0x7f, 0x9, 0x3, 0x3, 0x4, 0x9, 0x0, 0x2, 0x1, 0x6, 0xffffff09, 0x4, 0x3, 0x8, 0x0, 0x1, 0xd, 0x40, 0x0, 0x0, 0x7fffffff, 0x9, 0x101, 0x107, 0x263, 0x98, 0x3, 0x80000001, 0x6, 0x4, 0xfffffffa, 0x5, 0x0, 0x9, 0x4, 0x5, 0x8, 0x0, 0x8, 0xfffffe01, 0x7d4, 0x0, 0x1389, 0x53b7, 0xd18, 0x6, 0x7, 0x56, 0x645ec805, 0x4, 0x3, 0x3, 0x5007, 0x3, 0x2, 0x8a92, 0x4, 0x7, 0x4, 0xbbb, 0x0, 0x3, 0x9, 0x271, 0xffffe819, 0xa, 0xe8, 0x3, 0x200, 0x8001, 0x3, 0x87d7, 0x9, 0x851, 0x2, 0x8, 0x3, 0x7, 0x8, 0x6f47, 0x3, 0x5c90, 0x4, 0x1ff, 0x0, 0xf02, 0x1e, 0x57e7, 0x5adaaf8c, 0x3f8, 0x4, 0x79, 0x7, 0x5, 0x4, 0x2, 0x2, 0x1, 0xa, 0x3ff, 0x85f, 0x8, 0x2, 0x3, 0x2, 0x25a, 0x4, 0x3, 0x0, 0xfffffff8, 0x8001, 0xffff6a70, 0x6, 0x5, 0x2, 0x8, 0x3, 0x5, 0x5, 0x1, 0xffffffc0, 0x9, 0x3ff, 0x5, 0x9, 0x7, 0x7, 0xf, 0xfffffff7, 0x8, 0x7fff, 0x0, 0x2e7, 0x3ff, 0x8, 0x450, 0x7, 0x7fffffff, 0x5, 0x5, 0x5, 0x2, 0x1, 0x1000, 0x5, 0x3, 0x4, 0x7, 0x2, 0x0, 0x0, 0x1, 0x80, 0x6670, 0x5, 0x16d, 0x2, 0x4, 0x9, 0x200, 0xc, 0x9, 0x13f9, 0x9, 0x0, 0x5, 0x7, 0x45, 0x80000001, 0xb, 0x3, 0x2, 0x0, 0x6, 0x8000, 0x4, 0x3, 0x6, 0x2, 0x7, 0xa262, 0x1, 0xc, 0x6, 0x7, 0x400, 0x2, 0x401, 0x8, 0x205, 0xa, 0x1000, 0x1, 0x58ba, 0x5, 0x42bc, 0x5, 0x120, 0x3, 0x5, 0x3, 0x6f1da0e, 0x80000001, 0x2, 0x8, 0x4, 0x696, 0x7, 0x8, 0x2, 0x1e, 0x3, 0x0, 0x8, 0x2, 0x8f0d, 0x4, 0xa, 0xfffffff6, 0xfffffff7, 0x6, 0x6, 0x1, 0x80, 0x5, 0x0, 0x6, 0x8e, 0xb5d, 0x9, 0xfffffd4c]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xc2, 0x3, 0x859, 0xaedb, 0x7, {0x7, 0x0, 0xd, 0x8, 0x4, 0xfa6}, {0x8, 0x0, 0x7ff, 0xf95b, 0x2, 0x280000}, 0x10001, 0xfffffffd, 0x6}}, @TCA_POLICE_RATE={0x404, 0x2, [0x9, 0x0, 0xfffffffe, 0x10, 0x8, 0x0, 0x9, 0x0, 0x7, 0x8, 0x4d8b, 0x6, 0x40, 0x1, 0x0, 0x81, 0x0, 0xf, 0x0, 0x0, 0x5, 0x8, 0x8000, 0x4, 0x9, 0x9, 0x81, 0xa00000, 0xe, 0x4, 0x80000000, 0x6, 0xfffffff9, 0x3, 0x2, 0x7, 0x7, 0x1, 0x14f, 0x8, 0x200, 0x7, 0x5, 0x69, 0x84, 0x3ff, 0x0, 0xf0e7, 0x7, 0x487, 0x4, 0x8, 0x7fffffff, 0x3ff, 0x7fffffff, 0x0, 0xbd, 0x6, 0x0, 0xa, 0x10001, 0x2, 0x43, 0x1, 0x7, 0xffffff00, 0x6, 0x333f, 0x7, 0xc8a, 0x6, 0x1, 0x10, 0x7f, 0x7, 0x8, 0x100, 0x8001, 0x8, 0x4, 0x9, 0x81, 0x5, 0x7, 0x4, 0x0, 0x7f, 0x9, 0x3, 0x4, 0x4, 0x2, 0x9, 0x2, 0xfffffff8, 0x4, 0x4e, 0x3, 0x4, 0x1ff, 0xc0000000, 0x4, 0x5b3c, 0xfffffff7, 0x6d, 0x8001, 0x10000, 0x1, 0x2c29, 0x7, 0x4, 0x0, 0x5, 0x0, 0xfffffffb, 0xea, 0x0, 0x9, 0x40, 0xfffffffa, 0xffffff00, 0x1, 0x8001, 0xda, 0x7f, 0x3, 0x8566, 0x2f, 0x9, 0xfffffff9, 0xb, 0xa97e, 0x8, 0x9, 0x2b36, 0x4, 0x4, 0x6, 0x2, 0x7f, 0x5, 0x1ff, 0x7f, 0x101, 0xfffffffa, 0xd, 0x6, 0x0, 0xf, 0x9, 0xb, 0x7f, 0x1, 0x10, 0x0, 0x5, 0x1038, 0x9, 0x5, 0xf0, 0x200, 0x0, 0x6, 0x80000000, 0x5, 0xffffffff, 0x6, 0x2, 0x3ff, 0x3, 0x7ff, 0x6, 0x1, 0xd, 0x3, 0x632, 0x2, 0xc4, 0xffff, 0x8, 0x0, 0x9, 0x3, 0x8, 0x5, 0x7, 0x3, 0x10001, 0xd, 0xd, 0x7, 0x7, 0xf2, 0x5, 0x600000, 0x7, 0x4, 0xfffffff7, 0x1, 0x3, 0x33fbb166, 0x9, 0x3, 0x4, 0x8, 0x4, 0xc, 0x7fffffff, 0x400, 0x9, 0x8, 0x1, 0x2e5c, 0x5, 0x7, 0x5, 0x1, 0x7fff, 0x80000001, 0x8c, 0xffffffc0, 0x80000000, 0x7, 0x7d3, 0xfff0, 0x1, 0x8, 0xb, 0x7ff, 0x4, 0x0, 0x6, 0x4, 0x5, 0x6, 0xd143, 0x4, 0x3a6, 0x7, 0x6, 0x7, 0x1000, 0x1, 0x4, 0x2b, 0x7, 0xa, 0x6, 0xdff, 0x30d, 0xfff, 0x1, 0x3ff, 0x7ff, 0x1, 0x7]}]}]}}]}, 0x88c}, 0x1, 0x0, 0x0, 0x24048001}, 0x20044804) mount(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4400000010000104fcffffffffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="4319030000ecffff130012800b0001006d616373656300000400028008000500", @ANYRES32=r1], 0x44}, 0x1, 0x2000000, 0x0, 0x2004d808}, 0x0) 4m2.093817269s ago: executing program 4 (id=437): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) r2 = creat(0x0, 0x194) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x40004, @vifc_lcl_addr=@remote, @private=0xa010101}, 0x10) write(r2, &(0x7f00000001c0), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000006b000000760000000000000027050000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8}, 0x23) r3 = socket$igmp(0x2, 0x3, 0x2) sendmsg$inet(r1, &(0x7f0000000740)={&(0x7f0000000140)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10, &(0x7f0000000680)=[{&(0x7f0000000240)="26a76206194bdc388f31de9d52610781face085877cdf89d01ec65d60f2ec0fe", 0x70}, {&(0x7f00000002c0)="666cf22f57f6e4ba4ce2e942cb7926241a", 0x11}, {&(0x7f0000000380)="9e5228a82227f5716b0c1b4b2a1c9d53a42d33315eb39725a84ae9c30253474721dfd47f7b3c9d1e398e8df538492d331423892272c56978301c9b59bff0086313805e8c330959dd37dd920af523324b663f27f97f2fd11864a148a7fa713295f23df53d946fb63b658197dac3c7ed65fc8261269491fc99c42191e3c59f80a335fc55f46859d9", 0x87}, {&(0x7f0000000580)="6e360d364897b938a985260f1c536a69c3011b4d4c84bc3cd0ae65f91328e0d72b0befcddc3fb1e5f2fc09469bb9af7a087f6af5894e9dd908ff88ff8f889f37b871db9611006c2d2441bb6a5d0bdf9093a0bf7c4cf8015c1ab8ecb69375d54aa3a95aa82e3471739395afc09729a39eee8bed6b2956baf8590d98547cb699cdb8cd9e77a20d7d4606b12f3113fd69061ae87ba526fe3ff630436c6acadc327a47c316546bef3b029efcf6d2b3bee55db08f82212a3e1dd1232a8e1387ae3d14a46e4557267ede8e81bc06b9654e62c8710958e25cb2038fee388bbb460fd6cd6a8decf8993b90273df0c86f12fbaa9e9b", 0xf1}], 0x4, &(0x7f00000006c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xa}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@end, @lsrr={0x83, 0xb, 0xad, [@dev={0xac, 0x14, 0x14, 0x1b}, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5a}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x58}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x80}, 0x4044800) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, 0x0) syz_emit_ethernet(0x45, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa11000001"], 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) symlinkat(&(0x7f0000001040)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00') r4 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r4, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) r5 = socket$qrtr(0x2a, 0x2, 0x0) recvmmsg(r4, &(0x7f0000000ac0)=[{{0x0, 0xff2c, 0x0}, 0x1}], 0x40, 0x2, 0x0) connect$qrtr(r4, &(0x7f00000000c0)={0x2a, 0x3, 0x4000}, 0xc) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001140)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000540)='O', 0x1}], 0x8}}], 0x1, 0x0) writev(r5, &(0x7f0000000340)=[{&(0x7f00000001c0)="c7c5", 0x2}], 0x1) unlink(&(0x7f0000000100)='./file0/file1\x00') syz_emit_ethernet(0x52, &(0x7f0000000280)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd60000000001c2c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa330040"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getpid() setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4, 0x0, 0xb51b, 0x10}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000008080)={0x14, 0x12, 0xa01, 0x0, 0xc00e, {0x80}}, 0x14}}, 0x4) 4m1.176250639s ago: executing program 4 (id=444): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x70, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x34, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x101}, @NFTA_LIMIT_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}]}}}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x100}}, 0x0) 4m1.105863941s ago: executing program 4 (id=446): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x9, 0x5}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8000, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f00000001c0)={[{@bsdgroups}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000700)="$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") write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r2, 0x0, 0x0) rmdir(0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'bond0\x00'}) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10220, &(0x7f0000004780)={0x0, 0x3938700}) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6005, &(0x7f0000000000)=0x3, 0x7, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000002180)=ANY=[@ANYBLOB="b8000000290001000000020000080000ac1414bb000000000000000000000000fc00000000000000000000000000000000000000100000000200200000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000ea44000000000000000000000000000000000000000000000000010000000000000009000000000000000a0080ffffffffffffff00000000000001000000000000000a"], 0xb8}, 0x1, 0x0, 0x0, 0x2404c831}, 0x0) syz_open_procfs(0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'ip_vti0\x00'}}, 0x1e) 4m0.832704356s ago: executing program 4 (id=450): writev(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0xf, 0x3, 0x2) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$OCFS2_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000180)={0x2, 0x1, 0xe, 0x8, 0xe76, 0x770}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, r2, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0xd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f0000000240)=0x10) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x73, &(0x7f0000000040)={r6, 0x6, 0x10, 0x7ff, 0x3}, &(0x7f0000000140)=0x18) 3m59.704642731s ago: executing program 4 (id=459): getpid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000050000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xd81, &(0x7f0000001c00)=ANY=[], 0x0) 3m59.704502211s ago: executing program 35 (id=459): getpid() r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000050000000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0xd81, &(0x7f0000001c00)=ANY=[], 0x0) 2m38.320361142s ago: executing program 5 (id=1005): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'wlan0\x00', 0x1000}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x1c, 0x68, 0x1, 0xfcfd, 0x25dfdbfb, {0x2, 0x0, 0x0, 0x0, 0x4}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="01000000050000000200000007"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000006c0)=ANY=[], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r4, r3}, 0xc) recvfrom$l2tp6(r1, &(0x7f0000000140)=""/181, 0xb5, 0x1, &(0x7f0000000200), 0x20) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x7c, 0x2c, 0x800, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0xfff3, 0x7}, {}, {0xa, 0xc}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4c, 0x2, [@TCA_CGROUP_EMATCHES={0x48, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7}}, @TCA_EMATCH_TREE_LIST={0x3c, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x38, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0xe, 0x5, "5d69bea38d99e7b58184"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}]}}]}]}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000006a0001002abd7000fddbdf250a00000000000000080001008b"], 0x20}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 2m37.651282656s ago: executing program 5 (id=1010): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', 0x0}) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, r3, 0x1, 0x70bd2a, 0x25dfdbf9, {}, [{{0x8, 0x1, r4}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r2}}}]}}]}, 0x60}, 0x1, 0x400000000000000, 0x0, 0x90}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c000000520000022abd070000000800020005000000080002000100000002000500fbffffff080006000100060001000000000000000000000000000000000000f4ffff91eaffffffffffffa5ac7ee89fbeb65c1c39ec4f16a8370000000000000009b5267e0503"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x40) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x6d2, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0xa) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f7274"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="50000000090601020000000000000000020000840900020073797a31000000000500010007000000280007800c00018008000140fffffff70500070088000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x90) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, 0x0, 0x10040) sendmsg$IPSET_CMD_LIST(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000070601080000000000000000000000000500010006"], 0x1c}}, 0x0) recvmmsg(r8, &(0x7f0000003840)=[{{0x0, 0x0, &(0x7f0000002780)=[{&(0x7f00000002c0)=""/127, 0x7f}, {&(0x7f0000000340)=""/240, 0xf0}, {&(0x7f0000000440)=""/96, 0x60}, {&(0x7f00000004c0)=""/77, 0x4d}, {&(0x7f00000016c0)=""/4096, 0x1000}], 0x5}, 0x1}], 0x400000000000141, 0x20, 0x0) r9 = syz_open_dev$evdev(0x0, 0x0, 0x0) gettimeofday(&(0x7f0000000a80), 0x0) syz_usb_disconnect(r9) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x11, 0x3, 0x0) 2m35.849753144s ago: executing program 5 (id=1031): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x1, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_config_ext={0x400, 0x7832}, 0x4, 0x0, 0x10004, 0x3, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x6020400) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) recvmmsg(r4, 0x0, 0x0, 0x10082, 0x0) readv(r3, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) setns(r1, 0x24020000) syz_clone(0xbb083000, 0x0, 0xdcbd779fe612d4ee, 0x0, 0x0, 0x0) 2m34.864340795s ago: executing program 5 (id=1041): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x30}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0500000005000000010a00008500000041000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/16], 0x50) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000005c0)=@nat={'nat\x00', 0x670, 0x5, 0x350, 0x150, 0x150, 0xfeffffff, 0x0, 0xa8, 0x2b8, 0x2b8, 0xffffffff, 0x2b8, 0x2b8, 0x5, 0x0, {[{{@ip={@loopback, @broadcast, 0x0, 0x0, 'dvmrp1\x00', 'vlan1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x13, @rand_addr, @empty, @port=0x1, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x13, @broadcast, @loopback}}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x3c}, @empty, 0x0, 0xff, 'vlan0\x00', 'virt_wifi0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0xa}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @rand_addr, @remote, @port, @icmp_id=0x65}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3b0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$packet(0x11, 0x3, 0x300) r3 = mq_open(&(0x7f0000000000)='batadv_slave_1\x00', 0x8c2, 0x30, 0x0) mq_timedsend(r3, 0x0, 0x20, 0x5, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_GET(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000980)=ANY=[@ANYRESDEC, @ANYBLOB="dd68100d1d91bd1f5f648878a0042242749c33708f07b8aaf5c7725c0e1419bd6269c7e995f9e029ecda771b5e42acca2aa2bd82dfcbc5f4fa4810e27bde13de72cc995b092cee7837b579f0e0eeb1ef7adadc06963894d496256e"], 0x8c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0) r5 = socket(0xa, 0x4, 0x87) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'ipvlan0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x74, r6}) ioctl$sock_inet6_tcp_SIOCINQ(r5, 0x8916, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) set_mempolicy(0x4005, &(0x7f0000000080)=0x7e, 0x9) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000240)=@in6={0xa, 0x4e21, 0xfffffffc, @empty, 0x200001}, 0x80, 0x0}, 0x2400cc44) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB='b 8:'], 0x9) r7 = io_uring_setup(0x5af9, &(0x7f00000003c0)={0x0, 0x5, 0x20000, 0x2, 0x10}) close(r7) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, 0x140f, 0x1, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040004}, 0xc0) 2m34.250204018s ago: executing program 5 (id=1057): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0x10000, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r0, &(0x7f00000002c0)={'#! ', '', [{0x20, '\x0f\x10\t'}]}, 0x8) close(r0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f0000000540)={[&(0x7f0000000900)=' wO\xd5\xce\x82\x89r\xa0\r\xc4Z\x15\xfds\x17g\n\xee\x9f\a0\xc3\x80\xbf\x80j$\xe6Z\xde\xf1pc\x96\x8f\xb5\x9d\xe3\x11m\x88~\xe3\xc7\xe3\t\xab\xbb@\xd9\xf8\xa2N\x03\xcf\xe4\xd6\x0ew\x10\xc2\xaa\x84bC\xc8\xd0\xe07\xa1\rIa\xb1^\xc5WG\xccV\xd3\x91\x84x\x9d\x8eg\x84\xeb\x9e;\x8f\xa1\xa3\xcf]@\x82\xcf\x01$;\xd5\xc0\xa8\xc8r\x0e_\xac\xef\xf5\r\xd5Q\v\b#E\xcf@a\xa2\xaa#\x13S\x04\x12$\xcb\xbeV!\x1d\xc7\x84_\\ \xc7oh$\xc9\x06m'], 0xe0ffffff7f0000}, 0x0) 2m30.555554727s ago: executing program 5 (id=1066): syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) 2m30.518216997s ago: executing program 36 (id=1066): syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x3501) 2m16.452026407s ago: executing program 8 (id=1166): r0 = socket$inet6(0xa, 0x3, 0x5) sendmmsg(r0, &(0x7f0000001500)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x500, 0x80000, @local, 0x0, 0x3}, 0x80, 0x0}, 0x5b4}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x108}}], 0x2, 0xc040) 2m16.362704399s ago: executing program 8 (id=1167): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000200)={[{@noblock_validity}, {@noauto_da_alloc}, {@nobh}, {@oldalloc}, {@acl}, {@usrjquota, 0x2e}, {@noacl}, {@nodiscard}, {@grpquota}, {@usrquota}], [], 0x2c}, 0x1, 0x45e, &(0x7f0000000480)="$eJzs20tvG0UcAPD/2nHfJaGUR0sBQ3lEPJImLdADlyKQekFCgkM5hjStSt0GNUGiVUUDh3JE/QTAEYlPwIleEHACcYU7QqpQLxQOaNHaa2Ps2DhOXLf17ydtPLM7653/7k48O2MHMLLK2Z8kYkdE/BwR4xFRbC1Qrr3cuH5x/s/rF+eTSNM3fk+y3eKP6xfn60WT/HV7npksNFa1WTp/4fRcpbJwLs9PL595d3rp/IXnTp2ZO7lwcuHs7OHDhw7OvPjC7PMbEufOrK57P1jct+foW1demz925e3vvswqtyPf3hxHzcS6j1mOcscT8MS63/3WsjN/7XjBuSVlbX0sIkrV9j8exWquZjxe/WiolQMGKk3TdHPb2kYPYCUF7mBJDLsGwHDUP+iz59/6chO7H0N37UjtASiL+0a+1LaMRSEvU2p6vt1o5Yg4tvLXp9kSq45DAABsrK+z/s+zq/X/CnFfU7m78rmhiYi4OyJ2RcQ9EbE7Iu6NqJa9PyIeWOPxyy359v7Pj1v7CqxH145E8lI+t/Xf/l+99xcTxTy3sxp/KTlxqrJwID8nk1HanOVnuhzj6is/fdJpW3P/L1uy49f7gnk9fhtrGaA7Prc8t56Ym137sDoGeKk9/qQxE5BExJ6I2NvH+2+JiFNPf7GvbUPTRFH3+LsY66NCLdLPI56qXf+VaIm/uapd5ient0Rl4cB0/a5o9/0Pl1/vdPz/v/6DlV3/bave/434J5Lm+dqltR/j8i8fd3ym6ff+35S8WU1vyte9P7e8fG4mYlOy0r5+9t996/l6+Sz+yf2rt/9dEX9/lu/3YERkN/FDEfFwRDyS1/3RiHgsIvZ3if/blx9/p//4ByuL//iarv/aE8XT33zV6fi9Xf9D1dRkvqaX/3+9VnA95w4AAABuF4Xqd+CTwlQjXShMTdW+w787thUqi0vLz5xYfO/s8dp35SeiVKiPdI03jYfO5GPD9fxsS/5gddw4TdN0azU/Nb9YGdScOtCb7R3af+bX4rBrBwzcmubR/MIL7igbMI8O3Ka0fxhd2j+MLu0fRtdq7f9SxI0hVAW4yXz+w+jS/mF0af8wurR/GEnr+V1/t8Suo4N659sxcTUiOpUpDrWGT27vd/coDPus9p4o5Xd7Y03hFqlYNbE5InotfCluVsWG/I8JAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/wTAAD//7CF5k8=") socket$nl_generic(0x10, 0x3, 0x10) timer_create(0x0, 0x0, &(0x7f0000000000)) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x410, 0x0, 0x1f8, 0x328, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@arp={@empty, @multicast1, 0xffffff00, 0xffffff00, 0xe, 0xc, {@empty, {[0x0, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@remote, {[0xff, 0x0, 0xff]}}, 0x3, 0xfff8, 0x1, 0x9, 0x8502, 0x5, 'ip6gre0\x00', 'veth1\x00', {}, {0xff}, 0x0, 0x410}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @mac, @broadcast, @empty, 0x4}}}, {{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x3, 0x4, 0x200, 0x1, 0x0, "d831a202280f98da6acdc32336a4a1383a1a22dce5af7bfd4dec86c8ad4c37287b8a1e5449b00239821054e999955be8aff6bd3a720808ee3a4afaa03cd9c169"}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x108) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x88, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x8c00, &(0x7f0000009b00)={0x0, 0x8c}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 2m15.554218346s ago: executing program 8 (id=1171): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x18000}, 0x0) 2m15.520468007s ago: executing program 8 (id=1174): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000001480)={[{@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@dioread_lock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@barrier_val={'barrier', 0x3d, 0x100}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@errors_continue}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$eJzs3d9rW1UcAPDvTdPup66DMdQHGezByVy6tv6YIDgfRYcDfZ+hzcpouowmHWsduD24F19kCCIOxD/Adx+H/4B/xUAHQ0bRBxEiN73psjZp2i4z2fL5wG3Pyb23535z7vf2nNyEBDC0jqU/chEvR8Q3ScShlnX5yFYeW9tu9eH1mXRJol7/9M8kkuyx5vZJ9vtAVnkpIn79KuJkbnO71eWV+WK5XFrM6hO1hSsT1eWVU5cWinOludLlqenpM29NT737zts9i/X1839//8ndD898fXz1u5/vH76dxNk4mK1rjeMJ3GitHCv+m5VG4+yGDSd70NggSfp9AOzKSJbno5FeAw7FSJb1wPPvy4ioA0Mqkf8wpJrjgObcvkfz4GfGgw/WJkCN2Mda48+vvTYSextzo/2ryWMzo3S+O96D9tM2fvnjzu10ia1fh9jXpQ6wIzduRsTpfH7z9T/Jrn+7d7rx4vHWNrYxbP9/oJ/upuOfN9qN/3Lr459oM/450CZ3d6N7/ufu96CZjtLx33ttx7/rl67xkaz2QmPMN5pcvFQunY6IFyPiRNS73vo4s3qv3mld6/gvXdL2m2PB7Dju5/c8vs9ssVaMiLFdhvyYBzcjXsm3iz9Z7/+kTf+nz8f5bbZxtHTn1U7rusf/dNV/initbf8/6tZk6/uTE43zYaJ5Vmz2162jv3Vqv9/xp/2/f+v4x5PW+7XVnbfx495/Sp3W7fb8H0s+a5SbSXCtWKstTkaMJR9vfnzq0b7NenP7NP4Tx7e+/rU7/9PJ1+fbjP/WkVsdNx2E/p/dUf/vvHDvoy9+6NT+9vr/zUbpRPZIdv1rLztXtnuAT/r8AQAAAAAAwCDJRcTBSHKF9XIuVyisvb/jSOzPlSvV2smLlaXLs9H4rOx4jOaad7oPtbwfYjJ7P2yzPrWhPh0RhyPi25F9jXphplKe7XfwAAAAAAAAAAAAAAAAAAAAMCAOdPj8f+r3kX4fHfDUNb7YYE+/jwLoh65f+d+Lb3oCBlLX/AeeW/Ifhpf8h+El/2F4yX8YXvIfhpf8h+El/wEAAAAAAAAAAAAAAAAAAAAAAAAAAKCnzp87ly711YfXZ9L67NXlpfnK1VOzpep8YWFppjBTWbxSmKtU5sqlwkxlodvfK1cqVyanYunaRK1UrU1Ul1cuLFSWLtcuXFoozpUulEb/l6gAAAAAAAAAAAAAAAAAAADg2VJdXpkvlsulRYWOhfdjIA7jaQa4Zle75wclCoUOhZtZ9+5srz5elAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgg/8CAAD//4yLMZo=") r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x240040, 0x0) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000180)=0x1) r2 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r2) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) capset(&(0x7f0000000080)={0x19980330}, &(0x7f0000000040)={0x0, 0x6, 0x0, 0xfffffffc}) r3 = syz_open_procfs(r0, &(0x7f0000000140)='syscall\x00') readv(r3, &(0x7f0000000800)=[{&(0x7f00000001c0)=""/238, 0xee}], 0x1) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000300)=ANY=[], 0x835, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x1, 0x8, 0x2}, 0x48) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000480), &(0x7f0000000280)=@udp=r5}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000780)={r4, &(0x7f0000000380), 0x0}, 0x20) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000640)={0x14, 0x26, 0x201, 0x70bd2e, 0x25dfdbfc, "", [@generic="9d"]}, 0x14}], 0x1}, 0x0) 2m15.012860348s ago: executing program 8 (id=1178): socket$inet6(0xa, 0x800000000000002, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) mkdir(0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@enum64={0x6, 0x2, 0x0, 0x13, 0x0, 0x8, [{0x6, 0x7, 0x4e}, {0x3, 0x8, 0xd83}]}]}, {0x0, [0x0, 0x30, 0x30, 0x0, 0x2e, 0x61]}}, &(0x7f0000000f40)=""/4089, 0x44, 0xff9, 0x8}, 0x28) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000800030000000000140000004500005c00660000000190780a010100ac1414aa05009078e0000002400b0f6c00681f2f05330001ac1414bb64010101442caf63ac1e010100000005ffffffff000007ff00000000000000000a010101000000030a01010200000005"], 0xfdef) socket$nl_xfrm(0x10, 0x3, 0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = io_uring_setup(0x650b, &(0x7f0000000180)={0x0, 0x2c3f, 0x0, 0x21, 0x2000ab}) r3 = epoll_create1(0x80000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0xb, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x63}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9, {0xf5}}}}]}]}, 0x70}}, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x0, 0x20) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f00000000c0)={0xe000001a}) sendfile(r3, r5, 0x0, 0x8) close_range(r2, 0xffffffffffffffff, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_RELOAD_REGDB(r6, &(0x7f0000000180)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r7, 0x800, 0x70bd2b, 0x1, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x4000000) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext={0x80000001, 0x8a}, 0x1002, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) 2m12.797680985s ago: executing program 8 (id=1190): r0 = getpid() syz_pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x1, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_config_ext={0x400, 0x7832}, 0x4, 0x0, 0x10004, 0x3, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x6020400) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10082, 0x0) readv(r2, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) 2m12.672288288s ago: executing program 37 (id=1190): r0 = getpid() syz_pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x1, 0x2, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_config_ext={0x400, 0x7832}, 0x4, 0x0, 0x10004, 0x3, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, 0x100000001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) unshare(0x6020400) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10082, 0x0) readv(r2, &(0x7f0000003a00)=[{&(0x7f0000003840)=""/150, 0x96}], 0x1) 1m36.649809264s ago: executing program 9 (id=1509): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f0000000080), 0x10) close(r0) close(0x4) 1m36.470944087s ago: executing program 9 (id=1510): r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x8031, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x6000000) copy_file_range(r0, 0x0, r0, &(0x7f00000004c0)=0x100, 0x9, 0x0) 1m35.043881988s ago: executing program 9 (id=1523): close(0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xfbfffffe, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "1853b7479f637a06", "171c2ee2d3e5d8dfa6efb7c36605176f8803dd806937b05696341ab3344b4669", "cd327e23", "86898c6440009f24"}, 0x38) close(0x3) 1m34.969563519s ago: executing program 9 (id=1525): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) unshare(0x22020400) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) 1m34.873998312s ago: executing program 9 (id=1526): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000280)='.\x00', 0x2000, 0x0) open_by_handle_at(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='\b\x00\x00'], 0x30002) 1m34.657496606s ago: executing program 9 (id=1537): add_key$keyring(&(0x7f0000001e80), &(0x7f0000001ec0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) timer_gettime(0x0, &(0x7f0000000200)) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000001000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') preadv(r1, 0x0, 0x0, 0x8, 0xffffffff) syz_emit_ethernet(0x46, &(0x7f0000001340)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x3}}}}}}, 0x0) unshare(0x20040600) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000740)={0x1f, @none}, 0x8) unshare(0x2a060400) poll(0x0, 0x0, 0x9) 1m34.619613617s ago: executing program 38 (id=1537): add_key$keyring(&(0x7f0000001e80), &(0x7f0000001ec0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) timer_gettime(0x0, &(0x7f0000000200)) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, &(0x7f0000001000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_adj\x00') preadv(r1, 0x0, 0x0, 0x8, 0xffffffff) syz_emit_ethernet(0x46, &(0x7f0000001340)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x3}}}}}}, 0x0) unshare(0x20040600) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000740)={0x1f, @none}, 0x8) unshare(0x2a060400) poll(0x0, 0x0, 0x9) 1m15.437838275s ago: executing program 0 (id=1809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x5, 0x9}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4004) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}, {0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1m15.22205625s ago: executing program 0 (id=1814): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r0, 0x2000012, 0x0, 0x0, &(0x7f0000000280), 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1m15.21903379s ago: executing program 0 (id=1818): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x1f, r0, 0x20dc, 0x8) 1m15.129738802s ago: executing program 0 (id=1823): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) unshare(0x28000600) unshare(0xc000400) syz_clone(0x2000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) 1m14.908683086s ago: executing program 0 (id=1831): socket$igmp(0x2, 0x3, 0x2) mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x20a0, 0x0) 1m14.551592414s ago: executing program 0 (id=1844): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff7, 0x84, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x13, 0x2}, 0x8, 0x203ffffb, 0x300, 0x0, 0x2, 0x20000, 0x0}) 58.957878456s ago: executing program 39 (id=1844): r0 = syz_open_dev$usbfs(&(0x7f0000000040), 0x400000001fc, 0x301) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff7, 0x84, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x13, 0x2}, 0x8, 0x203ffffb, 0x300, 0x0, 0x2, 0x20000, 0x0}) 31.671712786s ago: executing program 1 (id=2558): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x305) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000400)) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000100)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0xb, 0xffff7ffe, 0xff}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x9}}], 0x38, 0x4014}, 0x2c0408d0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) openat$ppp(0xffffffffffffff9c, 0x0, 0x288840, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050000000000000000000000ffff0a010101000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0xc11270e446e71eb1, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x0, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @common=@inet=@recent0={{0xf8}, {0xfffffffe, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) shutdown(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0xfffffff7, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10) 31.152634557s ago: executing program 7 (id=2566): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="05032200d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0xf8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 31.056410119s ago: executing program 2 (id=2567): r0 = socket(0x28, 0x1, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000400)={'syztnl1\x00', 0x0, 0x0, 0x1100, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x1, 0x0, 0x2f, 0x0, @empty, @private}}}}) 30.890295893s ago: executing program 2 (id=2569): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) 30.719120546s ago: executing program 7 (id=2571): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x1a) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x24, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0xa, 0x0, 0x2}, {0x2, 0x3, 0x3, 0xa, 0x0, 0xfff8}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r0}, {0x6, 0x0, 0xb, 0x9}, {0x46, 0x8, 0xfff0, 0x76}}, @printk={@li, {0x3, 0x3, 0x3, 0x4, 0x9}}], {{0x7, 0x1, 0x7, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 30.53853994s ago: executing program 1 (id=2572): unshare(0x600) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@dev={0xfe, 0x80, '\x00', 0xa}}) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) 30.450642352s ago: executing program 1 (id=2573): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7a38, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0x34c}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 30.357531444s ago: executing program 1 (id=2575): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, 0x0, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f00000000c0)={0x5, 0x3, 0xfffff507}, 0xc) 30.269285786s ago: executing program 7 (id=2577): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) 30.267276626s ago: executing program 6 (id=2578): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000007040)=@newtfilter={0x48, 0x2c, 0xd2f, 0x10b52c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff5, 0x2}, {}, {0x2, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xa}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008804}, 0x20000000) 29.983286172s ago: executing program 7 (id=2580): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c000000100001040064ffffff00000000000000", @ANYRES32=r2, @ANYBLOB="31000000bf3f9f8008000a00", @ANYRES32=0x0, @ANYBLOB="54001280110001006272696467655f736c617665000000003c00058008002200", @ANYRES32, @ANYBLOB="0800030040000000050020000100"], 0x7c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) 29.979296562s ago: executing program 2 (id=2581): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001cc0)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r3, {0x9}, {0xffff}, {0x10, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xfd, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40) 29.978662253s ago: executing program 6 (id=2582): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x305) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000400)) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000100)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0xb, 0xffff7ffe, 0xff}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x9}}], 0x38, 0x4014}, 0x2c0408d0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) openat$ppp(0xffffffffffffff9c, 0x0, 0x288840, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050000000000000000000000ffff0a010101000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0xc11270e446e71eb1, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x0, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @common=@inet=@recent0={{0xf8}, {0xfffffffe, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) socket$key(0xf, 0x3, 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0xfffffff7, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10) 29.978505882s ago: executing program 3 (id=2583): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000180)="05032200d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0xf8, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 29.899433884s ago: executing program 6 (id=2584): socket$inet6(0xa, 0x80002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) close(0xffffffffffffffff) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000004100)="d2887b15091d37d7a34ad8c3ce6f7b4b443c4867c4966a86", 0x18}], 0x2) 29.858963335s ago: executing program 3 (id=2585): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7a38, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0x34c}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 29.849796295s ago: executing program 2 (id=2586): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32, @ANYBLOB], 0x7c}}, 0x20000080) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000700)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2800) setreuid(0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) ptrace$peekuser(0x3, r3, 0x9) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x598dcc9a0b37a243) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f00000002c0)='tmpfs\x00', 0x0, &(0x7f0000000300)='usrquota') lchown(&(0x7f00000000c0)='./file1\x00', 0xee01, 0x0) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="230900000000000000000100000005000700000000000800090000000000060002000100000008000a000000000008001700", @ANYRES32], 0x3c}}, 0x0) 29.766165286s ago: executing program 3 (id=2587): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x4, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x5c}}}], 0x40}, 0x0) 29.762366427s ago: executing program 3 (id=2588): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x5}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x800}, @TCA_TBF_PARMS={0x28, 0x1, {{0x81, 0x0, 0xee8, 0x1c, 0x800, 0x8}, {0x7, 0x2, 0x7, 0x1003, 0x5, 0x20000007}, 0x6db6312a, 0x7, 0x1257}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0x3}, {0xffff, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x44840) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 29.650729199s ago: executing program 6 (id=2589): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x1, 0x470bd27, 0x25dfd402, {0x0, 0x0, 0x0, r1, 0x282e, 0x16ac1}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PROXYARP={0x5}]}}}]}, 0x44}}, 0x200088c2) 29.632368689s ago: executing program 7 (id=2590): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000007c0)=ANY=[@ANYRES32=r4, @ANYRES32=r3, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f00000002c0)=r0}, 0x20) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) recvmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000800)=""/229, 0x8ec1}], 0x1}, 0x2002) 29.630285129s ago: executing program 3 (id=2591): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xd, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, [@cb_func={0x18, 0x0, 0x4, 0x0, 0xfffffffffffffffd}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffff7}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_sock_diag(0x10, 0x3, 0x4) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000740)={0x64, 0x0, 0x20, 0x70bd2f, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r0}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4040010}, 0x4030) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r3 = socket$netlink(0x10, 0x3, 0x8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) sendmsg$nl_generic(r3, &(0x7f00000025c0)={&(0x7f0000000080), 0xc, &(0x7f0000002580)={&(0x7f0000003c00)={0x1a14, 0x2f, 0x300, 0x70bd25, 0x25dfdbfd, {0x2}, [@nested={0x114, 0x15c, 0x0, 0x1, [@nested={0x4, 0x50}, @nested={0x4, 0x161}, @typed={0x8, 0xe3, 0x0, 0x0, @pid}, @nested={0x4, 0x69}, @typed={0xc, 0x78, 0x0, 0x0, @u64=0x8}, @nested={0x4, 0x100}, @generic="434e637878abcb29374f7dbf4a4d1b23c6170af682bcedb884bfccd69212d17cb0aff9924dd5c983bccd79db9c42a28345167d", @generic="d94c87bcb42fddc936d357c60193289382bfa9b11d3996d20ce9f06e7c5071ee7929bccd37a6d4ae77dddab0c1799aebba816a289774b5c055eb7c36c2f7e1d38b3250d3915ee70fc00c7b2b75c8cfd4dca431945c14f139211955edd8590de47f9827084d06a67ed998cd297842c611eee3e4c571c7a746206eded8c4110eac34144b02c8150a3e48680ce498c6cc2887c4713c4e08f5c606100f5b5d256cad84cd4ce93c02840f0f74d0d29e49f9940b", @typed={0x8, 0xdc, 0x0, 0x0, @uid=r4}]}, @nested={0x11f4, 0xe2, 0x0, 0x1, [@generic="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", @nested={0x4, 0xf4}, @typed={0x4, 0xc2}, @nested={0x4, 0x5}, @generic="3be63c44801531c1538dc8a2f32f3e37e4ab748f140e9db590fdc78d1724e3b7286798979a9e42f2e86ebe640cceef1966377ad7a26612602e85ad094d8c35ccfcbb7d6e97efa409886dd98d4c7a872fc0434be6487a424ee45832a65fc847b94c5efade29176ad8f2c185ad7f0b0a6295398e29e13924bad4e7134789f4f5c83c67553b51062c581309041a52eb121d5d6588f8350afd0f0fdc28cb77b01f505e6dc5c9700db04a90f533ca69ddd2181e1aad7609d085576ef44d3b06c484b5a28ade9b2a48749e0214ca843018a848ce89b46d2ba6ec802cb32267e9d9998f5d8f0b91000178", @generic="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"]}, @nested={0x5e0, 0x57, 0x0, 0x1, [@nested={0x4, 0x12c}, @generic="e39fe5a0d4d70f6cca60e1ad8058e99b97159dad5c92e6bcb5b7f0e88d4de57f0ca5c0b942eedfed05a3a572ccfe684c942ad0bee2dd01bf5399496c38d1bf654db0c720c9f390e111761355fc23c2c1eded48b41362d9b42ea45559e5692b8c42deafc055a630287bee75d91d399de0a40dd5d50c2467d7a6a1", @typed={0x8, 0xb3, 0x0, 0x0, @ipv4=@private=0xa010102}, @generic="d1e810b2913f593b879b3371c7ca48e49befe4397d76fd5d46f961048ceec3d302a97de0005acd02ce49187afe339ae01259d99731f84171504d2e507a40ab5ec708962e777946745857a3aeb2381f02a86347a41709b32aaa2a9a0cc2512314cd325b391bed8d53aabf577b8d36b6a86dfedde8c9382f2fbfe67435275a8bf8297b070a5572134a0b0a81d8afcd8e8ebc6e0bdc9841b1e8a9cfd87a7ab126745013dd3a2a284e29ad8c1ff00a898e", @generic="9ff21fb108e22a76194e35a6abd69056be5333f266472577a82a4aa66c85aabb687b3ed5ac30df40fdd9bd7a3689c1a4c2c27299532e57f041f64450b1a0", @generic="60009af67f4664686dc27b8408889d97ab9bb0744d7f4994fe3123389bf7e0ce619169575d7430d75d", @nested={0x43c, 0x93, 0x0, 0x1, [@typed={0xc, 0xcd, 0x0, 0x0, @u64=0x3}, @nested={0x135, 0xc9, 0x0, 0x1, [@generic="328f0dce1e00ed59f90a41aa2b82a86dea6e8bb9916298cbd7e3303669b749269e795812cae9fe9b9c6ff3e66d348646a65f203da8677d9c2c42188609d0757ea4ca3cc39ee3480ed5f0dffc8ae2ec4bfb323b9a4fe2ebc33320d8c5857866a26fd0c8ba81129150e89e0a6017a96bd7ce600fe886dfd2236cf990548742133d98758a657732566a05004704ec8da1c76a651d85326f621934f16fbbad8addc1fd79f806b10f6463910df428fd5108b62d1bf30387f6038755f080e1f17772bfc524fa3953adcbd2ee03d623", @typed={0x4c, 0xbc, 0x0, 0x0, @binary="dad14583e6d7168379be0320358721ee0d434ea6fdd3b98f5fedbabe38b4341c05f6426a0491df9e48617e76a17f7058e39506f48b861de9c4e58f5b17f2b269d7662d6b7a74bc01"}, @generic="2c373611cc", @nested={0x4, 0x11}, @nested={0x4, 0x7c}, @typed={0x8, 0xa8, 0x0, 0x0, @u32}, @nested={0x4, 0x12c}]}, @nested={0x2f2, 0x14c, 0x0, 0x1, [@generic="b3504a45bc7caddfff39096e0aad6a8050b4f56cf9797de0e6ae70c62248b5657f2db985c52084fd91ac30642e6e00a02ff7517bcf34add0edaeb2df60d316c794bf94b9b775fae9d79f279162dea4d0e9101118ff8a938b97e00f5518bd5bde16cedee476a92ddfc7fa162b269166b7d0ec40eee9403c533354b453d925a224039dbd34062774f13f88742de6d2b1e3410eb883d0ecd7aa0c64c48fbd0ba3105332482e8947822826fca8be151d736cae19360d34cfec727953ba020473de1cface164514031a900c44244566c5dd016a443d5de66fd8bcf5b010b887817d46", @nested={0x4, 0x122}, @generic="24860bf70487a881b6e511ea41d0f4ff6e734b6a1af2734ca0dcdb78cf66c9d33be8abb7968180ae73c6d47e78921b39f4ab051dbfa8dbd92e00c48646ceae6e89c65291c2463f8e969503a25ce8f40312b60e751fd74e06b221f8cc20e94d2f43bfdafab598593e30dc", @nested={0x4, 0x6c}, @typed={0x8, 0x11a, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0xa6, 0xad, 0x0, 0x0, @binary="59e7d1bcd13445db76e204bd98723a864887bb59f40d79e2910536eeb8807adff63714754e03e08122f58ed72857c717b40e2a6543b32a1f01b942ed4bf6e212c3e9455bb1f059ec217948f1c32fd0944c4db0617eb5ee5c987cd8942c7aac6654d221501142101676cfc677b4e9c4eda3877488ba9a5008205b22efa725e8ecc2081c11ec900ec56a7bcba04559c3a66845da79d695662f4da18fffbcbc6cf50b72"}, @generic="c015b2116a930986553fe9171e9444e0952386f36feb9b01caf1d942a63377add34d47c6c83d567af684c6bf3e40f583754082d3dc62c39d0f23722b45fa54d6ec10dbd66217728f7cf5c0a9aff513ebad89dd18c9be123f915d0fac04952453f1b64f17a9a2b4eaa3f917c90e4d047a8847d0b37078d30e9d101c7bedaec4eedc7adcd6154ae35983c620248666026b14ad8d6ee67d7085739225f9442829d34de1803c04761d74797ab9329ba0da9a2974ac9da617", @generic="71514e1fb2bc16d089bb610859607e1737132f099413fded21db2a3b44a7d091b4dba6d1e823978b49821f97663b065f2fb63647f9c4"]}]}, @nested={0x4, 0x14a}]}, @nested={0x116, 0x126, 0x0, 0x1, [@generic="1e76b83be24ec9fc681cef6930a5924b42e80da1dc0de9b68cf5907f52c01c222f00e2d6264ad9adb27848c20a51d59b86b932cf2b5e3148f9d7852ef8bd", @typed={0x8, 0x50, 0x0, 0x0, @ipv4=@multicast2}, @typed={0xbb, 0x163, 0x0, 0x0, @binary="c966daab92dfc456f45a9b23b91ce1d0a7f723e421e3d8e4e6ec21200a62bbe5cf3b84861725f5168f051cb3a98af023a28bbbbe89ab2425ba303c5f280b01d311855856aaa28f071dc05916d8d0bc68e69730e6660a5fb69567647b0461784033fb95b3c243b9fd35bf62e843de9cb6d3dfadd5a6933be9563864b8748e40555ef65de9fb54e5fa88e5298275f3420b8c198630425cf06a9a1ab19d655469551ace6d6409bf2cd2d571189b7b6c00dd57514af5318f43"}, @typed={0x5, 0x6e, 0x0, 0x0, @str='\x00'}, @typed={0x8, 0x13d, 0x0, 0x0, @u32=0xe}]}]}, 0x1a14}, 0x1, 0x0, 0x0, 0x40080}, 0x44) r6 = socket$can_bcm(0x1d, 0x2, 0x2) pipe(&(0x7f0000000000)) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRESHEX=r5, @ANYRES64=0x2710], 0x80}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000000c0), r7) sendmsg$NL802154_CMD_DEL_SEC_KEY(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x2c, r9, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000000340)) gettid() openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd22, 0x6000000, {0x0, 0x0, 0x0, r12, {0x0, 0xffe0}, {}, {0x7, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x7f}}, @filter_kind_options=@f_fw={{0x7}, {0x5c, 0x2, [@TCA_FW_ACT={0x58, 0x4, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffc00, 0x8, 0x10000000, 0x200000b, 0xff}, @broadcast, @local, 0xff, 0x1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 29.550936562s ago: executing program 7 (id=2592): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) 29.550670642s ago: executing program 6 (id=2593): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000007040)=@newtfilter={0x48, 0x2c, 0xd2f, 0x10b52c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xfff5, 0x2}, {}, {0x2, 0xd}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x5, 0xa}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x24008804}, 0x20000000) 29.359102875s ago: executing program 1 (id=2594): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xc8000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb70d) ioctl$TUNSETLINK(r0, 0x400454cd, 0x305) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f0000000400)) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r2, &(0x7f0000000400)={&(0x7f0000000000)=@in={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000280)='+', 0x1}], 0x1, &(0x7f0000000100)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0xb, 0xffff7ffe, 0xff}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x9}}], 0x38, 0x4014}, 0x2c0408d0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) socket$kcm(0x2, 0x200000000000001, 0x106) openat$ppp(0xffffffffffffff9c, 0x0, 0x288840, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd700000000000ac1e0001000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008ffffffff0000000001000600000000004400050000000000000000000000ffff0a010101000000003c00000002000000ac1414aa0000000000000000000000000600000004"], 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x488, 0x0, 0xffffffff, 0xffffffff, 0x1c8, 0xffffffff, 0x3b8, 0xffffffff, 0xffffffff, 0x3b8, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c8, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0xffff0000, 0xc11270e446e71eb1, 0x0, 'syz1\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1a, 0x1, 0x5}}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'netpci0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x1d0, 0x1f0, 0x0, {}, [@common=@srh={{0x30}, {0x0, 0xb7, 0x4, 0xe8, 0x6, 0x1268, 0xb2a}}, @common=@inet=@recent0={{0xf8}, {0xfffffffe, 0x6, 0x4, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4e8) socket$key(0xf, 0x3, 0x2) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0xfffffff7, @loopback, 0x10000}]}, &(0x7f0000000100)=0x10) 29.358489875s ago: executing program 6 (id=2595): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$inet6(0xa, 0x3, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket(0x2b, 0x1, 0x1) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$tipc(r3, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0x1, 0x900}}) r5 = socket(0x11, 0x80a, 0x0) sendto$x25(r5, 0x0, 0x0, 0x4080, &(0x7f0000000040), 0x12) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f0000000440)=""/225, 0x0, 0xe1, 0x1, 0x9e}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, r9, 0x0, 0x4, 0x1}, 0x50) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="89e7ee0c7cdad9b4b47380c988cafb3728496466192010785707ae3660b7", 0xffbf}], 0x1) 28.736800639s ago: executing program 3 (id=2596): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001cc0)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r3, {0x9}, {0xffff}, {0x10, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xfd, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40) 24.549003757s ago: executing program 1 (id=2597): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c004}, 0x24040841) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x4004051}, 0x4000044) 23.98429296s ago: executing program 2 (id=2598): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0xa, 0x4e20, 0x4, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000240)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x5c}}}], 0x40}, 0x0) 18.528443156s ago: executing program 2 (id=2599): socket$inet6(0xa, 0x80002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) close(0xffffffffffffffff) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000004100)="d2887b15091d37d7a34ad8c3ce6f7b4b443c4867c4966a86", 0x18}], 0x2) 12.194963831s ago: executing program 40 (id=2592): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)}, 0x0) 11.202323962s ago: executing program 41 (id=2595): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket$inet6(0xa, 0x3, 0x8) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket(0x2b, 0x1, 0x1) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x5) r4 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) accept4$tipc(r3, &(0x7f0000000040), 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x7, 0x0, 0x20000000, 0x0, 0x1, 0x900}}) r5 = socket(0x11, 0x80a, 0x0) sendto$x25(r5, 0x0, 0x0, 0x4080, &(0x7f0000000040), 0x12) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={0x0, &(0x7f0000000440)=""/225, 0x0, 0xe1, 0x1, 0x9e}, 0x28) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x5, '\x00', 0x0, r9, 0x0, 0x4, 0x1}, 0x50) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="89e7ee0c7cdad9b4b47380c988cafb3728496466192010785707ae3660b7", 0xffbf}], 0x1) 9.979112048s ago: executing program 42 (id=2596): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001cc0)=@newtfilter={0x3c, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r3, {0x9}, {0xffff}, {0x10, 0x5}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}, @TCA_RATE={0x6, 0x5, {0xfd, 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x11}, 0x40) 6.872099664s ago: executing program 43 (id=2597): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c004}, 0x24040841) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c000000100003040000fff30000ea0000000400", @ANYRES32=r1, @ANYBLOB="60bc010004a701003c00128009000100626f6e64000000002c"], 0x5c}, 0x1, 0x0, 0x0, 0x4004051}, 0x4000044) 0s ago: executing program 44 (id=2599): socket$inet6(0xa, 0x80002, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) close(0xffffffffffffffff) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000440)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000004100)="d2887b15091d37d7a34ad8c3ce6f7b4b443c4867c4966a86", 0x18}], 0x2) kernel console output (not intermixed with test programs): vice loop8): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 203.991730][ T28] audit: type=1400 audit(1782921968.767:1073): avc: denied { write } for pid=5350 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.038732][ T28] audit: type=1400 audit(1782921968.837:1074): avc: denied { write } for pid=5350 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.061794][ T5350] EXT4-fs warning (device loop8): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 204.078778][ T5350] EXT4-fs warning (device loop8): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 204.094215][ T28] audit: type=1326 audit(1782921968.877:1075): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8008 comm="syz.7.1180" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6645d7de59 code=0x7ffc0000 [ 204.125258][ T5151] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.146186][ T5350] EXT4-fs warning (device loop8): empty_inline_dir:1785: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 204.284140][ T28] audit: type=1326 audit(1782921968.877:1076): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8008 comm="syz.7.1180" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6645d7de59 code=0x7ffc0000 [ 204.310532][ T28] audit: type=1400 audit(1782921968.877:1077): avc: denied { write } for pid=5350 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.333238][ T28] audit: type=1400 audit(1782921968.937:1078): avc: denied { write } for pid=5350 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.396562][ T28] audit: type=1400 audit(1782921969.077:1079): avc: denied { write } for pid=5350 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.480425][ T8035] loop3: detected capacity change from 0 to 4096 [ 204.489975][ T28] audit: type=1400 audit(1782921969.077:1080): avc: denied { write } for pid=5350 comm="syz-executor" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 204.562454][ T8035] EXT4-fs: Ignoring removed orlov option [ 204.648585][ T8035] EXT4-fs: Ignoring removed bh option [ 204.687965][ T8035] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 204.852007][ T8035] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 204.882841][ T3669] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 204.907643][ T5350] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 204.947505][ T8041] loop9: detected capacity change from 0 to 2048 [ 204.957310][ T3669] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.981567][ T8041] ext4: Unknown parameter 'noacl' [ 205.282915][ T3669] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.300669][ T3669] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.419423][ T8053] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 205.614952][ T8053] tmpfs: Bad value for 'mpol' [ 205.643829][ T3669] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.654258][ T3669] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.835900][ T3669] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 205.876235][ T3669] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.127814][ T3669] bridge_slave_1: left allmulticast mode [ 206.133828][ T3669] bridge_slave_1: left promiscuous mode [ 206.147708][ T3669] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.162207][ T3669] bridge_slave_0: left allmulticast mode [ 206.168426][ T3669] bridge_slave_0: left promiscuous mode [ 206.174285][ T3669] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.326904][ T3669] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.354078][ T3669] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.365189][ T3669] bond0 (unregistering): Released all slaves [ 206.540936][ T3669] hsr_slave_0: left promiscuous mode [ 206.553001][ T3669] hsr_slave_1: left promiscuous mode [ 206.573379][ T3669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 206.601471][ T3669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.098351][ T3669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.114152][ T3669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.126086][ T3669] veth1_macvtap: left promiscuous mode [ 207.133325][ T3669] veth0_macvtap: left promiscuous mode [ 207.139015][ T3669] veth1_vlan: left promiscuous mode [ 207.144386][ T3669] veth0_vlan: left promiscuous mode [ 207.254722][ T3669] team0 (unregistering): Port device team_slave_1 removed [ 207.272552][ T3669] team0 (unregistering): Port device team_slave_0 removed [ 207.394186][ T8113] syzkaller0: entered promiscuous mode [ 207.415436][ T8113] syzkaller0: entered allmulticast mode [ 208.024455][ T8060] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.052991][ T8060] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.083485][ T8060] bridge_slave_0: entered allmulticast mode [ 208.107770][ T8060] bridge_slave_0: entered promiscuous mode [ 208.137373][ T8060] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.160750][ T8060] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.186458][ T8060] bridge_slave_1: entered allmulticast mode [ 208.211787][ T8060] bridge_slave_1: entered promiscuous mode [ 208.252789][ T8060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.298001][ T8060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.354094][ T8060] team0: Port device team_slave_0 added [ 208.378610][ T8060] team0: Port device team_slave_1 added [ 208.407136][ T8060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.447007][ T8060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.510884][ T8060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.532419][ T8060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.552940][ T8060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 208.614343][ T8060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.671004][ T3020] 8021q: adding VLAN 0 to HW filter on device eth21 [ 208.697726][ T8060] hsr_slave_0: entered promiscuous mode [ 208.710027][ T8060] hsr_slave_1: entered promiscuous mode [ 208.723873][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 208.881729][ T3020] 8021q: adding VLAN 0 to HW filter on device eth22 [ 209.091906][ T8206] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 209.170013][ T8206] hub 8-0:1.0: USB hub found [ 209.175087][ T8206] hub 8-0:1.0: 8 ports detected [ 209.213376][ T8206] tmpfs: Bad value for 'mpol' [ 209.423140][ T28] kauditd_printk_skb: 105 callbacks suppressed [ 209.423159][ T28] audit: type=1400 audit(1782921974.217:1186): avc: denied { write } for pid=8199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.498241][ T28] audit: type=1400 audit(1782921974.297:1187): avc: denied { write } for pid=8221 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.560109][ T3020] 8021q: adding VLAN 0 to HW filter on device eth23 [ 209.568258][ T8225] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2574 sclass=netlink_route_socket pid=8225 comm=syz.2.1211 [ 209.583324][ T8060] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 209.593063][ T8060] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 209.611182][ T8060] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 209.623104][ T8228] random: crng reseeded on system resumption [ 209.699527][ T8060] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 209.710996][ T8060] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 209.721836][ T8060] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 209.782170][ T8060] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 209.796347][ T8060] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 210.009543][ T28] audit: type=1400 audit(1782921974.807:1188): avc: denied { write } for pid=8243 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.042393][ T8060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.059329][ T8060] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.091540][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.098770][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.127057][ T28] audit: type=1400 audit(1782921974.917:1189): avc: denied { write } for pid=8262 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.141387][ T8266] netlink: 80 bytes leftover after parsing attributes in process `syz.9.1218'. [ 210.175123][ T311] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.182307][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.182691][ T8258] loop7: detected capacity change from 0 to 4096 [ 210.201730][ T8268] loop9: detected capacity change from 0 to 256 [ 210.214853][ T3020] 8021q: adding VLAN 0 to HW filter on device eth24 [ 210.227688][ T8258] EXT4-fs: Ignoring removed orlov option [ 210.236541][ T8268] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 210.251167][ T35] IPVS: starting estimator thread 0... [ 210.260049][ T8270] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 210.286301][ T8258] EXT4-fs: Ignoring removed bh option [ 210.327220][ T8258] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 210.355901][ T8258] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.369431][ T28] audit: type=1400 audit(1782921975.147:1190): avc: denied { watch } for pid=8265 comm="syz.9.1218" path="/15/file0/file1" dev="loop9" ino=115 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1 [ 210.380951][ T8271] IPVS: using max 2352 ests per chain, 117600 per kthread [ 210.401128][ T28] audit: type=1400 audit(1782921975.197:1191): avc: denied { write } for pid=8235 comm="syz.7.1215" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 210.613818][ T28] audit: type=1400 audit(1782921975.407:1192): avc: denied { write } for pid=8272 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.687389][ T28] audit: type=1400 audit(1782921975.407:1193): avc: denied { write } for pid=8293 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 210.733072][ T8060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.819585][ T8060] veth0_vlan: entered promiscuous mode [ 210.828987][ T5151] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.847472][ T8060] veth1_vlan: entered promiscuous mode [ 210.861461][ T8060] veth0_macvtap: entered promiscuous mode [ 210.869830][ T8060] veth1_macvtap: entered promiscuous mode [ 210.911315][ T8060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.928293][ T8060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.946146][ T40] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.960509][ T40] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.969371][ T40] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.978116][ T40] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.153111][ T28] audit: type=1400 audit(1782921976.947:1194): avc: denied { write } for pid=8298 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.325394][ T28] audit: type=1400 audit(1782921977.117:1195): avc: denied { write } for pid=8334 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.382049][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1223'. [ 212.430702][ T8341] blkio.reset_stats is deprecated [ 212.436308][ T8339] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1223'. [ 213.255460][ T8369] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1192'. [ 213.280260][ T8383] netlink: 'syz.2.1233': attribute type 46 has an invalid length. [ 213.297867][ T8383] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1233'. [ 213.449855][ T8401] loop3: detected capacity change from 0 to 2048 [ 213.489704][ T8405] ieee802154 phy0 wpan0: encryption failed: -22 [ 213.591282][ T8401] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.714772][ T8391] loop9: detected capacity change from 0 to 1024 [ 213.766220][ T8391] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 213.779678][ T8391] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (24670!=35945) [ 213.789321][ T8391] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 213.799804][ T8391] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 213.808148][ T8391] EXT4-fs (loop9): Can't support bigalloc feature without extents feature [ 213.808148][ T8391] [ 213.847795][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.854090][ T8391] EXT4-fs (loop9): Skipping orphan cleanup due to unknown ROCOMPAT features [ 213.888601][ T8391] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 214.451035][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 214.451055][ T28] audit: type=1400 audit(1782921979.247:1206): avc: denied { write } for pid=8461 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.485192][ T28] audit: type=1400 audit(1782921979.247:1207): avc: denied { accept } for pid=8458 comm="syz.0.1250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 214.545986][ T8463] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1249'. [ 214.610530][ T7537] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.623541][ T28] audit: type=1400 audit(1782921979.407:1208): avc: denied { watch watch_reads } for pid=8468 comm="syz.7.1252" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 214.776325][ T28] audit: type=1400 audit(1782921979.567:1209): avc: denied { write } for pid=8465 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.809012][ T28] audit: type=1400 audit(1782921979.607:1210): avc: denied { read } for pid=8479 comm="syz.3.1255" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 214.835921][ T28] audit: type=1400 audit(1782921979.607:1211): avc: denied { open } for pid=8479 comm="syz.3.1255" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 214.870765][ T28] audit: type=1400 audit(1782921979.667:1212): avc: denied { write } for pid=8488 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.908369][ T8491] netlink: 'syz.7.1256': attribute type 12 has an invalid length. [ 215.091168][ T28] audit: type=1400 audit(1782921979.807:1213): avc: denied { write } for pid=8492 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.115062][ T28] audit: type=1400 audit(1782921979.827:1214): avc: denied { write } for pid=8509 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.225297][ T28] audit: type=1400 audit(1782921980.017:1215): avc: denied { write } for pid=8511 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 215.868325][ T8544] loop9: detected capacity change from 0 to 512 [ 215.909523][ T8544] EXT4-fs (loop9): 1 orphan inode deleted [ 215.915703][ T8544] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 215.937671][ T8557] loop7: detected capacity change from 0 to 512 [ 215.980411][ T8557] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 216.005338][ T8557] ext4 filesystem being mounted at /151/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 216.057456][ T8557] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.1266: iget: bad i_size value: 2533274857506816 [ 216.066608][ T8568] bridge0: entered allmulticast mode [ 216.077944][ T7537] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.090341][ T8557] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.1266: iget: bad i_size value: 2533274857506816 [ 216.113365][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 216.172364][ T8578] loop3: detected capacity change from 0 to 512 [ 216.181972][ T8578] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 216.198035][ T8578] EXT4-fs (loop3): 1 truncate cleaned up [ 216.215015][ T8578] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.257796][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1268'. [ 216.268595][ T8587] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1268'. [ 216.287951][ T8587] netlink: 388 bytes leftover after parsing attributes in process `syz.9.1268'. [ 216.861143][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.970097][ T8624] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 216.979173][ T8624] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.145938][ T8643] syz.2.1279 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 217.386038][ T8647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1281'. [ 217.397360][ T8647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1281'. [ 217.785362][ T8665] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 217.794250][ T8665] bridge1: entered promiscuous mode [ 218.127965][ T3538] Bluetooth: hci0: command 0x1003 tx timeout [ 218.129962][ T6414] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 218.168680][ T5151] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.213800][ T8692] loop3: detected capacity change from 0 to 256 [ 218.246141][ T8692] forcing mempool usage for bio_alloc_bioset+0x394/0x640 [ 218.346177][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1299'. [ 218.359366][ T8698] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1299'. [ 218.368939][ T8698] netlink: 'syz.0.1299': attribute type 15 has an invalid length. [ 218.374014][ T8695] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1295'. [ 218.473521][ T8712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1299'. [ 218.638499][ T8708] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8708 comm=syz.0.1299 [ 218.651842][ T8698] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1299'. [ 218.660983][ T8706] netlink: 'syz.3.1298': attribute type 8 has an invalid length. [ 218.669760][ T8698] netlink: 'syz.0.1299': attribute type 15 has an invalid length. [ 218.679911][ T49] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 218.689400][ T49] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 218.700169][ T49] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 218.709902][ T49] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 219.281472][ T8724] loop0: detected capacity change from 0 to 128 [ 219.380530][ T8723] loop3: detected capacity change from 0 to 1024 [ 219.413465][ T8724] FAT-fs (loop0): bogus number of reserved sectors [ 219.505180][ T8724] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 219.521100][ T8723] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 219.553160][ T8724] FAT-fs (loop0): Can't find a valid FAT filesystem [ 219.574771][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 219.574785][ T28] audit: type=1400 audit(1782921984.367:1228): avc: denied { write } for pid=8720 comm="syz.3.1303" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.615685][ T8730] loop0: detected capacity change from 0 to 128 [ 219.743827][ T28] audit: type=1400 audit(1782921984.407:1229): avc: denied { write } for pid=8720 comm="syz.3.1303" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 219.770843][ T8730] FAT-fs (loop0): bogus number of reserved sectors [ 219.785810][ T8730] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 219.801367][ T8730] FAT-fs (loop0): Can't find a valid FAT filesystem [ 220.311860][ T8743] loop7: detected capacity change from 0 to 512 [ 220.325903][ T8743] EXT4-fs: Ignoring removed orlov option [ 220.352376][ T8743] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.1308: bg 0: block 5: invalid block bitmap [ 220.378226][ T8743] loop7: lost filesystem error report for type 5 error -117 [ 220.378507][ T8743] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 220.394871][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 220.394898][ C0] EXT4-fs (loop7): initial error at time 1782921985: ext4_validate_block_bitmap:432 [ 220.394922][ C0] EXT4-fs (loop7): last error at time 1782921985: ext4_validate_block_bitmap:432 [ 220.463491][ T8743] loop7: lost filesystem error report for type 5 error -117 [ 220.502787][ T8743] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.1308: invalid indirect mapped block 3 (level 2) [ 220.550529][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.570071][ T8743] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 220.570339][ T8743] EXT4-fs (loop7): 2 truncates cleaned up [ 220.645097][ T8743] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 220.695084][ T8743] EXT4-fs (loop7): shut down requested (2) [ 220.756552][ T8749] tipc: Can't bind to reserved service type 3 [ 220.764805][ T5151] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 220.896641][ T8757] syzkaller1: entered promiscuous mode [ 220.902404][ T8757] syzkaller1: entered allmulticast mode [ 220.986282][ T8768] loop3: detected capacity change from 0 to 256 [ 221.049627][ T28] audit: type=1400 audit(1782921985.847:1230): avc: denied { create } for pid=8769 comm="syz.2.1316" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 222.791117][ T28] audit: type=1400 audit(1782921987.587:1231): avc: denied { read } for pid=8763 comm="syz.3.1315" lport=42509 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 222.856212][ T8789] __nla_validate_parse: 1 callbacks suppressed [ 222.856232][ T8789] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1319'. [ 222.891451][ T28] audit: type=1400 audit(1782921987.687:1232): avc: denied { getattr } for pid=8763 comm="syz.3.1315" path="socket:[23436]" dev="sockfs" ino=23436 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 223.005938][ T8793] loop9: detected capacity change from 0 to 1024 [ 223.019610][ T28] audit: type=1400 audit(1782921987.817:1233): avc: denied { listen } for pid=8794 comm="syz.2.1323" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 223.137743][ T8793] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 223.174550][ T28] audit: type=1400 audit(1782921987.967:1234): avc: denied { write } for pid=8790 comm="syz.9.1320" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 223.175493][ T28] audit: type=1400 audit(1782921987.967:1235): avc: denied { write } for pid=8790 comm="syz.9.1320" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 223.177188][ T28] audit: type=1400 audit(1782921987.967:1236): avc: denied { mount } for pid=8806 comm="syz.7.1325" name="/" dev="configfs" ino=60 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 223.206269][ T8808] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1325'. [ 223.664067][ T7537] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 223.984567][ T8829] loop3: detected capacity change from 0 to 512 [ 223.991869][ T8829] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 224.015546][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1336'. [ 224.028348][ T8829] EXT4-fs (loop3): 1 truncate cleaned up [ 224.037057][ T8829] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 224.053396][ T40] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.057212][ T8829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 224.071977][ T8837] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1336'. [ 224.072906][ T40] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.094174][ T40] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.106245][ T40] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 224.154107][ T8842] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1337'. [ 224.164591][ T8842] sit0: entered promiscuous mode [ 224.180184][ T8835] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 224.188940][ T8835] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.276165][ T8847] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1337'. [ 224.285389][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1337'. [ 224.372267][ T8855] loop3: detected capacity change from 0 to 1024 [ 224.375632][ T28] audit: type=1400 audit(1782921989.167:1237): avc: denied { setopt } for pid=8851 comm="syz.2.1339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 224.511728][ T8858] loop0: detected capacity change from 0 to 128 [ 224.536313][ T8857] syzkaller0: entered promiscuous mode [ 224.542039][ T8857] syzkaller0: entered allmulticast mode [ 224.656442][ T8858] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 224.669221][ T8858] ext4 filesystem being mounted at /20/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 224.681620][ T8855] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 224.702751][ T8858] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 224.729324][ T28] audit: type=1400 audit(1782921989.457:1238): avc: denied { write } for pid=8854 comm="syz.3.1340" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 224.751321][ T28] audit: type=1400 audit(1782921989.457:1239): avc: denied { write } for pid=8854 comm="syz.3.1340" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 224.805212][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 225.367639][ T8858] geneve2: entered promiscuous mode [ 225.385347][ T12] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 42324 - 0 [ 225.394378][ T12] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 42324 - 0 [ 225.403285][ T12] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 42324 - 0 [ 225.412197][ T12] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 42324 - 0 [ 225.486945][ T8871] netlink: 'syz.9.1346': attribute type 12 has an invalid length. [ 226.244660][ T8888] loop9: detected capacity change from 0 to 1024 [ 226.348635][ T8888] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 226.502776][ T28] audit: type=1400 audit(1782921991.297:1240): avc: denied { write } for pid=8886 comm="syz.9.1352" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.533240][ T28] audit: type=1400 audit(1782921991.327:1241): avc: denied { write } for pid=8886 comm="syz.9.1352" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 226.610180][ T7537] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.706438][ T8903] loop9: detected capacity change from 0 to 128 [ 226.718433][ T8898] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=8898 comm=syz.2.1356 [ 226.734912][ T8903] EXT4-fs: Ignoring removed bh option [ 226.752511][ T8903] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 226.767611][ T8903] ext4 filesystem being mounted at /44/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 226.831091][ T7537] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 226.928470][ T8922] loop9: detected capacity change from 0 to 1024 [ 226.938446][ T28] audit: type=1400 audit(1782921991.737:1242): avc: denied { getopt } for pid=8923 comm="syz.2.1363" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 226.974360][ T8922] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.087495][ T8922] FAULT_INJECTION: forcing a failure. [ 227.087495][ T8922] name failslab, interval 1, probability 0, space 0, times 0 [ 227.108533][ T8922] CPU: 1 UID: 0 PID: 8922 Comm: syz.9.1362 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 227.108630][ T8922] Tainted: [W]=WARN [ 227.108636][ T8922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 227.108648][ T8922] Call Trace: [ 227.108654][ T8922] [ 227.108665][ T8922] __dump_stack+0x1d/0x30 [ 227.108761][ T8922] dump_stack_lvl+0x95/0xd0 [ 227.108795][ T8922] dump_stack+0x15/0x1b [ 227.108820][ T8922] should_fail_ex+0x25e/0x270 [ 227.108928][ T8922] should_failslab+0x8c/0xb0 [ 227.108956][ T8922] __kmalloc_node_track_caller_noprof+0xd5/0x4c0 [ 227.108987][ T8922] ? vfs_getxattr_alloc+0x338/0x3b0 [ 227.109010][ T8922] ? vfs_getxattr_alloc+0x338/0x3b0 [ 227.109072][ T8922] ? strncmp+0x34/0x70 [ 227.109176][ T8922] krealloc_node_align_noprof+0x117/0x2d0 [ 227.109203][ T8922] vfs_getxattr_alloc+0x338/0x3b0 [ 227.109231][ T8922] cap_inode_getsecurity+0xad/0x540 [ 227.109313][ T8922] ? selinux_inode_getxattr+0x1c7/0x210 [ 227.109352][ T8922] security_inode_getsecurity+0x8c/0xe0 [ 227.109389][ T8922] ? vfs_getxattr+0x1a0/0x230 [ 227.109447][ T8922] vfs_getxattr+0x1b8/0x230 [ 227.109478][ T8922] do_getxattr+0x129/0x2b0 [ 227.109563][ T8922] filename_getxattr+0xb7/0x190 [ 227.109595][ T8922] __x64_sys_lgetxattr+0x112/0x150 [ 227.109632][ T8922] x64_sys_call+0x2ecc/0x3020 [ 227.109828][ T8922] do_syscall_64+0x136/0x3c0 [ 227.109878][ T8922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.109968][ T8922] RIP: 0033:0x7f724265de59 [ 227.109985][ T8922] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 227.110008][ T8922] RSP: 002b:00007f72410b7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c0 [ 227.110027][ T8922] RAX: ffffffffffffffda RBX: 00007f72428e5fa0 RCX: 00007f724265de59 [ 227.110041][ T8922] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000200000000000 [ 227.110058][ T8922] RBP: 00007f72410b7090 R08: 0000000000000000 R09: 0000000000000000 [ 227.110135][ T8922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 227.110183][ T8922] R13: 00007f72428e6038 R14: 00007f72428e5fa0 R15: 00007ffcf24add38 [ 227.110276][ T8922] [ 227.441588][ T8937] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 227.474614][ T7537] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.715103][ T8937] tmpfs: Bad value for 'mpol' [ 227.873474][ T8941] loop9: detected capacity change from 0 to 1024 [ 227.899116][ T28] audit: type=1400 audit(1782921992.687:1243): avc: denied { accept } for pid=8942 comm="syz.0.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 228.066506][ T8947] loop3: detected capacity change from 0 to 4096 [ 228.083319][ T8941] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 228.097494][ T28] audit: type=1400 audit(1782921992.897:1244): avc: denied { read } for pid=8949 comm="syz.7.1368" path="socket:[24753]" dev="sockfs" ino=24753 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 228.125837][ T8952] x_tables: duplicate underflow at hook 1 [ 228.171109][ T8947] EXT4-fs error (device loop3): ext4_init_orphan_info:583: comm syz.3.1367: inode #0: comm syz.3.1367: iget: illegal inode # [ 228.228127][ T7537] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.237596][ T8947] loop3: lost filesystem error report for type 5 error -117 [ 228.237802][ T8947] EXT4-fs (loop3): get orphan inode failed [ 228.251429][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 228.251446][ C0] EXT4-fs (loop3): initial error at time 1782921993: ext4_init_orphan_info:583 [ 228.251468][ C0] EXT4-fs (loop3): last error at time 1782921993: ext4_init_orphan_info:583 [ 228.283326][ T28] audit: type=1400 audit(1782921992.937:1245): avc: denied { write } for pid=8929 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 228.363747][ T8947] EXT4-fs (loop3): mount failed [ 228.376161][ T28] audit: type=1400 audit(1782921992.957:1246): avc: denied { write } for pid=8938 comm="syz.9.1365" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.401745][ T28] audit: type=1400 audit(1782921992.957:1247): avc: denied { write } for pid=8938 comm="syz.9.1365" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 228.800194][ T8988] netlink: 24 bytes leftover after parsing attributes in process `syz.9.1376'. [ 228.828585][ T8988] netlink: 212 bytes leftover after parsing attributes in process `syz.9.1376'. [ 228.839123][ T8988] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1376'. [ 228.887784][ T8999] FAULT_INJECTION: forcing a failure. [ 228.887784][ T8999] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.905907][ T8999] CPU: 0 UID: 0 PID: 8999 Comm: syz.2.1379 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 228.905995][ T8999] Tainted: [W]=WARN [ 228.906003][ T8999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 228.906039][ T8999] Call Trace: [ 228.906047][ T8999] [ 228.906056][ T8999] __dump_stack+0x1d/0x30 [ 228.906156][ T8999] dump_stack_lvl+0x95/0xd0 [ 228.906177][ T8999] dump_stack+0x15/0x1b [ 228.906197][ T8999] should_fail_ex+0x25e/0x270 [ 228.906234][ T8999] should_fail+0xb/0x20 [ 228.906266][ T8999] should_fail_usercopy+0x1a/0x20 [ 228.906325][ T8999] _copy_from_user+0x1c/0xb0 [ 228.906350][ T8999] ___sys_sendmsg+0xc1/0x1e0 [ 228.906462][ T8999] __x64_sys_sendmsg+0xd4/0x160 [ 228.906556][ T8999] x64_sys_call+0x194c/0x3020 [ 228.906618][ T8999] do_syscall_64+0x136/0x3c0 [ 228.906657][ T8999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.906684][ T8999] RIP: 0033:0x7f076572de59 [ 228.906741][ T8999] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.906841][ T8999] RSP: 002b:00007f0764187028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.906861][ T8999] RAX: ffffffffffffffda RBX: 00007f07659b5fa0 RCX: 00007f076572de59 [ 228.906878][ T8999] RDX: 0000000000000000 RSI: 0000200000000540 RDI: 0000000000000003 [ 228.906895][ T8999] RBP: 00007f0764187090 R08: 0000000000000000 R09: 0000000000000000 [ 228.906911][ T8999] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.906993][ T8999] R13: 00007f07659b6038 R14: 00007f07659b5fa0 R15: 00007ffd442f6438 [ 228.907018][ T8999] [ 229.105268][ T9007] loop9: detected capacity change from 0 to 1024 [ 229.121093][ T9007] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.645932][ T7537] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.709298][ T9025] FAULT_INJECTION: forcing a failure. [ 229.709298][ T9025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 229.729738][ T9025] CPU: 0 UID: 0 PID: 9025 Comm: syz.3.1384 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 229.729777][ T9025] Tainted: [W]=WARN [ 229.729786][ T9025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 229.729800][ T9025] Call Trace: [ 229.729808][ T9025] [ 229.729818][ T9025] __dump_stack+0x1d/0x30 [ 229.729844][ T9025] dump_stack_lvl+0x95/0xd0 [ 229.729935][ T9025] dump_stack+0x15/0x1b [ 229.729960][ T9025] should_fail_ex+0x25e/0x270 [ 229.730009][ T9025] should_fail+0xb/0x20 [ 229.730040][ T9025] should_fail_usercopy+0x1a/0x20 [ 229.730078][ T9025] _copy_from_iter+0xcc/0xe70 [ 229.730186][ T9025] ? __alloc_skb+0x511/0x6f0 [ 229.730215][ T9025] ? __alloc_skb+0x205/0x6f0 [ 229.730246][ T9025] netlink_sendmsg+0x4a4/0x6f0 [ 229.730335][ T9025] ? __pfx_netlink_sendmsg+0x10/0x10 [ 229.730362][ T9025] ____sys_sendmsg+0x532/0x580 [ 229.730401][ T9025] ___sys_sendmsg+0x195/0x1e0 [ 229.730515][ T9025] __x64_sys_sendmsg+0xd4/0x160 [ 229.730554][ T9025] x64_sys_call+0x194c/0x3020 [ 229.730682][ T9025] do_syscall_64+0x136/0x3c0 [ 229.730723][ T9025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.730751][ T9025] RIP: 0033:0x7f39c44bde59 [ 229.730771][ T9025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 229.730795][ T9025] RSP: 002b:00007f39c2f17028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 229.730925][ T9025] RAX: ffffffffffffffda RBX: 00007f39c4745fa0 RCX: 00007f39c44bde59 [ 229.730945][ T9025] RDX: 0000000000000000 RSI: 000020000000c2c0 RDI: 0000000000000003 [ 229.730962][ T9025] RBP: 00007f39c2f17090 R08: 0000000000000000 R09: 0000000000000000 [ 229.730978][ T9025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 229.731071][ T9025] R13: 00007f39c4746038 R14: 00007f39c4745fa0 R15: 00007fffdceb9718 [ 229.731117][ T9025] [ 230.102941][ T9037] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1387'. [ 230.149511][ T9040] loop3: detected capacity change from 0 to 512 [ 230.157886][ T9037] netlink: 'syz.7.1387': attribute type 5 has an invalid length. [ 230.188824][ T9037] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1387'. [ 230.210412][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 230.210430][ T28] audit: type=1400 audit(1782921994.987:1254): avc: denied { write } for pid=9010 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.283532][ T9037] geneve2: entered promiscuous mode [ 230.304841][ T9037] geneve2: entered allmulticast mode [ 230.326532][ T40] netdevsim netdevsim7 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 230.346368][ T40] netdevsim netdevsim7 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 230.361060][ T28] audit: type=1400 audit(1782921995.117:1255): avc: denied { write } for pid=9049 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 230.410702][ T40] netdevsim netdevsim7 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 230.456007][ T40] netdevsim netdevsim7 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 230.549495][ T9060] loop9: detected capacity change from 0 to 1024 [ 230.659555][ T9060] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.678773][ T9077] loop7: detected capacity change from 0 to 1024 [ 230.690051][ T28] audit: type=1400 audit(1782921995.477:1256): avc: denied { write } for pid=9059 comm="syz.9.1395" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.039734][ T9077] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.183207][ T28] audit: type=1400 audit(1782921995.807:1257): avc: denied { write } for pid=9059 comm="syz.9.1395" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.212944][ T7537] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.236251][ T5151] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.276473][ T9097] netlink: 'syz.9.1403': attribute type 1 has an invalid length. [ 231.348428][ T28] audit: type=1400 audit(1782921996.147:1258): avc: denied { write } for pid=9085 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.417506][ T28] audit: type=1400 audit(1782921996.147:1259): avc: denied { write } for pid=9105 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 231.529369][ T9102] bond1: (slave gretap1): making interface the new active one [ 231.537507][ T9102] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 231.756391][ T9130] loop7: detected capacity change from 0 to 1024 [ 231.969100][ T9130] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.991499][ T28] audit: type=1400 audit(1782921996.787:1260): avc: denied { write } for pid=9128 comm="syz.7.1413" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.089786][ T28] audit: type=1400 audit(1782921996.877:1261): avc: denied { write } for pid=9128 comm="syz.7.1413" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 232.224539][ T5151] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.300115][ T9145] loop9: detected capacity change from 0 to 128 [ 232.347144][ T9145] msdos: Unknown parameter 'ÿÿ0x0000000000000006g.¦' [ 232.729752][ T9149] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1419'. [ 232.743290][ T9149] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1419'. [ 232.852390][ T28] audit: type=1400 audit(1782921997.637:1262): avc: denied { ioctl } for pid=9150 comm="syz.7.1418" path="socket:[25792]" dev="sockfs" ino=25792 ioctlcmd=0xf516 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 232.888395][ T9151] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9151 comm=syz.7.1418 [ 232.993815][ T9158] IPv6: addrconf: prefix option has invalid lifetime [ 233.014167][ T28] audit: type=1400 audit(1782921997.807:1263): avc: denied { create } for pid=9157 comm="syz.0.1422" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 233.036432][ T9158] netlink: 'syz.0.1422': attribute type 21 has an invalid length. [ 233.067977][ T9158] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1422'. [ 233.212254][ T9167] syzkaller0: entered promiscuous mode [ 233.218352][ T9167] syzkaller0: entered allmulticast mode [ 233.228512][ T9167] tipc: Started in network mode [ 233.233517][ T9167] tipc: Node identity c6f0ed2c4d37, cluster identity 4711 [ 233.241535][ T9167] tipc: Enabled bearer , priority 0 [ 233.320742][ T9173] loop3: detected capacity change from 0 to 1024 [ 233.519217][ T9173] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 233.535233][ T9166] tipc: Resetting bearer [ 233.543906][ T9166] tipc: Disabling bearer [ 233.695383][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.851297][ T9189] loop3: detected capacity change from 0 to 512 [ 233.903858][ T9189] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 234.104452][ T9204] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1434'. [ 234.986780][ T3020] veth0_vlan: left promiscuous mode [ 234.994494][ T9218] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1437'. [ 235.016795][ T9] veth0_vlan: entered promiscuous mode [ 235.078598][ T9214] loop9: detected capacity change from 0 to 8192 [ 235.135233][ T9214] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 235.191571][ T9224] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1439'. [ 235.247725][ T9224] syzkaller0: entered promiscuous mode [ 235.279631][ T9224] syzkaller0: entered allmulticast mode [ 235.471910][ T28] kauditd_printk_skb: 183 callbacks suppressed [ 235.471989][ T28] audit: type=1400 audit(1782922000.267:1447): avc: denied { write } for pid=9226 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 235.512609][ T9231] loop0: detected capacity change from 0 to 1024 [ 235.580388][ T28] audit: type=1400 audit(1782922000.307:1448): avc: denied { write } for pid=9241 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 236.275144][ T28] audit: type=1400 audit(1782922001.057:1449): avc: denied { mount } for pid=9257 comm="syz.2.1447" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 236.315778][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.801742][ T9268] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 236.810569][ T9268] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 236.874701][ T28] audit: type=1400 audit(1782922001.667:1450): avc: denied { unmount } for pid=3301 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 236.974309][ T9277] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 237.031756][ T9283] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1457'. [ 238.486966][ T9332] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1473'. [ 239.538864][ T9350] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1480'. [ 239.665916][ T9358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 239.743947][ T9358] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.803158][ T28] audit: type=1400 audit(1782922004.597:1451): avc: denied { connect } for pid=9362 comm="syz.2.1486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 240.165073][ T28] audit: type=1326 audit(1782922004.957:1452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9370 comm="syz.3.1489" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39c44bde59 code=0x0 [ 240.466881][ T9384] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1493'. [ 240.498240][ T9384] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1493'. [ 240.740325][ T9392] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1497'. [ 240.750042][ T9392] netlink: 4768 bytes leftover after parsing attributes in process `syz.0.1497'. [ 241.055393][ T9411] tipc: Failed to remove unknown binding: 66,0,0/0:394821190/394821192 [ 241.078448][ T9411] tipc: Failed to remove unknown binding: 66,0,0/0:394821190/394821191 [ 241.096470][ T9411] tipc: Failed to remove unknown binding: 66,0,0/0:394821190/394821192 [ 241.114228][ T9411] tipc: Failed to remove unknown binding: 66,0,0/0:394821190/394821191 [ 241.261856][ T28] audit: type=1400 audit(1782922006.057:1453): avc: denied { connect } for pid=9417 comm="syz.0.1508" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 241.287917][ T28] audit: type=1400 audit(1782922006.087:1454): avc: denied { write } for pid=9417 comm="syz.0.1508" path="socket:[25363]" dev="sockfs" ino=25363 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 242.722633][ T9448] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1519'. [ 242.891098][ T9456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 242.914234][ T9458] bridge0: port 3(veth1_to_batadv) entered blocking state [ 242.941689][ T9456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.952166][ T9458] bridge0: port 3(veth1_to_batadv) entered disabled state [ 242.984771][ T9458] veth1_to_batadv: entered allmulticast mode [ 243.003583][ T9458] veth1_to_batadv: entered promiscuous mode [ 243.215458][ T9482] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 243.222851][ T9482] IPv6: NLM_F_CREATE should be set when creating new route [ 243.253243][ T9485] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 243.276927][ T54] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.289623][ T54] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.360296][ T54] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.371753][ T54] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.440451][ T54] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.452636][ T54] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.558501][ T54] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 243.577298][ T54] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.787909][ T9534] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1549'. [ 243.841475][ T9537] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1549'. [ 243.951312][ T9544] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1549'. [ 243.989103][ T54] bridge_slave_1: left allmulticast mode [ 244.002532][ T54] bridge_slave_1: left promiscuous mode [ 244.051093][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.103798][ T54] bridge_slave_0: left allmulticast mode [ 244.115126][ T54] bridge_slave_0: left promiscuous mode [ 244.139930][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.354870][ T54] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 244.379623][ T9555] netlink: 'syz.3.1559': attribute type 7 has an invalid length. [ 244.394987][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.410616][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.421778][ T54] bond0 (unregistering): Released all slaves [ 244.423566][ T9511] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 244.437280][ T54] bond1 (unregistering): Released all slaves [ 244.549045][ T54] hsr_slave_0: left promiscuous mode [ 244.566452][ T54] hsr_slave_1: left promiscuous mode [ 244.576702][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.594198][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.602034][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.610916][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.623558][ T54] veth1_macvtap: left promiscuous mode [ 244.632193][ T54] veth0_macvtap: left promiscuous mode [ 244.643933][ T9572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 244.670027][ T9572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 244.681794][ T54] veth1_vlan: left promiscuous mode [ 244.693474][ T54] veth0_vlan: left promiscuous mode [ 244.705952][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 244.736438][ T28] audit: type=1400 audit(1782922009.497:1455): avc: denied { bind } for pid=9565 comm="syz.7.1565" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 244.830804][ T54] team0 (unregistering): Port device team_slave_1 removed [ 244.850880][ T54] team0 (unregistering): Port device team_slave_0 removed [ 245.284307][ T28] audit: type=1400 audit(1782922010.077:1456): avc: denied { write } for pid=9574 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.375368][ T28] audit: type=1400 audit(1782922010.167:1457): avc: denied { write } for pid=9592 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 245.485150][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 245.535895][ T9491] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.548104][ T9491] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.583423][ T9491] bridge_slave_0: entered allmulticast mode [ 245.626395][ T9491] bridge_slave_0: entered promiscuous mode [ 245.677086][ T9491] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.720928][ T9491] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.754941][ T9491] bridge_slave_1: entered allmulticast mode [ 245.769525][ T9491] bridge_slave_1: entered promiscuous mode [ 245.831572][ T9491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.852733][ T9491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.923148][ T9491] team0: Port device team_slave_0 added [ 245.938041][ T9491] team0: Port device team_slave_1 added [ 245.965298][ T9491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.974539][ T9491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.013644][ T28] audit: type=1400 audit(1782922010.807:1458): avc: denied { write } for pid=9605 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.047714][ T9491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.063908][ T9491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.072005][ T28] audit: type=1326 audit(1782922010.837:1459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.3.1581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c44bde59 code=0x7ffc0000 [ 246.104101][ T9491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 246.144018][ T28] audit: type=1326 audit(1782922010.837:1460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.3.1581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c44bde59 code=0x7ffc0000 [ 246.168893][ T9491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.172050][ T9641] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.199354][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 246.200510][ T28] audit: type=1326 audit(1782922010.837:1461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.3.1581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c44bde59 code=0x7ffc0000 [ 246.233292][ T9641] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.244996][ T28] audit: type=1326 audit(1782922010.837:1462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.3.1581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f39c44bde59 code=0x7ffc0000 [ 246.283975][ T28] audit: type=1326 audit(1782922010.837:1463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.3.1581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c44bde59 code=0x7ffc0000 [ 246.295156][ T9491] hsr_slave_0: entered promiscuous mode [ 246.310609][ T28] audit: type=1326 audit(1782922010.837:1464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.3.1581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c44bde59 code=0x7ffc0000 [ 246.323377][ T9491] hsr_slave_1: entered promiscuous mode [ 246.351276][ T9491] debugfs: 'hsr0' already exists in 'hsr' [ 246.357803][ T9491] Cannot create hsr debugfs directory [ 246.377467][ T28] audit: type=1326 audit(1782922010.837:1465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.3.1581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c44bde59 code=0x7ffc0000 [ 246.404330][ T28] audit: type=1326 audit(1782922010.837:1466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.3.1581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f39c44bde59 code=0x7ffc0000 [ 246.430844][ T28] audit: type=1326 audit(1782922010.837:1467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.3.1581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f39c44bde59 code=0x7ffc0000 [ 246.479039][ T28] audit: type=1326 audit(1782922010.837:1468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.3.1581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f39c44bde59 code=0x7ffc0000 [ 246.524285][ T28] audit: type=1326 audit(1782922010.837:1469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9634 comm="syz.3.1581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f39c44bde59 code=0x7ffc0000 [ 246.565781][ T28] audit: type=1400 audit(1782922010.907:1470): avc: denied { write } for pid=9636 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.634914][ T28] audit: type=1400 audit(1782922011.257:1471): avc: denied { create } for pid=9651 comm="syz.3.1588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 246.722963][ T28] audit: type=1400 audit(1782922011.517:1472): avc: denied { write } for pid=9658 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 246.776863][ T3538] Bluetooth: hci0: command 0x1003 tx timeout [ 246.783223][ T6414] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 246.867257][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 247.224121][ T9491] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 247.317173][ T9491] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 247.368505][ T9491] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 247.429062][ T9491] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 247.505302][ T9491] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 247.600571][ T9491] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 247.639428][ T9491] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 247.689282][ T9491] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 247.827433][ T9702] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 247.880403][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 248.017476][ T9491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.065956][ T9746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 248.087987][ T9491] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.126149][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.133591][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.146371][ T9746] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 248.162624][ T9750] GUP no longer grows the stack in syz.7.1612 (9750): 200000005000-200000008000 (200000004000) [ 248.193644][ T2493] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.200853][ T2493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.210533][ T9750] CPU: 1 UID: 0 PID: 9750 Comm: syz.7.1612 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 248.210578][ T9750] Tainted: [W]=WARN [ 248.210586][ T9750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 248.210604][ T9750] Call Trace: [ 248.210613][ T9750] [ 248.210624][ T9750] __dump_stack+0x1d/0x30 [ 248.210659][ T9750] dump_stack_lvl+0x95/0xd0 [ 248.210747][ T9750] dump_stack+0x15/0x1b [ 248.210772][ T9750] fixup_user_fault+0x4fe/0x550 [ 248.210817][ T9750] fault_in_user_writeable+0x5c/0xc0 [ 248.210855][ T9750] futex_lock_pi+0x5f2/0x7c0 [ 248.210966][ T9750] ? __pfx_futex_wake_mark+0x10/0x10 [ 248.211051][ T9750] do_futex+0x2ea/0x460 [ 248.211080][ T9750] __se_sys_futex+0x2f6/0x370 [ 248.211160][ T9750] ? xfd_validate_state+0x45/0xf0 [ 248.211201][ T9750] __x64_sys_futex+0x78/0x90 [ 248.211233][ T9750] x64_sys_call+0x24ab/0x3020 [ 248.211280][ T9750] do_syscall_64+0x136/0x3c0 [ 248.211314][ T9750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.211343][ T9750] RIP: 0033:0x7f6645d7de59 [ 248.211366][ T9750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.211442][ T9750] RSP: 002b:00007f66447d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 248.211464][ T9750] RAX: ffffffffffffffda RBX: 00007f6646005fa0 RCX: 00007f6645d7de59 [ 248.211544][ T9750] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 248.211559][ T9750] RBP: 00007f6645e13e6f R08: 0000000000000000 R09: 0000000000000000 [ 248.211573][ T9750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.211589][ T9750] R13: 00007f6646006038 R14: 00007f6646005fa0 R15: 00007ffee476ff88 [ 248.211618][ T9750] [ 248.421627][ T9491] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.432050][ T9491] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.818957][ T9491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.720034][ T9491] veth0_vlan: entered promiscuous mode [ 249.744027][ T9491] veth1_vlan: entered promiscuous mode [ 249.788996][ T9491] veth0_macvtap: entered promiscuous mode [ 249.815721][ T9491] veth1_macvtap: entered promiscuous mode [ 249.853453][ T9491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.885738][ T9491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.934949][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.030467][ T3669] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.051050][ T3669] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.060265][ T3669] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.247293][ T9856] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 250.310401][ T9856] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 251.321633][ T28] kauditd_printk_skb: 15 callbacks suppressed [ 251.321651][ T28] audit: type=1400 audit(1782922016.117:1488): avc: denied { write } for pid=9988 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.377773][ T28] audit: type=1400 audit(1782922016.177:1489): avc: denied { write } for pid=10003 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.501870][ T28] audit: type=1400 audit(1782922016.297:1490): avc: denied { write } for pid=10005 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.549369][ T28] audit: type=1400 audit(1782922016.347:1491): avc: denied { write } for pid=10016 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.690747][ T28] audit: type=1400 audit(1782922016.487:1492): avc: denied { write } for pid=10019 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.734182][ T28] audit: type=1400 audit(1782922016.527:1493): avc: denied { write } for pid=10030 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.783948][T10036] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1644'. [ 251.850974][ T28] audit: type=1400 audit(1782922016.647:1494): avc: denied { write } for pid=10034 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.896042][ T28] audit: type=1400 audit(1782922016.687:1495): avc: denied { write } for pid=10049 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.989568][T10056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 252.003411][T10056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 252.079781][ T28] audit: type=1400 audit(1782922016.877:1496): avc: denied { write } for pid=10054 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 252.126417][ T28] audit: type=1400 audit(1782922016.917:1497): avc: denied { write } for pid=10073 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.187846][ T9983] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 254.320246][T10152] TCP: tcp_parse_options: Illegal window scaling value 81 > 14 received [ 254.447269][T10169] netlink: 'syz.1.1673': attribute type 1 has an invalid length. [ 255.928647][T10203] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1686'. [ 256.176138][T10216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.186233][T10216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.196224][T10216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.225998][T10216] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.453712][T10230] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.462669][T10230] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.039615][T10240] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1700'. [ 257.143059][T10245] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1701'. [ 257.155250][T10245] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1701'. [ 257.227796][T10247] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.243057][T10247] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 258.051301][T10279] bond4: entered promiscuous mode [ 258.061314][T10279] 8021q: adding VLAN 0 to HW filter on device bond4 [ 258.401497][T10285] 8021q: adding VLAN 0 to HW filter on device bond4 [ 258.418869][T10285] bond4: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 258.594708][T10285] bond4: (slave ip6gre1): Error -95 calling set_mac_address [ 258.611276][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 258.611343][ T28] audit: type=1400 audit(1782922023.407:1504): avc: denied { write } for pid=10283 comm="syz.0.1718" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 259.220923][T10324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.237524][T10324] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.447543][T10349] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 259.480349][T10349] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 259.620341][T10366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1745'. [ 259.631737][T10366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1745'. [ 259.688249][T10366] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.695555][T10366] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.779892][T10366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.792372][T10366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.903676][ T9919] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.986416][ T9919] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.086344][ T9919] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.141839][ T9919] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.211615][T10383] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 260.402260][T10402] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1763'. [ 260.437259][T10410] bond0: entered allmulticast mode [ 260.449768][T10410] bond_slave_0: entered allmulticast mode [ 260.469490][T10410] bond_slave_1: entered allmulticast mode [ 260.569111][T10423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.594422][T10423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.605661][T10423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.617358][T10423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 260.666656][T10430] bridge0: port 3(erspan0) entered blocking state [ 260.673285][T10430] bridge0: port 3(erspan0) entered disabled state [ 260.680118][T10430] erspan0: entered allmulticast mode [ 260.687463][T10430] erspan0: entered promiscuous mode [ 260.693191][T10430] bridge0: port 3(erspan0) entered blocking state [ 260.699877][T10430] bridge0: port 3(erspan0) entered forwarding state [ 260.713840][T10430] erspan0: left allmulticast mode [ 260.719769][T10430] erspan0: left promiscuous mode [ 260.725340][T10430] bridge0: port 3(erspan0) entered disabled state [ 260.875011][T10423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 260.937806][T10423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.183707][ T28] audit: type=1400 audit(1782922025.977:1505): avc: denied { write } for pid=10399 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.217179][T10453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.227895][T10453] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 261.243749][ T28] audit: type=1400 audit(1782922026.037:1506): avc: denied { write } for pid=10454 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 261.433185][ T28] audit: type=1400 audit(1782922026.227:1507): avc: denied { mounton } for pid=10465 comm="syz.2.1787" path="/proc/1084/cgroup" dev="proc" ino=29829 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 261.544488][ T28] audit: type=1400 audit(1782922026.337:1508): avc: denied { setopt } for pid=10479 comm="syz.1.1793" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 261.954392][T10503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 261.964289][T10503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 262.331510][T10508] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1804'. [ 262.343901][T10508] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1804'. [ 262.353281][T10508] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1804'. [ 262.474418][ T3554] IPVS: starting estimator thread 0... [ 262.528299][ T28] audit: type=1400 audit(1782922027.317:1509): avc: denied { write } for pid=10512 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.577618][T10524] IPVS: using max 2352 ests per chain, 117600 per kthread [ 262.602666][ T28] audit: type=1400 audit(1782922027.397:1510): avc: denied { write } for pid=10535 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 262.950523][T10581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1829'. [ 263.058210][ T28] audit: type=1400 audit(1782922027.847:1511): avc: denied { remount } for pid=10584 comm="syz.0.1831" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 263.213018][T10601] loop3: detected capacity change from 0 to 128 [ 263.234530][ T28] audit: type=1326 audit(1782922028.027:1512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10600 comm="syz.3.1838" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f39c44bde59 code=0x0 [ 263.333628][T10603] cgroup: fork rejected by pids controller in /syz2 [ 263.367495][T10607] bond1: entered allmulticast mode [ 263.381065][T10607] 8021q: adding VLAN 0 to HW filter on device bond1 [ 263.454940][T10614] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 263.531435][T10614] macvlan2: entered allmulticast mode [ 263.559620][T10614] bond0: entered allmulticast mode [ 263.582721][ T28] audit: type=1400 audit(1782922028.377:1513): avc: denied { write } for pid=10615 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.585387][T10614] bond_slave_0: entered allmulticast mode [ 263.608785][ T9919] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 263.624070][T10633] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1841'. [ 263.686391][ T28] audit: type=1400 audit(1782922028.477:1514): avc: denied { write } for pid=10637 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 263.725117][T10614] bond_slave_1: entered allmulticast mode [ 263.737404][ T9919] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 263.753319][T10614] bond1: (slave macvlan2): Enslaving as an active interface with an up link [ 263.788019][T10607] ip6gretap1: entered allmulticast mode [ 263.805471][T10607] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 263.850874][ T28] audit: type=1326 audit(1782922028.647:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10643 comm="syz.1.1852" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7feb9497de59 code=0x0 [ 263.900145][ T3397] IPVS: starting estimator thread 0... [ 263.929089][ T9933] bond1: (slave macvlan2): link status up again after 0 ms [ 263.943429][T10654] loop7: detected capacity change from 0 to 128 [ 263.947139][ T9933] bond1: (slave macvlan2): link status up again after 0 ms [ 263.956104][T10654] EXT4-fs: Ignoring removed bh option [ 263.965719][ T9933] bond1: (slave macvlan2): failed to get link speed/duplex [ 263.979013][T10654] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 263.996852][T10652] IPVS: using max 2064 ests per chain, 103200 per kthread [ 264.014949][T10654] ext4 filesystem being mounted at /252/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 264.039494][ T28] audit: type=1400 audit(1782922028.837:1516): avc: denied { write } for pid=10653 comm="syz.7.1855" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 264.090485][ T9933] bond1: (slave macvlan2): failed to get link speed/duplex [ 264.238038][ T9935] bond1: (slave macvlan2): failed to get link speed/duplex [ 264.247931][T10664] loop3: detected capacity change from 0 to 2048 [ 264.281900][T10664] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.335133][ T28] audit: type=1400 audit(1782922029.127:1517): avc: denied { write } for pid=10663 comm="syz.3.1859" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 264.369728][ T9933] bond1: (slave macvlan2): failed to get link speed/duplex [ 264.397229][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.446042][ T5151] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 264.617397][ T9933] bond1: (slave macvlan2): failed to get link speed/duplex [ 264.637909][T10687] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1865'. [ 264.668696][T10687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.681040][T10687] veth1_to_batadv (unregistering): left allmulticast mode [ 264.689943][T10687] veth1_to_batadv (unregistering): left promiscuous mode [ 264.698069][T10687] bridge0: port 3(veth1_to_batadv) entered disabled state [ 264.726628][ T9935] bond1: (slave macvlan2): failed to get link speed/duplex [ 264.862067][ T28] audit: type=1400 audit(1782922029.657:1518): avc: denied { write } for pid=10697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.915326][ T28] audit: type=1400 audit(1782922029.687:1519): avc: denied { write } for pid=10715 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 264.965998][T10665] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.983392][T10665] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.000917][T10665] bridge_slave_0: entered allmulticast mode [ 265.015750][T10665] bridge_slave_0: entered promiscuous mode [ 265.037717][T10665] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.045032][T10665] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.052539][T10665] bridge_slave_1: entered allmulticast mode [ 265.061864][T10665] bridge_slave_1: entered promiscuous mode [ 265.119962][T10665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.134773][T10728] loop7: detected capacity change from 0 to 512 [ 265.141742][T10665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.173128][T10728] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 265.209084][T10728] ext4 filesystem being mounted at /259/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.225372][T10665] team0: Port device team_slave_0 added [ 265.235355][T10665] team0: Port device team_slave_1 added [ 265.269541][T10665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.281184][T10665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.313761][ T28] audit: type=1400 audit(1782922030.107:1520): avc: denied { write } for pid=10727 comm="syz.7.1874" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.341708][ T28] audit: type=1400 audit(1782922030.107:1521): avc: denied { write } for pid=10727 comm="syz.7.1874" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.375605][ T28] audit: type=1400 audit(1782922030.107:1522): avc: denied { rename } for pid=10727 comm="syz.7.1874" name="file2" dev="loop7" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 265.376958][T10665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.433234][T10665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.449482][T10665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 265.456428][T10736] loop3: detected capacity change from 0 to 2048 [ 265.493075][T10665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.573445][T10665] hsr_slave_0: entered promiscuous mode [ 265.584200][T10665] hsr_slave_1: entered promiscuous mode [ 265.593434][T10665] debugfs: 'hsr0' already exists in 'hsr' [ 265.602964][T10665] Cannot create hsr debugfs directory [ 265.745600][T10665] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.816166][T10665] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.830814][T10751] loop3: detected capacity change from 0 to 512 [ 265.920392][T10751] journal_path: Lookup failure for './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa' [ 265.961123][T10665] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.976362][T10751] EXT4-fs: error: could not find journal device path [ 266.009486][ T5151] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.293418][T10665] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.495834][T10766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.536476][T10766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.558881][T10665] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 266.572178][T10665] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 266.581302][T10665] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 266.590771][T10665] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 266.599114][T10665] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 266.611949][T10665] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 266.621592][T10665] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 266.630895][T10665] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 266.796356][T10665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.825465][T10665] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.836692][ T9935] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.843850][ T9935] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.882917][ T9931] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.890314][ T9931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.160106][T10805] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1897'. [ 267.180833][T10665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 267.200888][T10805] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1897'. [ 267.246429][T10809] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1898'. [ 267.375756][T10665] veth0_vlan: entered promiscuous mode [ 267.398364][T10665] veth1_vlan: entered promiscuous mode [ 267.451979][T10665] veth0_macvtap: entered promiscuous mode [ 267.476367][T10665] veth1_macvtap: entered promiscuous mode [ 267.495443][T10829] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 267.516199][T10665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.529357][T10829] vhci_hcd vhci_hcd.0: default hub control req: 2314 vffff i0002 l0 [ 267.551442][T10665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.581474][ T9919] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.593532][ T9919] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.627983][ T9919] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.670342][ T9919] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.617019][ T9933] net_ratelimit: 21 callbacks suppressed [ 268.617063][ T9933] bond1: (slave macvlan2): failed to get link speed/duplex [ 268.777426][ T9931] bond1: (slave macvlan2): failed to get link speed/duplex [ 268.892610][ T9919] bridge_slave_1: left allmulticast mode [ 268.898467][ T9919] bridge_slave_1: left promiscuous mode [ 268.913461][ T9919] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.945556][ T9919] bridge_slave_0: left allmulticast mode [ 268.966649][ T9919] bridge_slave_0: left promiscuous mode [ 268.992853][ T9919] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.199349][ T9919] geneve0 (unregistering): left promiscuous mode [ 269.287446][ T9919] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.322565][ T9919] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.358204][ T9919] bond0 (unregistering): Released all slaves [ 269.382082][ T9919] bond1 (unregistering): Released all slaves [ 269.428642][ T9919] bond2 (unregistering): Released all slaves [ 269.459040][ T9919] bond3 (unregistering): Released all slaves [ 269.483728][ T9919] bond4 (unregistering): Released all slaves [ 269.540669][ T9927] bond1: (slave macvlan2): failed to get link speed/duplex [ 269.599714][ T9919] hsr_slave_0: left promiscuous mode [ 269.615188][ T9919] hsr_slave_1: left promiscuous mode [ 269.631875][ T9919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 269.657938][ T9919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 269.674886][ T9919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 269.693724][ T9919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 269.715086][T10863] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 269.724692][ T9919] veth1_macvtap: left promiscuous mode [ 269.737118][ T9919] veth0_macvtap: left promiscuous mode [ 269.754891][ T9919] veth1_vlan: left promiscuous mode [ 269.771877][T10899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.782569][ T9919] veth0_vlan: left promiscuous mode [ 269.803263][T10899] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.942289][T10907] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 269.959611][T10907] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 269.994662][ T9919] team0 (unregistering): Port device team_slave_1 removed [ 270.016916][ T9919] team0 (unregistering): Port device team_slave_0 removed [ 270.022522][T10913] xt_hashlimit: size too large, truncated to 1048576 [ 270.104252][ T9933] bond1: (slave macvlan2): failed to get link speed/duplex [ 270.224775][ T9935] bond1: (slave macvlan2): failed to get link speed/duplex [ 270.310486][ T9919] IPVS: stop unused estimator thread 0... [ 270.345813][ T9933] bond1: (slave macvlan2): failed to get link speed/duplex [ 270.422766][T10932] syzkaller1: entered promiscuous mode [ 270.428344][T10932] syzkaller1: entered allmulticast mode [ 270.469699][ T9933] bond1: (slave macvlan2): failed to get link speed/duplex [ 270.574556][ T9933] bond1: (slave macvlan2): failed to get link speed/duplex [ 270.679525][ T9933] bond1: (slave macvlan2): failed to get link speed/duplex [ 270.784527][ T9933] bond1: (slave macvlan2): failed to get link speed/duplex [ 271.053898][T10923] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 271.215568][T10957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 271.225212][T10957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 271.449316][T10986] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1962'. [ 271.563353][T11001] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1967'. [ 272.190918][T10971] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 272.279587][T11030] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1978'. [ 272.520383][T11062] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1991'. [ 272.540537][T11065] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1992'. [ 272.579040][T11067] loop7: detected capacity change from 0 to 2048 [ 273.367177][T11058] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 273.453308][T11086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.500805][T11086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.522399][T11086] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 273.564580][T11086] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 273.676821][T11108] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2007'. [ 273.699586][T11106] syzkaller0: entered promiscuous mode [ 273.705278][T11106] syzkaller0: entered allmulticast mode [ 273.876402][ T9931] net_ratelimit: 25 callbacks suppressed [ 273.876441][ T9931] bond1: (slave macvlan2): failed to get link speed/duplex [ 274.085025][ T9927] bond1: (slave macvlan2): failed to get link speed/duplex [ 274.238796][ T9939] bond1: (slave macvlan2): failed to get link speed/duplex [ 274.397368][ T9919] bond1: (slave macvlan2): failed to get link speed/duplex [ 274.543839][ T9933] bond1: (slave macvlan2): failed to get link speed/duplex [ 274.667794][ T9939] bond1: (slave macvlan2): failed to get link speed/duplex [ 274.790516][ T9919] bond1: (slave macvlan2): failed to get link speed/duplex [ 274.914035][ T9933] bond1: (slave macvlan2): failed to get link speed/duplex [ 275.029790][ T9933] bond1: (slave macvlan2): failed to get link speed/duplex [ 275.143387][ T9939] bond1: (slave macvlan2): failed to get link speed/duplex [ 275.174187][T11118] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 275.424837][T11147] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2018'. [ 275.578923][T11157] bridge_slave_0: left allmulticast mode [ 275.597526][T11157] bridge_slave_0: left promiscuous mode [ 275.616329][T11157] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.636413][T11157] bridge_slave_1: left allmulticast mode [ 275.647536][T11163] netlink: 'syz.3.2023': attribute type 10 has an invalid length. [ 275.666768][T11157] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.687856][T11157] bond0: (slave bond_slave_0): Releasing backup interface [ 275.695839][T11157] bond_slave_0: left allmulticast mode [ 275.709218][T11157] bond0: (slave bond_slave_1): Releasing backup interface [ 275.731629][T11157] bond_slave_1: left allmulticast mode [ 275.748955][T11157] team0: Port device team_slave_0 removed [ 275.757372][T11157] team0: Port device team_slave_1 removed [ 275.771785][T11157] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.817407][T11163] syz_tun: entered promiscuous mode [ 275.855388][T11163] syz_tun: entered allmulticast mode [ 275.873095][T11163] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 275.909530][ T9933] bond1: (slave macvlan2): link status definitely up, 10000 Mbps full duplex [ 275.926797][ T9933] bond1: active interface up! [ 275.955658][T11173] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 275.979923][T11173] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.471586][T11159] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 276.909893][T11191] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2035'. [ 276.927849][T11191] syz_tun: Device is already in use. [ 276.969573][T11197] loop7: detected capacity change from 0 to 1764 [ 277.282233][T11200] xt_CT: No such helper "snmp_trap" [ 277.839389][T11219] netlink: 'syz.1.2043': attribute type 1 has an invalid length. [ 277.854678][T11219] 8021q: adding VLAN 0 to HW filter on device bond1 [ 277.879683][T11219] vlan2: entered allmulticast mode [ 277.884956][T11219] bond1: entered allmulticast mode [ 277.899062][T11219] bond1: (slave geneve2): making interface the new active one [ 277.906868][T11219] geneve2: entered allmulticast mode [ 277.914017][T11219] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 277.922911][ T9931] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.956207][ T9931] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.987446][ T9931] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.034931][ T9931] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.127436][T11232] loop3: detected capacity change from 0 to 2048 [ 278.178344][T11208] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 278.221475][T11242] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2053'. [ 278.310876][T11244] tmpfs: Unknown parameter 'usrquota' [ 278.999927][T11261] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.019614][T11261] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.097822][ T28] audit: type=1400 audit(1782922043.573:1523): avc: denied { write } for pid=11255 comm="syz.3.2057" name="file0" dev="tmpfs" ino=2450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 279.126319][ T28] audit: type=1400 audit(1782922043.573:1524): avc: denied { open } for pid=11255 comm="syz.3.2057" path="/464/file0" dev="tmpfs" ino=2450 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 279.165059][ T28] audit: type=1400 audit(1782922043.573:1525): avc: denied { ioctl } for pid=11255 comm="syz.3.2057" path="/464/file0" dev="tmpfs" ino=2450 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 279.601595][T11281] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2063'. [ 279.659142][T11265] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.666400][T11265] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.673810][T11265] bridge_slave_0: entered allmulticast mode [ 279.680696][T11265] bridge_slave_0: entered promiscuous mode [ 279.688240][T11265] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.695935][T11265] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.703161][T11265] bridge_slave_1: entered allmulticast mode [ 279.709827][T11265] bridge_slave_1: entered promiscuous mode [ 279.728087][T11265] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.738730][T11265] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.760339][T11265] team0: Port device team_slave_0 added [ 279.767143][T11265] team0: Port device team_slave_1 added [ 279.795613][T11265] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 279.811356][T11265] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.848523][T11265] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 279.961305][T11265] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.968519][T11265] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 280.007112][T11265] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.040573][T11265] hsr_slave_0: entered promiscuous mode [ 280.046871][T11265] hsr_slave_1: entered promiscuous mode [ 280.053000][T11265] debugfs: 'hsr0' already exists in 'hsr' [ 280.062164][T11265] Cannot create hsr debugfs directory [ 280.670927][T11289] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 280.754237][T11321] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 280.780713][T11321] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 280.861007][ T28] audit: type=1400 audit(1782922045.233:1526): avc: denied { write } for pid=11309 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 281.075854][ T28] audit: type=1400 audit(1782922045.429:1527): avc: denied { write } for pid=11331 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 281.186227][T11265] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 281.199569][T11265] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 281.220384][T11265] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 281.241158][T11265] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 281.253606][T11265] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 281.279809][T11265] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 281.287813][T11351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2077'. [ 281.297884][T11265] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 281.307909][T11265] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 281.315576][T11351] hsr_slave_0: left promiscuous mode [ 281.321848][T11351] hsr_slave_1: left promiscuous mode [ 281.333905][ T28] audit: type=1400 audit(1782922045.670:1528): avc: denied { write } for pid=11335 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 281.413402][ T28] audit: type=1400 audit(1782922045.754:1529): avc: denied { write } for pid=11354 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.010332][T11265] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.022763][T11265] 8021q: adding VLAN 0 to HW filter on device team0 [ 282.038976][ T9933] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.046136][ T9933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 282.055267][ T28] audit: type=1400 audit(1782922046.339:1530): avc: denied { write } for pid=11364 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.091131][ T9935] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.098284][ T9935] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.134953][ T28] audit: type=1400 audit(1782922046.423:1531): avc: denied { write } for pid=11389 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.333064][ T28] audit: type=1400 audit(1782922046.599:1532): avc: denied { write } for pid=11393 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 282.366529][T11361] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 282.556556][T11265] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.192292][T11265] veth0_vlan: entered promiscuous mode [ 283.232732][T11265] veth1_vlan: entered promiscuous mode [ 283.296916][T11265] veth0_macvtap: entered promiscuous mode [ 283.335290][T11265] veth1_macvtap: entered promiscuous mode [ 283.365283][T11265] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 283.417790][T11265] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 283.428637][ T9931] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.454770][ T9931] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.498162][ T9931] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.548994][ T9931] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.856213][T11532] loop6: detected capacity change from 0 to 512 [ 283.897663][T11532] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 283.928014][T11532] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 284.250760][T11496] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 284.263782][T11265] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 284.677332][T11568] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 284.684997][T11568] IPv6: NLM_F_CREATE should be set when creating new route [ 284.692271][T11568] IPv6: NLM_F_CREATE should be set when creating new route [ 284.699739][T11568] IPv6: NLM_F_CREATE should be set when creating new route [ 284.735882][T11568] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 284.797080][T11582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.810280][T11576] tipc: Started in network mode [ 284.810874][T11582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.824645][T11576] tipc: Node identity aed93bbbec07, cluster identity 4711 [ 284.834151][ T28] kauditd_printk_skb: 107 callbacks suppressed [ 284.834170][ T28] audit: type=1400 audit(1782922048.925:1640): avc: denied { write } for pid=11560 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.871533][T11576] tipc: Enabled bearer , priority 0 [ 284.887189][ T28] audit: type=1400 audit(1782922048.971:1641): avc: denied { write } for pid=11587 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.948642][T11586] syzkaller0: entered promiscuous mode [ 284.954494][T11586] syzkaller0: entered allmulticast mode [ 284.961953][T11586] tipc: Resetting bearer [ 284.999580][T11596] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2109'. [ 285.009258][T11574] tipc: Resetting bearer [ 285.035122][T11574] tipc: Disabling bearer [ 285.042073][T11600] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2111'. [ 285.129471][ T28] audit: type=1400 audit(1782922049.193:1642): avc: denied { write } for pid=11601 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.170529][ T28] audit: type=1400 audit(1782922049.230:1643): avc: denied { write } for pid=11620 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.311734][ T28] audit: type=1400 audit(1782922049.359:1644): avc: denied { write } for pid=11630 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.377738][ T28] audit: type=1400 audit(1782922049.415:1645): avc: denied { write } for pid=11651 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.524718][ T28] audit: type=1400 audit(1782922049.563:1646): avc: denied { write } for pid=11655 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.587429][ T28] audit: type=1400 audit(1782922049.618:1647): avc: denied { write } for pid=11676 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.983277][T11606] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 286.218773][T11689] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.243333][T11689] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.458165][T11704] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 286.479889][T11704] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 286.571664][T11709] wg2 speed is unknown, defaulting to 1000 [ 286.577678][T11709] wg2 speed is unknown, defaulting to 1000 [ 286.584878][T11709] wg2 speed is unknown, defaulting to 1000 [ 286.592085][T11709] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 287.133135][T11709] wg2 speed is unknown, defaulting to 1000 [ 287.139442][T11709] wg2 speed is unknown, defaulting to 1000 [ 287.145702][T11709] wg2 speed is unknown, defaulting to 1000 [ 287.152637][T11709] wg2 speed is unknown, defaulting to 1000 [ 287.159515][T11709] wg2 speed is unknown, defaulting to 1000 [ 287.166078][T11709] wg2 speed is unknown, defaulting to 1000 [ 287.717964][ T28] audit: type=1400 audit(1782922051.578:1648): avc: denied { map } for pid=11735 comm="syz.3.2146" path="/dev/usbmon0" dev="devtmpfs" ino=141 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 287.877701][T11752] program syz.3.2152 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 288.519686][T11745] loop8: detected capacity change from 1024 to 1023 [ 288.731428][ T3397] wg2 speed is unknown, defaulting to 1000 [ 288.802786][T11785] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2166'. [ 288.963719][T11795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 288.983583][T11795] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 289.931185][T11809] netlink: 'syz.3.2175': attribute type 1 has an invalid length. [ 289.974878][T11812] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2177'. [ 289.994520][T11809] 8021q: adding VLAN 0 to HW filter on device bond2 [ 290.040890][T11809] bond2: (slave geneve2): making interface the new active one [ 290.068220][T11809] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 290.126707][ T9927] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.136725][ T9927] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.146387][ T9927] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.155261][ T9927] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.217544][T11824] loop3: detected capacity change from 0 to 256 [ 290.267293][T11826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 290.292651][T11826] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 290.358296][T11824] FAT-fs (loop3): codepage cp866 not found [ 290.936145][T11845] netlink: 'syz.2.2191': attribute type 1 has an invalid length. [ 290.953438][T11845] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2191'. [ 291.000117][T11848] tipc: Started in network mode [ 291.009098][T11848] tipc: Node identity ca1abd4906a, cluster identity 4711 [ 291.016339][T11848] tipc: Enabled bearer , priority 0 [ 291.024438][T11845] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2191'. [ 291.037189][T11846] tipc: Disabling bearer [ 291.139683][T11861] xt_hashlimit: size too large, truncated to 1048576 [ 291.210925][T11863] syzkaller1: entered promiscuous mode [ 291.223791][T11863] syzkaller1: entered allmulticast mode [ 291.295358][T11867] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2199'. [ 291.886294][ T28] audit: type=1400 audit(1782922055.429:1649): avc: denied { bind } for pid=11885 comm="syz.6.2205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 292.268463][T11904] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11904 comm=syz.1.2213 [ 292.278816][T11906] netlink: 16170 bytes leftover after parsing attributes in process `syz.2.2214'. [ 292.290530][ T28] audit: type=1400 audit(1782922055.807:1650): avc: denied { bind } for pid=11901 comm="syz.3.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 292.321970][ T28] audit: type=1400 audit(1782922055.807:1651): avc: denied { listen } for pid=11901 comm="syz.3.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 292.337289][T11904] macsec1: entered allmulticast mode [ 292.357643][T11904] batadv0: entered allmulticast mode [ 292.363815][T11904] 8021q: adding VLAN 0 to HW filter on device macsec1 [ 292.372793][ T28] audit: type=1400 audit(1782922055.863:1652): avc: denied { accept } for pid=11901 comm="syz.3.2212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 292.396573][T11904] batadv0: left allmulticast mode [ 292.493543][T11912] syzkaller0: entered promiscuous mode [ 292.511312][T11912] syzkaller0: entered allmulticast mode [ 292.647070][ T3398] wg2 speed is unknown, defaulting to 1000 [ 292.700454][T11924] syzkaller0: entered promiscuous mode [ 292.706286][T11924] syzkaller0: entered allmulticast mode [ 292.865697][T11938] syzkaller0: entered promiscuous mode [ 292.871298][T11938] syzkaller0: entered allmulticast mode [ 292.884584][T11940] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 292.893184][T11940] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 292.960640][T11945] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2227'. [ 292.977598][T11945] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2227'. [ 293.483324][T11970] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2238'. [ 293.538390][T11975] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2239'. [ 293.569694][T11977] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2241'. [ 293.747872][ T28] audit: type=1400 audit(1782922057.155:1653): avc: denied { create } for pid=11971 comm="syz.7.2240" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 293.782253][T11972] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2240'. [ 293.806807][ T28] audit: type=1400 audit(1782922057.210:1654): avc: denied { ioctl } for pid=11992 comm="syz.2.2249" path="socket:[33518]" dev="sockfs" ino=33518 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 294.086408][T12016] tmpfs: Unknown parameter 'usrquota' [ 294.437316][T12033] syzkaller0: entered promiscuous mode [ 294.451677][T12033] syzkaller0: entered allmulticast mode [ 294.604176][T12059] syzkaller0: entered promiscuous mode [ 294.610747][T12059] syzkaller0: entered allmulticast mode [ 294.651562][T12061] syzkaller0: entered promiscuous mode [ 294.657096][T12061] syzkaller0: entered allmulticast mode [ 294.748151][ T3397] IPVS: starting estimator thread 0... [ 294.782760][T12080] netlink: 'syz.1.2286': attribute type 2 has an invalid length. [ 294.820214][T12079] wg2 speed is unknown, defaulting to 1000 [ 294.855146][T12073] IPVS: using max 2496 ests per chain, 124800 per kthread [ 294.919006][T12094] xt_recent: Unsupported userspace flags (000000b1) [ 296.071516][T12270] netlink: 'syz.7.2335': attribute type 1 has an invalid length. [ 296.079626][T12270] netlink: 'syz.7.2335': attribute type 2 has an invalid length. [ 296.283394][T12273] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 296.294432][T12273] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.301650][T12273] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.326798][T12274] syzkaller0: entered promiscuous mode [ 296.354977][T12274] syzkaller0: entered allmulticast mode [ 296.507951][T12301] vlan2: entered promiscuous mode [ 296.516108][T12301] bridge0: entered promiscuous mode [ 296.676532][ T28] audit: type=1400 audit(1782922059.859:1655): avc: denied { write } for pid=12313 comm="syz.6.2354" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 296.728328][T12323] xt_recent: Unsupported userspace flags (000000b1) [ 296.871360][T12321] syzkaller0: entered promiscuous mode [ 296.888053][T12321] syzkaller0: entered allmulticast mode [ 297.311771][T12386] netlink: 'syz.7.2369': attribute type 1 has an invalid length. [ 297.370140][T12386] 8021q: adding VLAN 0 to HW filter on device bond2 [ 298.093596][T12480] __nla_validate_parse: 9 callbacks suppressed [ 298.093668][T12480] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2382'. [ 299.183691][ T3412] IPVS: starting estimator thread 0... [ 299.300449][T12511] IPVS: using max 2448 ests per chain, 122400 per kthread [ 299.709231][T12544] syzkaller1: entered promiscuous mode [ 299.729306][T12544] syzkaller1: entered allmulticast mode [ 299.758930][T12542] syzkaller0: entered promiscuous mode [ 299.773366][T12542] syzkaller0: entered allmulticast mode [ 299.863008][T12553] syzkaller0: entered promiscuous mode [ 299.879459][T12553] syzkaller0: entered allmulticast mode [ 299.983380][T12562] netlink: 'syz.1.2417': attribute type 1 has an invalid length. [ 300.030363][T12562] 8021q: adding VLAN 0 to HW filter on device bond2 [ 300.069790][T12562] vlan3: entered allmulticast mode [ 300.085483][T12562] bond2: entered allmulticast mode [ 300.335549][T12579] syzkaller0: entered promiscuous mode [ 300.344537][T12579] syzkaller0: entered allmulticast mode [ 300.503244][T12592] netlink: 'syz.3.2431': attribute type 1 has an invalid length. [ 300.663918][T12592] 8021q: adding VLAN 0 to HW filter on device bond3 [ 300.695471][T12597] vlan4: entered allmulticast mode [ 300.701408][T12597] bond3: entered allmulticast mode [ 300.725207][T12604] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2434'. [ 300.759372][T12607] IPv6: NLM_F_CREATE should be specified when creating new route [ 300.867809][T12610] wg2 speed is unknown, defaulting to 1000 [ 301.040409][T12622] syzkaller0: entered promiscuous mode [ 301.048810][T12622] syzkaller0: entered allmulticast mode [ 301.058595][T12622] tipc: Enabled bearer , priority 0 [ 301.079869][T12622] tipc: Resetting bearer [ 301.109591][T12620] tipc: Resetting bearer [ 301.128322][T12620] tipc: Disabling bearer [ 301.364050][T12634] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2447'. [ 301.620649][T12644] netlink: 'syz.6.2452': attribute type 1 has an invalid length. [ 301.657039][T12644] 8021q: adding VLAN 0 to HW filter on device bond1 [ 301.673329][T12644] vlan2: entered allmulticast mode [ 301.678638][T12644] bond1: entered allmulticast mode [ 301.694383][T12644] bond1: (slave geneve2): making interface the new active one [ 301.702039][T12644] geneve2: entered allmulticast mode [ 301.709871][T12644] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 302.101011][T12655] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2457'. [ 302.333491][T12689] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2471'. [ 302.352906][T12694] syzkaller0: entered promiscuous mode [ 302.362761][T12694] syzkaller0: entered allmulticast mode [ 302.607379][T12708] syzkaller0: entered promiscuous mode [ 302.624006][T12708] syzkaller0: entered allmulticast mode [ 302.866984][T12726] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2487'. [ 302.920657][T12730] netlink: 92 bytes leftover after parsing attributes in process `syz.3.2490'. [ 303.049921][T12730] tmpfs: Unknown parameter 'usrquota' [ 303.116103][T12742] syzkaller1: entered promiscuous mode [ 303.122215][T12742] syzkaller1: entered allmulticast mode [ 303.140527][ T28] audit: type=1400 audit(1782922065.820:1656): avc: denied { bind } for pid=12744 comm="syz.1.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 303.218034][T12747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2495'. [ 303.231433][ T28] audit: type=1400 audit(1782922065.848:1657): avc: denied { listen } for pid=12744 comm="syz.1.2494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 303.314615][T12747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2495'. [ 303.350735][T12752] wg2 speed is unknown, defaulting to 1000 [ 303.376032][T12756] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2497'. [ 303.440317][T12758] netlink: 'syz.2.2499': attribute type 1 has an invalid length. [ 303.515760][T12758] 8021q: adding VLAN 0 to HW filter on device bond1 [ 303.803316][T12782] syzkaller1: entered promiscuous mode [ 303.815117][T12784] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2509'. [ 303.835518][T12782] syzkaller1: entered allmulticast mode [ 304.040926][T12801] tipc: Enabling of bearer rejected, failed to enable media [ 304.255053][T12814] syzkaller0: entered promiscuous mode [ 304.269330][T12814] syzkaller0: entered allmulticast mode [ 304.549532][T12821] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2523'. [ 304.841661][T12829] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2527'. [ 305.029652][T12836] syzkaller0: entered promiscuous mode [ 305.052798][T12836] syzkaller0: entered allmulticast mode [ 305.388453][T12857] netlink: 'syz.6.2537': attribute type 1 has an invalid length. [ 305.909868][T12881] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2549'. [ 305.969139][T12883] netlink: 'syz.6.2550': attribute type 1 has an invalid length. [ 306.115000][T12888] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 306.301662][T12899] xt_recent: Unsupported userspace flags (000000b1) [ 306.438993][T12911] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2561'. [ 306.560999][ T28] audit: type=1400 audit(1782922068.985:1658): avc: denied { listen } for pid=12918 comm="syz.7.2563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 306.823937][T12942] syzkaller0: entered promiscuous mode [ 306.837566][T12942] syzkaller0: entered allmulticast mode [ 306.855632][ T28] audit: type=1400 audit(1782922069.252:1659): avc: denied { ioctl } for pid=12944 comm="syz.2.2567" path="socket:[37681]" dev="sockfs" ino=37681 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 307.976684][T13033] xt_recent: Unsupported userspace flags (000000b1) [ 307.985713][T13034] syzkaller0: entered promiscuous mode [ 307.993160][T13034] syzkaller0: entered allmulticast mode [ 308.038782][T13037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2581'. [ 308.094404][T13042] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2586'. [ 308.195569][T13047] syzkaller0: entered promiscuous mode [ 308.203241][T13047] syzkaller0: entered allmulticast mode [ 308.213196][T13048] tmpfs: Unknown parameter 'usrquota' [ 308.230321][T13035] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2580'. [ 308.632961][T13074] xt_recent: Unsupported userspace flags (000000b1) [ 328.935448][ T28] audit: type=1400 audit(1782922089.478:1660): avc: denied { recv } for pid=3534 comm="kworker/1:8" saddr=10.128.0.163 src=35018 daddr=10.128.0.64 dest=22 netif=eth0 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unlabeled_t tclass=peer permissive=1 [ 333.596511][T13090] syzkaller1: entered promiscuous mode [ 333.704898][T13090] syzkaller1: entered allmulticast mode [ 397.031339][T13082] bond0: (slave syz_tun): Releasing backup interface [ 398.834576][T13082] syz_tun (unregistering): left allmulticast mode [ 431.735077][ C1] ================================================================== [ 431.743252][ C1] BUG: KCSAN: data-race in wq_worker_tick / wq_worker_tick [ 431.750625][ C1] [ 431.752971][ C1] read-write to 0xffff8881000c5cd8 of 8 bytes by interrupt on cpu 0: [ 431.761147][ C1] wq_worker_tick+0x64/0x240 [ 431.765808][ C1] sched_tick+0xbc/0x1f0 [ 431.770089][ C1] update_process_times+0x15e/0x190 [ 431.775344][ C1] tick_nohz_handler+0x227/0x380 [ 431.780317][ C1] __hrtimer_run_queues+0x1f8/0x510 [ 431.785565][ C1] hrtimer_interrupt+0x257/0x810 [ 431.790618][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 431.796661][ C1] sysvec_apic_timer_interrupt+0x32/0x80 [ 431.802422][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 431.808527][ C1] __tsan_read8+0xd5/0x190 [ 431.812992][ C1] ipt_do_table+0x6e5/0xb40 [ 431.817529][ C1] iptable_mangle_hook+0x109/0x250 [ 431.822682][ C1] nf_hook_slow+0x78/0x180 [ 431.827264][ C1] ip_rcv+0x11f/0x160 [ 431.831306][ C1] process_backlog+0x333/0x680 [ 431.836111][ C1] __napi_poll+0x61/0x300 [ 431.840516][ C1] net_rx_action+0x456/0x930 [ 431.845159][ C1] handle_softirqs+0xb9/0x280 [ 431.849876][ C1] do_softirq+0x45/0x60 [ 431.854062][ C1] __local_bh_enable_ip+0x70/0x80 [ 431.859123][ C1] __alloc_skb+0x6b1/0x6f0 [ 431.863574][ C1] nsim_dev_trap_report_work+0x18b/0x630 [ 431.869258][ C1] process_scheduled_works+0x4d4/0x9a0 [ 431.874766][ C1] worker_thread+0x569/0x750 [ 431.879401][ C1] kthread+0x221/0x270 [ 431.883514][ C1] ret_from_fork+0x146/0x330 [ 431.888142][ C1] ret_from_fork_asm+0x1a/0x30 [ 431.893043][ C1] [ 431.895381][ C1] read-write to 0xffff8881000c5cd8 of 8 bytes by interrupt on cpu 1: [ 431.903475][ C1] wq_worker_tick+0x64/0x240 [ 431.908112][ C1] sched_tick+0xbc/0x1f0 [ 431.912393][ C1] update_process_times+0x15e/0x190 [ 431.917632][ C1] tick_nohz_handler+0x227/0x380 [ 431.922780][ C1] __hrtimer_run_queues+0x1f8/0x510 [ 431.928149][ C1] hrtimer_interrupt+0x257/0x810 [ 431.933313][ C1] __sysvec_apic_timer_interrupt+0x5f/0x1c0 [ 431.939330][ C1] sysvec_apic_timer_interrupt+0x32/0x80 [ 431.945029][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 431.951047][ C1] __tsan_unaligned_write1+0xe8/0x180 [ 431.956469][ C1] nft_do_chain_inet+0x15d/0x320 [ 431.961451][ C1] nf_hook_slow+0x78/0x180 [ 431.965911][ C1] ip_local_deliver+0x199/0x1e0 [ 431.970896][ C1] ip_rcv_finish+0x188/0x1a0 [ 431.975525][ C1] ip_rcv+0x62/0x160 [ 431.979447][ C1] process_backlog+0x333/0x680 [ 431.984257][ C1] __napi_poll+0x61/0x300 [ 431.988641][ C1] net_rx_action+0x456/0x930 [ 431.993295][ C1] handle_softirqs+0xb9/0x280 [ 431.998006][ C1] do_softirq+0x45/0x60 [ 432.002461][ C1] __local_bh_enable_ip+0x70/0x80 [ 432.007522][ C1] _raw_spin_unlock_bh+0x18/0x20 [ 432.012517][ C1] nsim_dev_trap_report_work+0x521/0x630 [ 432.018198][ C1] process_scheduled_works+0x4d4/0x9a0 [ 432.023722][ C1] worker_thread+0x569/0x750 [ 432.028462][ C1] kthread+0x221/0x270 [ 432.032572][ C1] ret_from_fork+0x146/0x330 [ 432.037214][ C1] ret_from_fork_asm+0x1a/0x30 [ 432.042105][ C1] [ 432.044453][ C1] value changed: 0x0000000002857260 -> 0x0000000002859970 [ 432.051588][ C1] [ 432.053935][ C1] Reported by Kernel Concurrency Sanitizer on: [ 432.060145][ C1] CPU: 1 UID: 0 PID: 3669 Comm: kworker/u8:8 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 432.071559][ C1] Tainted: [W]=WARN [ 432.075474][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 432.085563][ C1] Workqueue: events_unbound nsim_dev_trap_report_work [ 432.092820][ C1] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)