last executing test programs: 14m14.987583205s ago: executing program 32 (id=40): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 14m14.598866084s ago: executing program 33 (id=44): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000500)=@file={0x0, './mnt\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1f, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x8000000}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x8420, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) 13m5.48066861s ago: executing program 34 (id=237): openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101042, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0xe, &(0x7f0000000b80)=ANY=[], 0x0, 0x1, 0x0, 0x0, 0x41100}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="2200000004"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x3, 0x0, &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_buf(r5, 0x6, 0x6, 0x0, &(0x7f0000000240)) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x12, 0x0, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) 12m6.593888392s ago: executing program 35 (id=355): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000035c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8884d3, 0x0, 0xf2, 0x0, &(0x7f00000000c0)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x5, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x3, 0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c52, &(0x7f0000000340)=ANY=[@ANYBLOB='utf8,uid=', @ANYRES64=r2, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRES16, @ANYRESOCT=r2], 0x2, 0xa2f, &(0x7f0000000ec0)="$eJzs3c9vHGf5APBn1nbiuFWStvn2W6K2nqQkdVvjrG2aYPUAjnftbLG9yHakRBya0jgoiqHQgtRWSKQS4oCoQAJx4VZx4lSpF3pBvcENLnBAQv0XKk7hZDSzu/bau+u1Xcd208/H2t358cz7PvNj581OducNPl9WT2wYW13NH7scv/rHfciYQ+xy6ZP3P3gve7x7N45ET7yY/CmiPyLSiN6IeCKib6q0UJ3rUtCdiBsR8XFEEhFHo/a6LTci+VU8vD7+cSS/z+rt6Mh2S6abVb7QDvr4AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAwyiZKhWLo8mRqMxfvZbWRKQtpkoL1SRWV1vnNJap+Sjv9Tv56BcPdak3Iske0d/f6Or7iVPrsx+PiPRsPFkbezLvkDz6452HHj/50mO9hcbynbL5TI52KLYnWjbMm2+/c+fVlZXlN3ZYRf9ucztkZsrzlcVqZW5yppxWFqvpxMWLxQtXphfT6cpsefH64lJ5Lp1aKE8uVRfSoann0tGJifG0PHK9enV+pjQyW25MvPSVsWLxYvryyLfKkwuL1fkLL48sTl2pzM5W5mfymGx2FnMpOxC/WVlKl8qTc2l66/bK8vimnFp2UxY02m1NsqCxbkFjxbGx0dGxsdF3671nr024+OLEi5eKxd7iJtEScZ8OWg6XY5138/04jcOuFGrtf8RsVGI+rsa1SNv+TUUpFqIacx3m1zXa/3MXylvW29z+11v53qbZp7Ons/F0fbS/Q/vfIZf9+3sz3o534k68GiuxEsvxxoFn1PqX7ZEO84591rJnohzzUYnFqEYl5mIyn5LWp6QxERfjYhTjlbgSg7EYaUxHJWajHItxPRZjKcr5ETUVC1GOyViKaixEGkMxFc9FGqMxERMxHmmUYySuRzWuxnzMRCkm81Juxe18u49vkeNa0Oh2gsa2CGppzHfc/pdb/w3JF8zen8Rhl1br7f+R7qFDU/uREAAAALDnvvTXOH7q0b/8OyKJp/Lr8tOV2XLxoNMCAAAA9lASScST2VNfNvpUJD7/AwAAwIMmyX9jl0TEQAzWhhq/hHIRAAAAAB4Q+e16no5kcH2Cz/8AAADwgFm7x37tSsDaPXav9TSmdr0LfzLcuP1verP2erMeUS9iYLoyWx6Zqs6+NBrn87sM5L80aCmtJyLpy39+8HycqUWdGYi72evAeolZnf1Z1OjIS6PxfJytr8jQM9nLM0NtIsdqkc/WIp9tjuyJDZHjWSQAPOjObtEe1+6x3739fz6GaxHDp/Mmv/d0mza4qGUFgMNirY+d/9a7NGvT/tcjnu7U/n91i8//WcSjcWuw9pWCkXgtXo+VuBnDUf/GwWC7Uhu9EdS+hjDcdDUgt+lqwED9Kwt/v1SI4ZbrAf1r69ocuxxjMVy/InCsPr9+7SBZi00aOYzXAnruww4AgANwdst2eHvt/3CXz/8DvlIIAIfKWg/22x3IFtp2cG3goNcRANhIKw0AAAAAAAAAAAAAAAAAAAAAAAAAAAB7b1s38P/b+YiVleWInXYWsIOBk5un9O8kw60HCnF/cm4z0Hv/q9hqoGfnvTNsc+AfXWO+HjsuOdvHB7OhDHQbOOATEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPsiiehpN71wNH8pRsSF/c7pfrp70AnslXR3iyX34l68Fcf3Oh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC+6+v3/C1F7fag2KXoLEeci4kZEfPugc9xL9w46gQPzvfy56f7/hYi+WE2it7bbI+mbKi1U57LdnxzN5n/y/gfvZY/uZbf2qpB3H1HY1LlEvYamKX0bl3okX2qgtPzmnR+9/oO0dDk/MC8vTc+W5mYWvrEe+HjyYa0LhOZuEBr5/uTcn3/dNPlIvfIPszVtb3O903m9pdZ6/7/d0h3q3YbbK8tjWU1L5WtLP/7+7beaZj0aZyKeGYoY2ljTd7NHh5rObN6eGyWfJj9Pjsfv4ka+/7Otkawm2S46ka//sVu3V5ZHXnt95eZaTj/dkNPJGIyImxH9289pMD+ftJUfdYW+rNZiHpQ9nepS3paaShztsF0fyQ+ZgR2tQ9p5HXL5du94cDUyGm+b0W9++Fic3/GePr/1nm4v+TT5V3Il/hk/a+r/o5Dt/3PR9t3Zpog8sulIaZ63YQsUapH5mo81z3hlc5lbbDj23C/jO/G1tf1faDr/1/fV/pyPmmps/76I2Pn74g8nWlqUdXmLdGpTi1Q/+7RdoH8tz1O1qA55/l+8ENF7ekdnlBe6nFH2/v1fr+/uUPwn7ur/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOPySiJ520wsR5yLiZEScyMbTiNXNMXd3UV9hINlNmntmNzkfZklv26lNK7pxjZN7cS/eiuP7kBoAAAAAAAAA++By6ZP3P3gve+T/H98TXy7U56QRvRFxMvlt31RpoTrXpaC+iBuN/9Lv31kON7Knh9fHP87Gnuiy0MF+fQAAPtf+FwAA//822GxX") r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x9}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r4, 0x40042408, r3) socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0xfffbfffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xffff7ffc, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_clone(0x241c4000, 0x0, 0x0, &(0x7f0000001080), 0x0, &(0x7f0000001100)) 11m40.470902398s ago: executing program 36 (id=392): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xb402b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x800000, 0x0, 0x0, &(0x7f0000000280), &(0x7f0000000380), &(0x7f0000000400)="a04d3348d4a3e6c94b090f5ea664e13ce18238c5e4") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000006000000000000000000000203000000000000000000000900000000040000000000001202"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x40000) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008814}, 0x8010) pidfd_send_signal(0xffffffffffffffff, 0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x4a, 0x5f, 0xfe, 0x4, 0x4, 0x0, 0x3, 0x80000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x1}, 0x110200, 0xd, 0x9, 0x7, 0x7, 0x7, 0x0, 0x0, 0xfffffffd, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) 11m40.212931794s ago: executing program 37 (id=393): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000003c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0xb402b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x800000, 0x0, 0x0, &(0x7f0000000280), &(0x7f0000000380), &(0x7f0000000400)="a04d3348d4a3e6c94b090f5ea664e13ce18238c5e4") bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000006000000000000000000000203000000000000000000000900000000040000000000001202"], 0x0, 0x42, 0x0, 0x1, 0xe988}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, 0x0, 0x40000) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x30, 0x0, 0x0, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008814}, 0x8010) pidfd_send_signal(0xffffffffffffffff, 0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0x4a, 0x5f, 0xfe, 0x4, 0x4, 0x0, 0x3, 0x80000, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x1}, 0x110200, 0xd, 0x9, 0x7, 0x7, 0x7, 0x0, 0x0, 0xfffffffd, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) 11m7.078315767s ago: executing program 38 (id=412): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000035c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x8884d3, 0x0, 0xf2, 0x0, &(0x7f00000000c0)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x5, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x200008, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x6}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0x3, 0xffffffffffffffff, 0x1) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x2000c52, &(0x7f0000000340)=ANY=[@ANYBLOB='utf8,uid=', @ANYRES64=r3, @ANYBLOB=',\x00\x00\x00\x00\x00\x00\x00\x00al,nocompress,showassoc,map=acorn,map=normal,block=0x0000000000000800,utf8,map=off,dmode=0x0000000000009fbc,iocharset=default,fowner<', @ANYRES16=r1, @ANYRESOCT=r3], 0x2, 0xa2f, &(0x7f0000000ec0)="$eJzs3c9vHGf5APBn1nbiuFWStvn2W6K2nqQkdVvjrG2aYPUAjnftbLG9yHakRBya0jgoiqHQgtRWSKQS4oCoQAJx4VZx4lSpF3pBvcENLnBAQv0XKk7hZDSzu/bau+u1Xcd208/H2t358cz7PvNj581OducNPl9WT2wYW13NH7scv/rHfciYQ+xy6ZP3P3gve7x7N45ET7yY/CmiPyLSiN6IeCKib6q0UJ3rUtCdiBsR8XFEEhFHo/a6LTci+VU8vD7+cSS/z+rt6Mh2S6abVb7QDvr4AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAwyiZKhWLo8mRqMxfvZbWRKQtpkoL1SRWV1vnNJap+Sjv9Tv56BcPdak3Iske0d/f6Or7iVPrsx+PiPRsPFkbezLvkDz6452HHj/50mO9hcbynbL5TI52KLYnWjbMm2+/c+fVlZXlN3ZYRf9ucztkZsrzlcVqZW5yppxWFqvpxMWLxQtXphfT6cpsefH64lJ5Lp1aKE8uVRfSoann0tGJifG0PHK9enV+pjQyW25MvPSVsWLxYvryyLfKkwuL1fkLL48sTl2pzM5W5mfymGx2FnMpOxC/WVlKl8qTc2l66/bK8vimnFp2UxY02m1NsqCxbkFjxbGx0dGxsdF3671nr024+OLEi5eKxd7iJtEScZ8OWg6XY5138/04jcOuFGrtf8RsVGI+rsa1SNv+TUUpFqIacx3m1zXa/3MXylvW29z+11v53qbZp7Ons/F0fbS/Q/vfIZf9+3sz3o534k68GiuxEsvxxoFn1PqX7ZEO84591rJnohzzUYnFqEYl5mIyn5LWp6QxERfjYhTjlbgSg7EYaUxHJWajHItxPRZjKcr5ETUVC1GOyViKaixEGkMxFc9FGqMxERMxHmmUYySuRzWuxnzMRCkm81Juxe18u49vkeNa0Oh2gsa2CGppzHfc/pdb/w3JF8zen8Rhl1br7f+R7qFDU/uREAAAALDnvvTXOH7q0b/8OyKJp/Lr8tOV2XLxoNMCAAAA9lASScST2VNfNvpUJD7/AwAAwIMmyX9jl0TEQAzWhhq/hHIRAAAAAB4Q+e16no5kcH2Cz/8AAADwgFm7x37tSsDaPXav9TSmdr0LfzLcuP1verP2erMeUS9iYLoyWx6Zqs6+NBrn87sM5L80aCmtJyLpy39+8HycqUWdGYi72evAeolZnf1Z1OjIS6PxfJytr8jQM9nLM0NtIsdqkc/WIp9tjuyJDZHjWSQAPOjObtEe1+6x3739fz6GaxHDp/Mmv/d0mza4qGUFgMNirY+d/9a7NGvT/tcjnu7U/n91i8//WcSjcWuw9pWCkXgtXo+VuBnDUf/GwWC7Uhu9EdS+hjDcdDUgt+lqwED9Kwt/v1SI4ZbrAf1r69ocuxxjMVy/InCsPr9+7SBZi00aOYzXAnruww4AgANwdst2eHvt/3CXz/8DvlIIAIfKWg/22x3IFtp2cG3goNcRANhIKw0AAAAAAAAAAAAAAAAAAAAAAAAAAAB7b1s38P/b+YiVleWInXYWsIOBk5un9O8kw60HCnF/cm4z0Hv/q9hqoGfnvTNsc+AfXWO+HjsuOdvHB7OhDHQbOOATEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPsiiehpN71wNH8pRsSF/c7pfrp70AnslXR3iyX34l68Fcf3Oh0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC+6+v3/C1F7fag2KXoLEeci4kZEfPugc9xL9w46gQPzvfy56f7/hYi+WE2it7bbI+mbKi1U57LdnxzN5n/y/gfvZY/uZbf2qpB3H1HY1LlEvYamKX0bl3okX2qgtPzmnR+9/oO0dDk/MC8vTc+W5mYWvrEe+HjyYa0LhOZuEBr5/uTcn3/dNPlIvfIPszVtb3O903m9pdZ6/7/d0h3q3YbbK8tjWU1L5WtLP/7+7beaZj0aZyKeGYoY2ljTd7NHh5rObN6eGyWfJj9Pjsfv4ka+/7Otkawm2S46ka//sVu3V5ZHXnt95eZaTj/dkNPJGIyImxH9289pMD+ftJUfdYW+rNZiHpQ9nepS3paaShztsF0fyQ+ZgR2tQ9p5HXL5du94cDUyGm+b0W9++Fic3/GePr/1nm4v+TT5V3Il/hk/a+r/o5Dt/3PR9t3Zpog8sulIaZ63YQsUapH5mo81z3hlc5lbbDj23C/jO/G1tf1faDr/1/fV/pyPmmps/76I2Pn74g8nWlqUdXmLdGpTi1Q/+7RdoH8tz1O1qA55/l+8ENF7ekdnlBe6nFH2/v1fr+/uUPwn7ur/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOPySiJ520wsR5yLiZEScyMbTiNXNMXd3UV9hINlNmntmNzkfZklv26lNK7pxjZN7cS/eiuP7kBoAAAAAAAAA++By6ZP3P3gve+T/H98TXy7U56QRvRFxMvlt31RpoTrXpaC+iBuN/9Lv31kON7Knh9fHP87Gnuiy0MF+fQAAPtf+FwAA//822GxX") r4 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r5 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x43201, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x8, 0x9}, 0x640, 0x5, 0x0, 0x8, 0x2, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r5, 0x40042408, r4) socket$nl_netfilter(0x10, 0x3, 0xc) kexec_load(0xfffbfffffffffffc, 0x1, &(0x7f0000000900)=[{0x0, 0x0, 0x200400000}], 0x0) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0xffff7ffc, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0x6, 0x4) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_clone(0x241c4000, 0x0, 0x0, &(0x7f0000001080), 0x0, &(0x7f0000001100)) 7m1.27129739s ago: executing program 39 (id=1610): eventfd(0x2) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0xf241f1a146326c4, 0x2, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x400b000, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$inet6_udp(0xa, 0x2, 0x0) capset(&(0x7f0000000040)={0x19980330}, 0x0) msgget$private(0x0, 0x790) r3 = socket$rxrpc(0x21, 0x2, 0x2) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x4e22, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x40}, {0xffffffffffffffff, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x1}, {{@in6=@mcast2, 0x404d3, 0x2b}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}}, 0xe8) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e21, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @empty}, 0xc6e}, 0x1c) close(r5) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r6, 0x0, 0x0) setsockopt$sock_int(r3, 0x1, 0x20, &(0x7f0000000000)=0x1e, 0x4) 3m50.775204048s ago: executing program 40 (id=2394): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@updpolicy={0x13c, 0x19, 0x1, 0x70bd2b, 0x10000, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x2, 0x0, 0xa, 0x20}, {0x8, 0x10, 0x100000002, 0x0, 0xffe, 0xffffffffffffb473, 0xffffffffffffffff, 0x3}, {0x1000000000, 0x2000000000000000, 0x2, 0xffffffffffffffff}, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x84, 0x5, [{{@in6=@local, 0x4d3, 0x32}, 0xa, @in6=@empty, 0x3502, 0x4, 0x0, 0x7, 0xfff, 0x8, 0x7f}, {{@in=@rand_addr=0x64010101, 0x4d5, 0xff}, 0xa, @in=@multicast1, 0x3500, 0x0, 0x2, 0xa7, 0x4, 0x100, 0x3}]}]}, 0x13c}}, 0x4004) 3m44.479580492s ago: executing program 41 (id=2436): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1f, 0x13, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000400000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000d0000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000f8ff"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x7, 0x1, 0xfffe}) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0xffffffffffffffe8, 0x65, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x10ffd, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10108c0, &(0x7f0000000140)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES32, @ANYRES64, @ANYRESHEX, @ANYRESHEX], 0x1, 0x26c, &(0x7f0000000340)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x4040, 0x0) syz_open_dev$vcsa(&(0x7f0000000000), 0xbf, 0x42) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a310000000028000480080002400000000008000140000000051400030076657468315f6d6163767461700000000900010073797a310000000058000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000200004801400030076657468315f6d61637674617000000008000140000000050a0007"], 0xf4}}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x2b, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1202, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r1, 0x0, 0x3ffff) 3m18.262506112s ago: executing program 42 (id=2513): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net/syz1\x00', 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={r1, r0, 0x16, 0x0, @val=@iter={0x0}}, 0x20) r2 = openat$cgroup_procs(r0, &(0x7f0000000500)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000001c0), 0x9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x46, &(0x7f0000000580)=0x47, 0x4) 3m16.336516626s ago: executing program 43 (id=2800): r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)=ANY=[@ANYBLOB="00020208c903c60a4ab6a5188400050000"], 0x18) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) bind$inet6(r1, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x6) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, 0x0) socket(0x400000000010, 0x3, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x4, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd09, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xfffa, 0x7}, {}, {0x1c, 0xa}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x800}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x84}, @TCA_FLOWER_KEY_SCTP_SRC={0x6}]}}]}, 0x4c}}, 0x24004000) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m14.388043121s ago: executing program 44 (id=2815): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8080, &(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRESHEX=0x0], 0x3, 0x232, &(0x7f00000002c0)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.idle_time\x00', 0x275a, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) 3m12.034560164s ago: executing program 45 (id=2666): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000640), 0x15) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000036c0)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={r2, r0, 0x15, 0x0, @void}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r3, 0x4) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r4, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0}, &(0x7f0000000000)=0x40) 3m8.595229413s ago: executing program 46 (id=2723): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r2, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0}, 0x50) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) 2m57.644082874s ago: executing program 7 (id=3195): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) connect$netlink(r0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@random="5b685c7e778f", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x18, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x1}}}}}}}, 0x0) 2m57.600962845s ago: executing program 7 (id=3198): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000000)="fd", 0x1}], 0x1}, 0x881) 2m57.535052967s ago: executing program 7 (id=3202): socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x30, r2, 0x1, 0x70bd25, 0x3, {0x7}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}, @L2TP_ATTR_IFNAME={0x14}]}, 0x30}, 0x1, 0x0, 0x0, 0x14}, 0x2400c046) 2m57.483679388s ago: executing program 7 (id=3204): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES64, @ANYRES64], 0x1, 0x2c3, &(0x7f0000000180)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0xf5) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 2m57.3698747s ago: executing program 7 (id=3208): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @local, 0x2}, 0x1c) connect$netlink(r0, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000180)={@random="5b685c7e778f", @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x18, 0x11, 0x0, @local, @mcast2, {[], {0x4e1d, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x1}}}}}}}, 0x0) 2m57.060670497s ago: executing program 7 (id=3217): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15864}]}}]}, 0x44}}, 0x4000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0002"], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 2m56.213294687s ago: executing program 47 (id=3217): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x15864}]}}]}, 0x44}}, 0x4000) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0002"], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 2m54.177353673s ago: executing program 3 (id=3259): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000280)='./file0\x00', 0x180c8, &(0x7f0000000580)=ANY=[], 0x1, 0x242, &(0x7f0000000300)="$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") mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) 2m54.107930185s ago: executing program 3 (id=3262): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = openat(0xffffffffffffff9c, 0x0, 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r2, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)='p', 0x8200, 0x600}]) 2m53.149536767s ago: executing program 3 (id=3279): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x840) write$nci(0xffffffffffffffff, &(0x7f0000000400)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x1, 0x3, 0x5, 0x42, @b={0x8, 0x3, 0x4, 0x1, 0x7, 0x3, 0xe, {}, 0x40, 0x27, 0x6, 0x4, 0x35, "e87ed25eeb090e496fbae83f2d6854e174ae666b2280d5556b6d7561a1c816511f63eba71ab12dfa5e2ddc9f8f617f2d2366d7e505"}}, 0x45) 2m52.965513011s ago: executing program 3 (id=3284): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES64, @ANYRES64], 0x1, 0x2c3, &(0x7f0000000180)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0xf5) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(0x0, 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980)=[{&(0x7f0000001200)=""/4096, 0xffffffa4}], 0x1, 0x8000, 0x9, 0x1b) 2m52.784041805s ago: executing program 3 (id=3286): bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[], 0x50) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) epoll_pwait2(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={[0x9a]}, 0x8) 2m52.528261331s ago: executing program 3 (id=3292): socket(0x11, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="08000500", @ANYRES64=r0], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 2m52.528174451s ago: executing program 48 (id=3292): socket(0x11, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB="8c0000001000030400"/20, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="08000500", @ANYRES64=r0], 0x8c}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 2m47.693964682s ago: executing program 6 (id=3360): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x808000, 0x4, 0x20300, 0xfc}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x10007b, 0x4) 2m47.432017288s ago: executing program 6 (id=3366): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, 0x0, 0x881) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x10}, 0xc) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0xffffff95, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf) 2m47.091725826s ago: executing program 6 (id=3368): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x80000000, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_clone(0x1144280, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) shmat(0x0, &(0x7f0000ffa000/0x4000)=nil, 0x6000) 2m46.792632512s ago: executing program 6 (id=3372): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES64, @ANYRES64], 0x1, 0x2c3, &(0x7f0000000180)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0xf5) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980), 0x0, 0x8000, 0x9, 0x1b) 2m46.601679297s ago: executing program 6 (id=3373): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0xffff, @loopback}, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x28, r3, 0x1, 0x70bd25, 0x3, {0x7}, [@L2TP_ATTR_IFNAME={0x14}]}, 0x28}, 0x1, 0x0, 0x0, 0x14}, 0x2400c046) 2m46.601415037s ago: executing program 1 (id=3374): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, 0x0, 0x0) unshare(0x28000600) r1 = inotify_init() cachestat(r1, 0x0, 0x0, 0x0) 2m46.435975241s ago: executing program 1 (id=3377): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000980)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xe, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x1, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x800, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x209, 0x3ff, 0x2, 0x6, 0x42, 0xfffc, 0x83, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2b, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x12, 0x6, 0x2, 0x8, 0x2, 0xc, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0xaa, 0x81, 0x2, 0x2, 0x42, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2m46.311513763s ago: executing program 6 (id=3380): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) fremovexattr(r0, &(0x7f0000000140)=@known='system.sockprotoname\x00') ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) 2m46.305422733s ago: executing program 1 (id=3381): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x1, 0x0, 0x7ffc1ffb}]}) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) set_mempolicy(0x3, 0x0, 0x4) fchdir(0xffffffffffffffff) 2m46.248923445s ago: executing program 1 (id=3383): syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000140)='./bus\x00', 0x2000014, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f6e756d7461696c2c6e66732c73686f72746e616d653d6c6f7765722c757466383d312c64656275672c696f636861727365743d757466382c73686f72746e616d653d6d697865642c757466383d312c004845160000000000", @ANYRESOCT=0x0, @ANYRESOCT, @ANYRESDEC, @ANYRES64, @ANYRES64], 0x1, 0x2c3, &(0x7f0000000180)="$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") creat(&(0x7f00000004c0)='./bus\x00', 0xf5) mount(&(0x7f0000000480)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x801400, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x4600, 0xe898d2275f586838) preadv2(r0, &(0x7f0000000980)=[{0x0}], 0x1, 0x8000, 0x9, 0x1b) 2m46.206202796s ago: executing program 49 (id=3380): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) fremovexattr(r0, &(0x7f0000000140)=@known='system.sockprotoname\x00') ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) 2m45.932930032s ago: executing program 1 (id=3389): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000001240)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000002480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x1cb842, 0x0) io_setup(0x20fe, &(0x7f0000000540)=0x0) io_submit(r2, 0x3, &(0x7f0000002680)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000200)='p', 0x8200, 0x600}]) quotactl$Q_SETQUOTA(0xffffffff80000801, 0x0, 0x0, 0x0) 2m44.921052096s ago: executing program 1 (id=3404): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {0x0, 0x1, 0xffffffffffffffff, 0x1c, 0x1, @in={0x2, 0x4e23, @remote}}}, 0xa0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000600), 0x2, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x13f}}, 0x20) writev(r0, &(0x7f00000000c0), 0x0) 2m44.852601407s ago: executing program 50 (id=3404): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f0000000080)={0x16, 0x98, 0xfa00, {0x0, 0x1, 0xffffffffffffffff, 0x1c, 0x1, @in={0x2, 0x4e23, @remote}}}, 0xa0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000640)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000600), 0x2, 0x2}}, 0x20) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080), 0x13f}}, 0x20) writev(r0, &(0x7f00000000c0), 0x0) 33.133227812s ago: executing program 8 (id=6547): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) recvmsg$unix(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 33.114178122s ago: executing program 8 (id=6548): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x3e, &(0x7f0000000200)=r0, 0x4) sendmsg$inet(r1, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @rand_addr=0x20}, 0x10, 0x0}, 0x0) 33.095655983s ago: executing program 8 (id=6549): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0xe0b, 0x70bd26, 0x25dfdbfe, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xfff3, 0xa}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0xac}, @TCA_CAKE_INGRESS={0x8, 0xf, 0x1}]}}]}, 0x44}}, 0x40440c0) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @random="d6a365dd00ca"}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0x123, 0x880, 0x0, 0x0) 33.045419654s ago: executing program 8 (id=6550): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a80)=ANY=[@ANYBLOB="200000001300010127bd7000facbdf250a0000000000000015d117efb68d6f00"], 0x20}}, 0x0) r1 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x56, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0x9}, {0x10000002, 0x0, 0x0, 0xc}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) recvmsg$unix(r2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x64, &(0x7f0000000000)=r4, 0x10) sendmsg$inet(r1, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x10, @local}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001940)='{', 0x1a000}], 0x1}, 0x80d1) 33.044681084s ago: executing program 8 (id=6551): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="0100"}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) 32.984061615s ago: executing program 8 (id=6554): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x1a}, 0x1, 0x0, 0x0, 0x4}, 0x40008040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYRES32=r4], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r9 = getpid() write$cgroup_pid(r8, &(0x7f0000000080)=r9, 0x12) socket$key(0xf, 0x3, 0x2) r10 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r10, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r11 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r11, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b80000001900010000000000fcdbdf25006e0400000000000000000000000000ac1e00010000000000000000000000004e2100004e24fffc02"], 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$key(0xf, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) 17.811820583s ago: executing program 51 (id=6554): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_TTY(r1, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x1a}, 0x1, 0x0, 0x0, 0x4}, 0x40008040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = perf_event_open(0x0, 0x0, 0x2, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32, @ANYRES32=r4], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) recvmsg$unix(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) r9 = getpid() write$cgroup_pid(r8, &(0x7f0000000080)=r9, 0x12) socket$key(0xf, 0x3, 0x2) r10 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r10, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b070102000000e4a17c455b3a89e0", 0x10}], 0x1}, 0x0) r11 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r11, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="b80000001900010000000000fcdbdf25006e0400000000000000000000000000ac1e00010000000000000000000000004e2100004e24fffc02"], 0xb8}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$key(0xf, 0x3, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) 2.507531963s ago: executing program 5 (id=7312): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x16, 0xf, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.411836845s ago: executing program 5 (id=7315): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) 1.984900545s ago: executing program 5 (id=7322): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.946944566s ago: executing program 5 (id=7323): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x0, {}, 0x1}, 0x18) connect$can_j1939(r0, &(0x7f0000000100)={0x1d, r1, 0x0, {0x1, 0xf0}}, 0x18) sendmmsg(r0, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000340)}], 0x1}}], 0x1, 0xf5) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$can_j1939(r2, &(0x7f00000000c0)={0x1d, r3}, 0x18) connect$can_j1939(r2, &(0x7f0000000140)={0x1d, r3, 0x0, {0x1, 0xff, 0xa8fe8ad4eea2351f}}, 0x18) sendmmsg(r2, &(0x7f0000004300)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000340)="462ebbe6d9073d6fa3", 0x9}], 0x1}}], 0x1, 0xf5) 1.79227871s ago: executing program 4 (id=7325): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x202200, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0xe, 0x0, 0x7, 0x4, 0x0, 0xfffffffffffffffc}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) 1.681878372s ago: executing program 0 (id=7330): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000bf00000000000000000085000000200000008500000005000000"], &(0x7f0000000080)='GPL\x00', 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000780)="9b6f5bff000000de500cf0ad4f31", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.626067923s ago: executing program 0 (id=7331): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x5, 0xc, 0x42, 0x40, 0xc0, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100), &(0x7f00000001c0), 0x10f0, r0}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000004c0)={r0, &(0x7f0000000380), 0x0}, 0x20) 1.575270634s ago: executing program 0 (id=7332): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2800000, &(0x7f00000003c0)={[{@journal_dev={'journal_dev', 0x3d, 0x8002}}, {@delalloc}, {@bsdgroups}, {@discard}, {@test_dummy_encryption_v1}, {@dioread_nolock}, {@jqfmt_vfsv0}, {@jqfmt_vfsold}]}, 0x1, 0xbda, &(0x7f00000016c0)="$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") 1.575078324s ago: executing program 4 (id=7333): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000030408bd78000000000000000000", @ANYRES32=0x0, @ANYBLOB="46060900000000002800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r5], 0x50}, 0x1, 0x0, 0x0, 0x600}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010000104000000000000000000000400", @ANYRES32=0x0, @ANYBLOB="00000000183e00001400350065727370616e3000000000000000000008000a00", @ANYRES32=r8], 0x3c}, 0x1, 0x0, 0x0, 0x70}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x5, 0x10, 0x4}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x24004844}, 0x0) 1.452095318s ago: executing program 0 (id=7335): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.439811867s ago: executing program 0 (id=7336): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x4, 0x7fffffffffffffff, 0x0, 0x1000, 0xc, 0x215}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xb}, {0x4, 0xffe0}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0xffffb23c}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240408a0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) 1.425065338s ago: executing program 2 (id=7337): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x210000, &(0x7f0000001280)={[{@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x3}}, {@jqfmt_vfsv1}, {@abort}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x8}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x7}}, {@bh}, {@auto_da_alloc}]}, 0x1, 0x58a, &(0x7f0000000a00)="$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") r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000000)={0x7, 0xd, 0x0, 0xffdffffc, 0x6, "00001000"}) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) ioctl$TCSETS(r0, 0x5402, 0x0) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) read$watch_queue(r2, 0x0, 0x0) 1.34396227s ago: executing program 9 (id=7339): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x2, 0x2, {@ip4=@remote}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x40080c0) write$UHID_CREATE(r0, &(0x7f0000000540)={0x0, {'syz1\x00', 'syz0\x00', 'syz1\x00', &(0x7f0000000240)=""/17, 0x11, 0x6, 0x8, 0x1, 0x4, 0xc08}}, 0xfffffdf0) write$UHID_DESTROY(r0, &(0x7f0000000180), 0x4) 1.305621731s ago: executing program 2 (id=7340): r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4ea3, 0x0, @loopback, 0x3}, 0x1c) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000019200)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x180, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x408, 0xffffffff, 0xffffffff, 0x408, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@loopback, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x158, 0x180, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@iprange={{0x68}, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @ipv4=@multicast2, @ipv6=@loopback, @ipv6=@empty}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x538) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x953a, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0xff8a}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.254832322s ago: executing program 4 (id=7341): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xe, 0x0, &(0x7f0000000240)="ff410800b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) 1.125029145s ago: executing program 4 (id=7342): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) dup3(r0, 0xffffffffffffffff, 0x80000) syz_usb_connect$uac2(0x3, 0x8c, 0x0, 0x0) 1.088150716s ago: executing program 0 (id=7343): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x10, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x1, &(0x7f0000000240)=0x7) epoll_ctl$EPOLL_CTL_DEL(0xffffffffffffffff, 0x2, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010700000000000000000a000000488b6de1427ac6f3beaf1ba39cb3c2206be9794fa078d2424fdbdd5d35fdfa6c85e2b7000000"], 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_clone(0x100111, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3}, 0x50) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r8}, 0xc) bpf$LINK_DETACH(0x22, &(0x7f0000000300)=r6, 0x4) 1.040319647s ago: executing program 9 (id=7344): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x80) ioctl$MON_IOCG_STATS(r0, 0x80089203, 0x0) 1.040182077s ago: executing program 9 (id=7345): socket$kcm(0xa, 0x1, 0x106) r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x258, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1.025662087s ago: executing program 9 (id=7346): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="180000000200000000"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd630080fc00082c00db5b6861589bcfe8875a060300000023000000000000000000000000ac1414aa33"], 0xfdef) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 970.091229ms ago: executing program 9 (id=7347): mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x1d, 0xffffffffffffffff, &(0x7f00000000c0)) 871.116771ms ago: executing program 9 (id=7348): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000000}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xb, 0xc, &(0x7f0000000540)=ANY=[@ANYRES8=r0, @ANYRESDEC=r3], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0x0, 0x0, 0x0, 0x8, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x8e}}, &(0x7f0000000480)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r6, 0x40042408, r5) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 870.947771ms ago: executing program 2 (id=7349): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x101c08a, &(0x7f0000001140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC], 0x6, 0x2c1, &(0x7f0000001880)="$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") munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) getdents(r0, 0x0, 0x1517f) 754.762393ms ago: executing program 2 (id=7350): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff5656d, 0x70bd29, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0x8}, {0x1, 0xb}, {0xffff, 0x3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x4, 0x10, 0x8, 0x8, 0xfbee}, 0x3929c00, 0x0, 0x5, 0x5, 0xe, 0x4, 0xd, 0x18, 0x5, 0x4, {0x6, 0xc, 0xfffffffc, 0x0, 0xffffffff, 0x5}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x240048e4}, 0x44890) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r6, 0x107, 0xf, &(0x7f00000001c0), 0x39) sendmsg$kcm(r6, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e105", 0x13}], 0x1}, 0x0) 585.025657ms ago: executing program 5 (id=7351): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000800)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x10040, &(0x7f0000000580)={[{@shortname_lower}, {@utf8no}, {@shortname_win95}, {@fat=@debug}, {@utf8}, {@utf8no}, {@shortname_win95}, {@shortname_win95}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}, {@fat=@codepage={'codepage', 0x3d, '874'}}, {@shortname_lower}, {@numtail}, {@shortname_mixed}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@fat=@umask={'umask', 0x3d, 0x9}}, {@uni_xlate}]}, 0x1c, 0x350, &(0x7f0000000900)="$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") 436.31861ms ago: executing program 4 (id=7352): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41100, 0x50, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x2a542, 0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000), 0x10, 0x3}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x242900, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22fff6) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1802"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNGETVNETLE(r0, 0x4010744d, &(0x7f0000000180)) 323.874253ms ago: executing program 2 (id=7353): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000f000000850000007a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$kcm(0x11, 0xa, 0x300) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x1f4, 0xe, 0x0, &(0x7f0000000240)="ff410800b083dcc1010b3efc8864", 0x0, 0x300, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0x4}, 0x50) 45.352219ms ago: executing program 5 (id=7354): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081c, &(0x7f0000000080)={[{@i_version}, {@nogrpid}, {@bh}]}, 0x1, 0x51d, &(0x7f0000000200)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x103a42, 0x32) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0x8, 0x8, 0x101, 0x5, 0x9}) copy_file_range(r0, 0x0, r0, 0x0, 0xfffffffffffffff7, 0x0) 137.6µs ago: executing program 4 (id=7355): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000200)={[{@dioread_nolock}, {@oldalloc}, {@barrier_val={'barrier', 0x3d, 0x9}}]}, 0xff, 0x4cc, &(0x7f0000000e00)="$eJzs3U1oHNcdAPD/7FqyJKv1R0uxXagNLrgfWKsPiqW2l57cHkxLDb204KrSWna10grtyrWED3J786GH0tJC6aH3nnrspT7FBELOyT3kEBwSR4EkENgws7uyLGnlRZG1RvP7wUjz5u3O/z0t/8fMG81OALl1Mf2RRAxHxJsRcbJZfP4FF5u/Np7en0mXJBqNGx8k2evScvul7fediIj1iBiIiF9ei/hdsjNubXVtfrpSKS+3yqX6wlKptrp25c7C9Fx5rrw4Nnl1ampydGJ86sD6+vDPv394/X8/6//PJ3968vgvr/0/bdZwq25rPw5Ss+t9cXrLtmMR8eOXEawHiq3+DPa6IexL+vl9LSIuZfl/MorZpwnkQaPRaHzeON6per0BHFmF7Bg4KYxERHO9UBgZaR7Dfz2GCpVqrf79W9WVxdnmsfKp6CvculMpj7bOFU5FX5KWx7L1Z+XxbeWJiOwY+K/Fwaw8MlOtzB7uUAdsc6KV/4Ot/P+42Mx/ICd2P+XveFIAHCGm/CC/5D/kl/yH/JL/kF/yH/JL/kN+yX/IL/kP+SX/Ib/kP+TSL65fT5dG+/732burK/PVu1dmy7X5kYWVmZGZ6vLSyFy1Opfds7Pwov1VqtWlsR/Eyr1SvVyrl2qrazcXqiuL9ZvZff03y32H0iugG6cvPHo7iYj1Hw5mS6q/VSdX4WhrNJLo9T3IQG8Uez0AAT2zv6k/ZwZwFMhkYJev6H3OQKeKpf1GPLXfNwIHpNDrBgA9c/mc63+QV+b/Ib9edN4PHF2O8YHDn/8Hes38P+TXcIfnf31ly7O7RiPiqxHxVrHvePtZX8BRUHgviSikx/+XT357eHttf/JpdomgPyL+8M8bf783Xa8vj6XbP9zcXv9Ha/t4L9oPdKudp+08BgDya+Pp/Zn2cphx3/9J8ybEnfGPteYmB7JrlEMbyXP3KiYH9LVl6w8i4uxu8ZPW886bVz6GNoo74p9p/U6au8jaeyx7bvrhxD+3Jf63tsQ//6X/KpAPj9LxZ3S3/CtkOR2b+Zfcvvvfn2++b/iA/nei8/hX2Bz/ih3Gvwtdxrj9rz++2zH+g4jzu8ZvxxvIYm2Pn7btcnfhkye/+dU3OlU2/t3cz27xN3cQEaX6wlKptrp2Jfseubny4tjk1ampydGJ8alSNkddas9U7/Sjs2883qv/Q8/iD0ZEV/1Pt323u/7HZ998/dcX94j/nUu7f/5n9oifNvR7Xcb/aPyd33aqS+PPdvj7F/aIn26b6DJ+7W8/9SxxAHiF1FbX5qcrlfKyFSu9Xrl67ZVohpV0pdcjE/CyPUv6XrcEAAAAAAAAAAAA6NZh/Dtxr/sIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHAUfBEAAP//9PDVGQ==") openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x42, 0x4f) 0s ago: executing program 2 (id=7356): r0 = syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50a, &(0x7f0000001f40)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) fdatasync(r1) ioctl$XFS_IOC_GOINGDOWN(r1, 0x8004587d, &(0x7f0000000100)=0x1) sendfile(r0, r1, &(0x7f0000000280)=0x6, 0xffff) kernel console output (not intermixed with test programs): 400 audit(757.047:2715): avc: denied { write } for pid=18069 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 757.134737][ T28] audit: type=1400 audit(757.107:2716): avc: denied { write } for pid=18092 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 757.189409][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16 [ 757.235404][T17778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 757.284046][T17778] 8021q: adding VLAN 0 to HW filter on device team0 [ 757.341735][ T28] audit: type=1400 audit(757.317:2717): avc: denied { write } for pid=18100 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 757.372804][T13467] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.380025][T13467] bridge0: port 1(bridge_slave_0) entered forwarding state [ 757.397343][T13509] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.404518][T13509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.426802][ T28] audit: type=1400 audit(757.397:2718): avc: denied { write } for pid=18117 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 757.466804][ T3020] 8021q: adding VLAN 0 to HW filter on device eth17 [ 757.628607][T17892] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 757.656053][T17892] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 757.676020][T17892] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 757.696104][T17892] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 757.715034][T17892] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 757.729008][T17892] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 757.740398][T17892] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 757.752199][ T28] audit: type=1400 audit(757.717:2719): avc: denied { write } for pid=18128 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 757.781728][T17892] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 757.855901][ T28] audit: type=1400 audit(757.827:2720): avc: denied { write } for pid=18159 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 757.925573][ T3020] 8021q: adding VLAN 0 to HW filter on device eth18 [ 757.989850][T17892] 8021q: adding VLAN 0 to HW filter on device bond0 [ 758.022115][T17892] 8021q: adding VLAN 0 to HW filter on device team0 [ 758.047172][ T4890] bridge0: port 1(bridge_slave_0) entered blocking state [ 758.054346][ T4890] bridge0: port 1(bridge_slave_0) entered forwarding state [ 758.075334][ T3964] bridge0: port 2(bridge_slave_1) entered blocking state [ 758.082559][ T3964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 758.103421][T17778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.122460][T17892] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 758.138389][T17892] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 758.213775][ T28] audit: type=1400 audit(758.187:2721): avc: denied { write } for pid=18181 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 758.289619][ T28] audit: type=1400 audit(758.257:2722): avc: denied { write } for pid=18210 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 758.362160][ T3020] 8021q: adding VLAN 0 to HW filter on device eth19 [ 758.444339][T17892] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 758.513724][T17778] veth0_vlan: entered promiscuous mode [ 758.538084][T17778] veth1_vlan: entered promiscuous mode [ 758.602871][T17778] veth0_macvtap: entered promiscuous mode [ 758.611069][T18230] loop0: detected capacity change from 0 to 8192 [ 758.619915][ T28] audit: type=1400 audit(758.587:2723): avc: denied { write } for pid=18231 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 758.628754][T17778] veth1_macvtap: entered promiscuous mode [ 758.764564][T17778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 758.794947][T17778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 758.826851][ T3020] 8021q: adding VLAN 0 to HW filter on device eth20 [ 758.847473][ T315] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.869607][ T315] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.892639][ T315] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.913873][ T315] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.005419][T17892] veth0_vlan: entered promiscuous mode [ 759.031040][T17892] veth1_vlan: entered promiscuous mode [ 759.067240][T18285] loop5: detected capacity change from 0 to 256 [ 759.094902][T17892] veth0_macvtap: entered promiscuous mode [ 759.109578][T17892] veth1_macvtap: entered promiscuous mode [ 759.118707][T18285] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 759.165079][T17892] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 759.181051][T18285] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 759.199565][T17892] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 759.241996][ T315] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.273964][T13509] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.305578][T13509] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.322353][T13509] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 759.797713][T18343] syzkaller0: entered promiscuous mode [ 759.812734][T18343] syzkaller0: entered allmulticast mode [ 759.841769][T18353] loop9: detected capacity change from 0 to 8192 [ 760.257390][T18394] loop0: detected capacity change from 0 to 8192 [ 761.205791][T18454] loop5: detected capacity change from 0 to 8192 [ 761.981665][T18491] loop4: detected capacity change from 0 to 8192 [ 762.761737][T18534] loop9: detected capacity change from 0 to 256 [ 762.770090][T18534] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 762.799602][T18534] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 762.955788][T18552] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3551'. [ 762.968794][T18552] bond0: (slave bond_slave_1): Releasing backup interface [ 763.125468][T18564] loop9: detected capacity change from 0 to 256 [ 763.135128][T18564] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 763.161083][T18564] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 763.174012][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 763.174030][ T28] audit: type=1400 audit(763.147:2762): avc: denied { unmount } for pid=18565 comm="syz.8.3557" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 764.507323][T18627] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3580'. [ 766.502833][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 766.665742][T18756] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3631'. [ 767.534669][ T28] audit: type=1400 audit(767.507:2763): avc: denied { create } for pid=18832 comm="syz.0.3660" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 767.559798][ T28] audit: type=1400 audit(767.527:2764): avc: denied { sys_admin } for pid=18832 comm="syz.0.3660" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 768.324686][T18908] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3694'. [ 768.410464][T18920] bridge_slave_0: invalid flags given to default FDB implementation [ 770.496858][T18944] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3707'. [ 771.727317][T18960] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3711'. [ 771.825490][ T28] audit: type=1400 audit(771.797:2765): avc: denied { write } for pid=18946 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 771.898353][ T28] audit: type=1400 audit(771.867:2766): avc: denied { write } for pid=18987 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 771.943967][T18994] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3722'. [ 771.968173][T18986] loop4: detected capacity change from 0 to 8192 [ 772.089641][ T28] audit: type=1400 audit(772.057:2767): avc: denied { write } for pid=18996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 772.165138][ T28] audit: type=1400 audit(772.127:2768): avc: denied { write } for pid=19013 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 772.370915][ T28] audit: type=1400 audit(772.347:2769): avc: denied { write } for pid=19017 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 772.434798][ T28] audit: type=1400 audit(772.407:2770): avc: denied { write } for pid=19028 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 772.633467][ T28] audit: type=1400 audit(772.607:2771): avc: denied { write } for pid=19031 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 772.699657][ T28] audit: type=1400 audit(772.647:2772): avc: denied { write } for pid=19048 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 772.840625][ T28] audit: type=1400 audit(772.807:2773): avc: denied { write } for pid=19053 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 772.919535][ T28] audit: type=1400 audit(772.857:2774): avc: denied { write } for pid=19073 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 773.191701][T19115] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 773.479298][T19168] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 773.494590][T19172] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3755'. [ 773.929515][T19239] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 773.929515][T19239] The task syz.5.3763 (19239) triggered the difference, watch for misbehavior. [ 774.054728][T19255] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3768'. [ 774.406267][T19312] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 774.506955][T19328] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3783'. [ 774.639333][T19355] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 774.816709][T19390] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3797'. [ 774.924830][T19408] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3806'. [ 775.001806][T19416] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3809'. [ 775.011750][T19416] netlink: 24 bytes leftover after parsing attributes in process `syz.9.3809'. [ 775.160961][T19438] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3821'. [ 775.626930][T19480] netlink: 12 bytes leftover after parsing attributes in process `syz.9.3835'. [ 775.812884][T19499] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3844'. [ 776.420111][T19587] loop4: detected capacity change from 0 to 8192 [ 776.914515][T19649] syzkaller0: entered promiscuous mode [ 776.926701][T19649] syzkaller0: entered allmulticast mode [ 778.661701][ T23] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65380 sclass=netlink_route_socket pid=23 comm=kworker/1:0 [ 778.829586][T19771] __nla_validate_parse: 17 callbacks suppressed [ 778.829621][T19771] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3962'. [ 778.845942][T19771] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3962'. [ 779.068791][T19788] syzkaller0: entered promiscuous mode [ 779.074544][T19788] syzkaller0: entered allmulticast mode [ 779.275499][T19816] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3979'. [ 779.666362][T19827] syzkaller0: entered promiscuous mode [ 779.672189][T19827] syzkaller0: entered allmulticast mode [ 779.778484][T19839] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3989'. [ 779.789094][T19839] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3989'. [ 779.833033][T19845] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3991'. [ 781.922587][T19958] syzkaller0: entered promiscuous mode [ 781.928244][T19958] syzkaller0: entered allmulticast mode [ 782.917556][T19989] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4053'. [ 783.308670][T19900] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 783.958014][T20022] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4066'. [ 784.245617][T20036] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4072'. [ 784.372936][T20050] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4079'. [ 784.435329][T20059] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4083'. [ 784.549050][T20068] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4087'. [ 784.699977][T20076] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4091'. [ 784.778167][T20089] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4096'. [ 784.788009][T20089] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4096'. [ 784.853331][T20099] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4099'. [ 784.863641][T20101] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4100'. [ 785.016822][T20093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 785.026894][T20093] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 785.264631][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 785.264656][ T28] audit: type=1400 audit(785.237:2799): avc: denied { write } for pid=20135 comm="syz.9.4114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 785.453286][T20140] syzkaller0: entered promiscuous mode [ 785.458930][T20140] syzkaller0: entered allmulticast mode [ 785.837176][T20163] syzkaller0: entered promiscuous mode [ 785.846170][T20163] syzkaller0: entered allmulticast mode [ 788.307806][T20368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.316372][T20368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.526584][T20368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 788.535767][T20368] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 788.999173][T20400] __nla_validate_parse: 21 callbacks suppressed [ 788.999187][T20400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4229'. [ 789.015095][T20400] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4229'. [ 789.930505][T20280] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 789.972104][T20422] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4237'. [ 790.590801][T20458] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4252'. [ 790.601682][ T28] audit: type=1400 audit(790.577:2800): avc: denied { getopt } for pid=20461 comm="syz.8.4255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 790.679381][ T28] audit: type=1326 audit(790.647:2801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20469 comm="syz.0.4259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f341ea9de59 code=0x0 [ 790.680098][T20474] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.713530][T20474] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.709995][T20506] 9pnet: p9_errstr2errno: server reported unknown error 0x0000 [ 792.097864][T20518] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4280'. [ 793.099663][T20442] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 793.150159][T20545] tmpfs: Unknown parameter 'usrquota' [ 793.169658][T20549] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4291'. [ 793.404844][T20575] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4302'. [ 793.477380][T20583] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4305'. [ 793.631279][T20600] netlink: 40 bytes leftover after parsing attributes in process `syz.8.4313'. [ 794.043887][T20606] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4316'. [ 794.360043][T20633] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4327'. [ 794.919512][T20641] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4330'. [ 795.056229][ T28] audit: type=1400 audit(795.027:2802): avc: denied { accept } for pid=20654 comm="syz.4.4336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 795.075798][ T28] audit: type=1400 audit(795.047:2803): avc: denied { read } for pid=20654 comm="syz.4.4336" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 795.278236][T20668] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4342'. [ 796.248767][T20697] netlink: 16 bytes leftover after parsing attributes in process `syz.5.4354'. [ 796.319155][T20699] syzkaller1: entered promiscuous mode [ 796.324888][T20699] syzkaller1: entered allmulticast mode [ 796.819418][T20713] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4362'. [ 796.869614][T20719] netlink: 16 bytes leftover after parsing attributes in process `syz.4.4365'. [ 796.987452][ T28] audit: type=1326 audit(796.957:2804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20732 comm="syz.4.4372" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb14843de59 code=0x0 [ 797.211281][T20746] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4377'. [ 797.870142][T20774] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4389'. [ 797.932384][T20784] 9p: Bad value for 'wfdno' [ 797.961871][ T28] audit: type=1326 audit(797.927:2805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20787 comm="syz.4.4397" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb14843de59 code=0x0 [ 798.310885][T20821] batadv0: entered allmulticast mode [ 798.411708][T20838] vcan0: tx drop: invalid da for name 0x00000000000000f5 [ 798.455951][ T28] audit: type=1400 audit(798.427:2806): avc: denied { ioctl } for pid=20844 comm="syz.0.4426" path="socket:[60966]" dev="sockfs" ino=60966 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 798.736982][T20877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 798.755894][T20877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 798.844702][ T28] audit: type=1400 audit(798.817:2807): avc: denied { ioctl } for pid=20882 comm="syz.4.4441" path="socket:[61016]" dev="sockfs" ino=61016 ioctlcmd=0x8931 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 798.973408][T20894] 9p: Bad value for 'rfdno' [ 799.021569][ T28] audit: type=1326 audit(798.997:2808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20901 comm="syz.8.4450" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f441dffde59 code=0x0 [ 799.324291][T20910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 799.333144][T20910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 799.500663][T20926] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4461'. [ 799.678329][ T28] audit: type=1400 audit(799.647:2809): avc: denied { mounton } for pid=20935 comm="syz.9.4466" path="/312/file0" dev="tmpfs" ino=1610 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 799.861044][T20948] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4472'. [ 800.182559][T20975] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4485'. [ 800.216850][ T28] audit: type=1326 audit(800.187:2810): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20973 comm="syz.4.4486" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb14843de59 code=0x0 [ 800.693401][T21024] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 800.915984][ T28] audit: type=1400 audit(800.887:2811): avc: denied { ioctl } for pid=21043 comm="syz.8.4516" path="socket:[62247]" dev="sockfs" ino=62247 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 800.965945][T21048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 800.975613][T21048] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.028732][T21056] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.037591][T21056] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.109927][T21058] 9pnet: p9_errstr2errno: server reported unknown error 0x000 [ 801.602020][T21079] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 801.611632][T21079] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 801.652401][T21082] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4534'. [ 802.077010][T21104] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4545'. [ 802.357665][T21126] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4556'. [ 802.454743][T21140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.463905][T21140] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 802.490849][T21145] tmpfs: Unknown parameter 'usrquota' [ 802.558084][T21152] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4568'. [ 802.617079][T21158] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 802.625742][T21158] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.044940][T21174] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4579'. [ 803.119156][T21182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.127884][T21182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.258817][T21200] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4591'. [ 803.303142][T21206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 803.327504][T21206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 803.340843][T21212] 9p: Bad value for 'wfdno' [ 803.660662][T21236] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4608'. [ 803.758614][T21244] 9p: Bad value for 'rfdno' [ 803.759313][ T28] audit: type=1400 audit(803.727:2812): avc: denied { map } for pid=21245 comm="syz.8.4613" path="socket:[63569]" dev="sockfs" ino=63569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 803.786489][ T28] audit: type=1400 audit(803.727:2813): avc: denied { read } for pid=21245 comm="syz.8.4613" path="socket:[63569]" dev="sockfs" ino=63569 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 803.931447][ T28] audit: type=1326 audit(803.907:2814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21265 comm="syz.4.4623" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb14843de59 code=0x0 [ 803.982356][T21271] 9p: Bad value for 'rfdno' [ 804.023523][T21276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.032325][T21276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 804.341524][T21294] 9p: Bad value for 'rfdno' [ 804.377739][T21300] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 804.561594][T21302] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 804.570437][T21302] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.128688][ T28] audit: type=1326 audit(805.097:2815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21341 comm="syz.5.4654" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7af546de59 code=0x0 [ 805.270978][T21363] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4664'. [ 805.280202][T21363] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4664'. [ 806.436390][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811bb91800: rx timeout, send abort [ 806.444826][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811bb91800: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 806.459243][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811bbbb200: rx timeout, send abort [ 806.464475][ T28] audit: type=1400 audit(806.437:2816): avc: denied { read } for pid=2963 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 806.467773][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811bbbb200: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 806.491434][ T28] audit: type=1400 audit(806.437:2817): avc: denied { search } for pid=2963 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 806.526002][ T28] audit: type=1400 audit(806.457:2818): avc: denied { write search } for pid=2963 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 806.547786][ T28] audit: type=1400 audit(806.457:2819): avc: denied { add_name } for pid=2963 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 806.568227][ T28] audit: type=1400 audit(806.457:2820): avc: denied { create } for pid=2963 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 806.588953][ T28] audit: type=1400 audit(806.457:2821): avc: denied { append open } for pid=2963 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 806.853565][T21422] tmpfs: Bad value for 'mpol' [ 806.899416][T21429] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 807.134382][T21448] tmpfs: Bad value for 'mpol' [ 807.460199][T21472] tmpfs: Bad value for 'mpol' [ 808.071744][T21500] tmpfs: Bad value for 'mpol' [ 808.142077][T21508] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4729'. [ 808.168140][T21510] netlink: 'syz.8.4730': attribute type 1 has an invalid length. [ 808.176119][T21510] netlink: 16150 bytes leftover after parsing attributes in process `syz.8.4730'. [ 808.668873][T21386] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 808.919365][T21545] tmpfs: Bad value for 'mpol' [ 808.958865][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 808.958888][ T28] audit: type=1326 audit(808.927:2829): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21547 comm="syz.4.4747" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb14843de59 code=0x0 [ 809.189936][T21571] tmpfs: Bad value for 'mpol' [ 809.410955][T21598] tmpfs: Bad value for 'mpol' [ 809.493163][T21608] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4775'. [ 809.601413][T21624] tmpfs: Bad value for 'mpol' [ 809.621920][T21626] netlink: 'syz.9.4784': attribute type 10 has an invalid length. [ 809.629847][T21626] ipvlan1: entered allmulticast mode [ 809.635266][T21626] veth0_vlan: entered allmulticast mode [ 809.642778][T21626] team0: Device ipvlan1 failed to register rx_handler [ 809.677183][T21630] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4786'. [ 810.239214][T21685] netlink: 28 bytes leftover after parsing attributes in process `syz.9.4812'. [ 810.277989][T21690] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4814'. [ 810.287118][T21690] netlink: 60 bytes leftover after parsing attributes in process `syz.9.4814'. [ 810.422431][T21707] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4821'. [ 810.468516][T21714] netlink: 28 bytes leftover after parsing attributes in process `syz.8.4824'. [ 810.669691][ T28] audit: type=1400 audit(810.637:2830): avc: denied { map } for pid=21738 comm="syz.4.4836" path="/dev/usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 811.133346][T21758] Invalid ELF header magic: != ELF [ 811.138761][ T28] audit: type=1400 audit(811.107:2831): avc: denied { module_load } for pid=21757 comm="syz.5.4844" path="/260/bus" dev="tmpfs" ino=1349 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 811.341487][T21783] bridge0: entered promiscuous mode [ 811.347917][T21783] bridge0: entered allmulticast mode [ 811.442952][T21800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 811.452996][T21800] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 811.479245][ T28] audit: type=1400 audit(811.447:2832): avc: denied { bind } for pid=21802 comm="syz.8.4866" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 811.521229][ T28] audit: type=1400 audit(811.447:2833): avc: denied { name_bind } for pid=21802 comm="syz.8.4866" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 811.545091][ T28] audit: type=1400 audit(811.447:2834): avc: denied { node_bind } for pid=21802 comm="syz.8.4866" saddr=::ffff:10.1.1.2 src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 812.243895][T21855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.252585][T21855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.423566][T21877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 812.440120][T21877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 812.720166][T21892] sctp: [Deprecated]: syz.8.4908 (pid 21892) Use of int in max_burst socket option deprecated. [ 812.720166][T21892] Use struct sctp_assoc_value instead [ 812.826101][ T28] audit: type=1400 audit(812.797:2835): avc: denied { append } for pid=21903 comm="syz.4.4914" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 812.916694][T21915] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4919'. [ 813.077560][T21946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.086472][T21946] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.219982][T21970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.229202][T21970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.245983][T21966] 9pnet: p9_errstr2errno: server reported unknown error [ 813.680267][T22004] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.689589][T22004] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 813.952532][T22038] netlink: 'syz.5.4974': attribute type 1 has an invalid length. [ 813.960515][T22038] netlink: 'syz.5.4974': attribute type 2 has an invalid length. [ 814.376430][T22078] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 814.557384][T22110] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.565993][T22110] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.091171][T22150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.099914][T22150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.489837][T22184] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 815.499762][ T28] audit: type=1400 audit(815.467:2836): avc: denied { create } for pid=22185 comm="syz.4.5043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 815.519316][ T28] audit: type=1400 audit(815.477:2837): avc: denied { bind } for pid=22185 comm="syz.4.5043" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 815.544753][T22188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.553979][T22188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 815.727919][T22206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 815.736565][T22206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.052375][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811beec200: rx timeout, send abort [ 816.060770][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811beec200: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 816.102772][T22210] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.112390][T22210] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.802754][T22254] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 816.812398][T22254] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 816.931246][T22256] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 817.157589][ T28] audit: type=1400 audit(817.127:2838): avc: denied { read } for pid=22267 comm="syz.8.5083" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 817.530241][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811bc4e400: rx timeout, send abort [ 817.538709][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811bc4e400: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 818.349136][T22336] syzkaller0: entered promiscuous mode [ 818.355026][T22336] syzkaller0: entered allmulticast mode [ 818.844856][T22394] syzkaller0: entered promiscuous mode [ 818.851198][T22394] syzkaller0: entered allmulticast mode [ 819.039841][T22423] bridge0: port 2(bridge_slave_1) entered disabled state [ 819.047140][T22423] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.054440][T22423] bridge0: entered allmulticast mode [ 819.263267][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888113f82a00: rx timeout, send abort [ 819.271848][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888113f82a00: 0x0f001: (3) A timeout occurred and this is the connection abort to close the session. [ 819.468146][ T28] audit: type=1326 audit(819.437:2839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22463 comm="syz.4.5162" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb14843de59 code=0x0 [ 821.170491][T22542] tipc: Enabling of bearer rejected, failed to enable media [ 821.362991][ T28] audit: type=1400 audit(821.287:2840): avc: denied { map } for pid=22550 comm="syz.9.5192" path="socket:[65447]" dev="sockfs" ino=65447 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 821.424771][ T28] audit: type=1400 audit(821.297:2841): avc: denied { listen } for pid=22550 comm="syz.9.5192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 821.919230][T22578] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 822.636681][T22608] netlink: 'syz.9.5213': attribute type 1 has an invalid length. [ 822.668897][ T28] audit: type=1400 audit(822.617:2842): avc: denied { write } for pid=22602 comm="syz.0.5212" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 824.644279][T22642] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5223'. [ 824.754220][T22651] loop5: detected capacity change from 0 to 1024 [ 824.761283][T22651] EXT4-fs: Ignoring removed i_version option [ 824.767438][T22651] EXT4-fs: Ignoring removed bh option [ 824.774330][T22651] EXT4-fs (loop5): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 824.794660][T22651] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 824.809630][ T28] audit: type=1400 audit(824.777:2843): avc: denied { write } for pid=22650 comm="syz.5.5228" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 824.841005][ T28] audit: type=1400 audit(824.777:2844): avc: denied { create } for pid=22650 comm="syz.5.5228" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 824.884017][ T28] audit: type=1400 audit(824.787:2845): avc: denied { read } for pid=22650 comm="syz.5.5228" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 824.886203][T17778] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 825.169678][T22678] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 825.250895][T22682] syzkaller0: entered promiscuous mode [ 825.256496][T22682] syzkaller0: entered allmulticast mode [ 825.818591][T22699] bridge0: left promiscuous mode [ 826.231336][T22712] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5252'. [ 826.386877][T22712] vlan2: entered allmulticast mode [ 826.394681][T22712] bridge2: entered allmulticast mode [ 826.436676][T22712] bridge2: port 1(erspan0) entered blocking state [ 826.488922][T22712] bridge2: port 1(erspan0) entered disabled state [ 826.614177][T22712] erspan0: entered allmulticast mode [ 826.626544][T22712] erspan0: entered promiscuous mode [ 826.643842][T22712] bridge2: port 1(erspan0) entered blocking state [ 826.650455][T22712] bridge2: port 1(erspan0) entered forwarding state [ 826.872847][T22716] bridge2: port 1(erspan0) entered disabled state [ 826.998040][T22716] bridge0: port 1(bridge_slave_0) entered disabled state [ 827.013244][T22716] bridge0: port 2(bridge_slave_1) entered disabled state [ 828.724058][T22751] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 830.597706][ T28] audit: type=1400 audit(830.567:2846): avc: denied { getopt } for pid=22775 comm="syz.4.5270" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 831.367491][T22802] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 831.541709][ T28] audit: type=1400 audit(831.517:2847): avc: denied { bind } for pid=22808 comm="syz.8.5279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 833.844501][T22860] Set syz1 is full, maxelem 65536 reached [ 834.080188][T22886] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 834.728178][T22839] loop4: detected capacity change from 0 to 262144 [ 835.026072][T22925] syzkaller0: entered promiscuous mode [ 835.035875][T22925] syzkaller0: entered allmulticast mode [ 835.187660][T22939] loop5: detected capacity change from 0 to 256 [ 835.277310][T22939] FAT-fs (loop5): codepage cp865 not found [ 835.920133][T22977] syzkaller0: entered promiscuous mode [ 835.937921][T22977] syzkaller0: entered allmulticast mode [ 836.368130][T23005] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5352'. [ 836.409826][T23002] bridge0: port 1(bridge_slave_0) entered disabled state [ 836.422638][T23002] bridge0: port 2(bridge_slave_1) entered disabled state [ 838.165308][T23049] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5363'. [ 838.196180][T23037] Set syz1 is full, maxelem 65536 reached [ 838.330750][T23057] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 840.001412][T23101] Set syz1 is full, maxelem 65536 reached [ 840.237851][T23130] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5389'. [ 840.993546][ T28] audit: type=1400 audit(840.967:2848): avc: denied { unmount } for pid=17778 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 841.116638][T23180] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5407'. [ 842.730214][T23280] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 842.771786][ T28] audit: type=1400 audit(842.747:2849): avc: denied { ioctl } for pid=23285 comm="syz.5.5446" path="socket:[68174]" dev="sockfs" ino=68174 ioctlcmd=0x8910 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 842.864588][T23292] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23292 comm=syz.4.5448 [ 843.057480][T23318] netlink: 'syz.5.5459': attribute type 4 has an invalid length. [ 843.065549][T23318] netlink: 152 bytes leftover after parsing attributes in process `syz.5.5459'. [ 843.079517][T23318] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 845.226272][T23390] ref_ctr_offset mismatch. inode: 0xad6 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x20 [ 845.320777][T23406] IPv6: NLM_F_CREATE should be specified when creating new route [ 845.340659][T23406] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 845.347874][T23406] IPv6: NLM_F_CREATE should be set when creating new route [ 845.369264][T23406] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 845.657794][T23415] netlink: 'syz.9.5499': attribute type 16 has an invalid length. [ 845.703236][T23415] bridge2: port 1(erspan0) entered disabled state [ 845.788015][T23415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 845.797884][T23415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 845.880685][ T3964] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.889646][ T3964] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.899083][ T3964] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.908110][ T3964] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.049891][ T28] audit: type=1400 audit(846.017:2850): avc: denied { write } for pid=23462 comm="syz.0.5516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 846.128654][T23473] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5519'. [ 846.195094][T23473] vlan2: entered allmulticast mode [ 846.200415][T23473] bridge2: entered allmulticast mode [ 846.294906][T23484] syzkaller0: entered promiscuous mode [ 846.300592][T23484] syzkaller0: entered allmulticast mode [ 846.514898][T23516] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 846.600062][ T28] audit: type=1400 audit(846.567:2851): avc: denied { read } for pid=23518 comm="syz.4.5537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 847.049516][T23582] netlink: 'syz.4.5553': attribute type 2 has an invalid length. [ 847.076136][T23582] netlink: 16174 bytes leftover after parsing attributes in process `syz.4.5553'. [ 847.161275][T23586] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=23586 comm=syz.0.5555 [ 847.208316][T23592] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.5557'. [ 847.344476][T23609] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5564'. [ 847.372880][T23609] vlan2: entered allmulticast mode [ 847.378120][T23609] bridge1: entered allmulticast mode [ 847.616862][T23638] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 847.626917][T23638] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 847.855993][T23666] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5584'. [ 847.987158][T23676] netlink: 'syz.8.5588': attribute type 2 has an invalid length. [ 847.995217][T23676] netlink: 16174 bytes leftover after parsing attributes in process `syz.8.5588'. [ 848.218659][T23700] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5597'. [ 848.237167][T23700] bridge3: port 1(erspan0) entered blocking state [ 848.243948][T23700] bridge3: port 1(erspan0) entered disabled state [ 848.252393][T23700] erspan0: entered allmulticast mode [ 848.258537][T23700] erspan0: entered promiscuous mode [ 848.265899][T23702] netlink: 'syz.4.5598': attribute type 46 has an invalid length. [ 848.274502][T23702] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5598'. [ 848.363833][T23713] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.5601'. [ 848.789135][T23738] netlink: 16186 bytes leftover after parsing attributes in process `syz.9.5614'. [ 849.329103][T23760] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5612'. [ 849.355213][T23760] bridge2: port 1(erspan0) entered blocking state [ 849.362346][T23760] bridge2: port 1(erspan0) entered disabled state [ 849.369011][T23760] erspan0: entered allmulticast mode [ 849.387399][T23760] erspan0: entered promiscuous mode [ 849.475522][T23776] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5631'. [ 849.576586][T23791] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 850.013252][T23805] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5641'. [ 850.029191][T23805] bridge1: port 1(erspan0) entered blocking state [ 850.035833][T23805] bridge1: port 1(erspan0) entered disabled state [ 850.042750][T23805] erspan0: entered allmulticast mode [ 850.048606][T23805] erspan0: entered promiscuous mode [ 850.054463][T23805] bridge1: port 1(erspan0) entered blocking state [ 850.061018][T23805] bridge1: port 1(erspan0) entered forwarding state [ 850.074641][T23805] bridge1: port 1(erspan0) entered disabled state [ 850.106346][T23805] bridge0: port 1(bridge_slave_0) entered disabled state [ 850.117005][T23805] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.116285][T23833] syzkaller0: entered promiscuous mode [ 851.123569][T23833] syzkaller0: entered allmulticast mode [ 851.175390][T23843] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 851.214557][T23847] cgroup: fork rejected by pids controller in /syz4 [ 851.668676][T23854] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.675966][T23854] bridge0: port 1(bridge_slave_0) entered disabled state [ 851.683228][T23854] bridge_slave_0: entered allmulticast mode [ 851.690241][T23854] bridge_slave_0: entered promiscuous mode [ 851.697201][T23854] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.704364][T23854] bridge0: port 2(bridge_slave_1) entered disabled state [ 851.711645][T23854] bridge_slave_1: entered allmulticast mode [ 851.718212][T23854] bridge_slave_1: entered promiscuous mode [ 851.737484][T23854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 851.748484][T23854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 851.769098][T23854] team0: Port device team_slave_0 added [ 851.776032][T23854] team0: Port device team_slave_1 added [ 851.792484][T23854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 851.799543][T23854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.825661][T23854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 851.837008][T23854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 851.844068][T23854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 851.870158][T23854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 851.898245][T23854] hsr_slave_0: entered promiscuous mode [ 851.904653][T23854] hsr_slave_1: entered promiscuous mode [ 851.910604][T23854] debugfs: 'hsr0' already exists in 'hsr' [ 851.916350][T23854] Cannot create hsr debugfs directory [ 852.043842][T23854] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.056258][T23879] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5664'. [ 852.123473][T23854] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.239775][T23854] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.277989][T23912] vlan1: entered promiscuous mode [ 852.283475][T23912] vlan1: entered allmulticast mode [ 852.288788][T23912] veth0_vlan: entered allmulticast mode [ 852.308958][T23854] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 852.407918][T23854] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 852.415380][T23927] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5684'. [ 852.428724][T23854] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 852.441710][T23854] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 852.451375][T23854] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 852.462332][T23854] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 852.472757][T23854] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 852.480497][T23854] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 852.492747][T23854] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 852.535920][T23854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 852.554884][T23854] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.566544][ T2360] bridge0: port 1(bridge_slave_0) entered blocking state [ 852.573662][ T2360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 852.586003][T13509] bridge0: port 2(bridge_slave_1) entered blocking state [ 852.593155][T13509] bridge0: port 2(bridge_slave_1) entered forwarding state [ 852.754901][T23854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.907861][T23854] veth0_vlan: entered promiscuous mode [ 852.916886][T23854] veth1_vlan: entered promiscuous mode [ 852.937875][T23854] veth0_macvtap: entered promiscuous mode [ 852.946903][T23854] veth1_macvtap: entered promiscuous mode [ 852.976601][T23854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 852.996544][T23854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 853.015339][ T3964] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.025180][ T3964] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.049058][ T3964] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.065140][ T3964] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 853.345876][T24004] netlink: 48 bytes leftover after parsing attributes in process `syz.5.5701'. [ 853.423779][T24013] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5706'. [ 853.466325][T24013] erspan0: left allmulticast mode [ 853.471428][T24013] erspan0: left promiscuous mode [ 853.476542][T24013] bridge1: port 1(erspan0) entered disabled state [ 853.552167][T24013] bridge2: port 1(erspan0) entered blocking state [ 853.558152][T24022] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24022 comm=syz.9.5710 [ 853.558778][T24013] bridge2: port 1(erspan0) entered disabled state [ 853.559134][T24013] erspan0: entered allmulticast mode [ 853.595215][T24013] erspan0: entered promiscuous mode [ 853.930857][T24055] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 854.026284][T24058] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24058 comm=syz.5.5722 [ 854.082403][T24060] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5723'. [ 854.120256][T24060] erspan0: left allmulticast mode [ 854.126141][T24060] erspan0: left promiscuous mode [ 854.131402][T24060] bridge3: port 1(erspan0) entered disabled state [ 854.144349][T24060] bridge5: port 1(erspan0) entered blocking state [ 854.152158][T24060] bridge5: port 1(erspan0) entered disabled state [ 854.158958][T24060] erspan0: entered allmulticast mode [ 854.167559][T24060] erspan0: entered promiscuous mode [ 854.242910][T24076] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5730'. [ 854.318321][T24085] netlink: 'syz.5.5734': attribute type 2 has an invalid length. [ 854.336847][T24085] netlink: 16174 bytes leftover after parsing attributes in process `syz.5.5734'. [ 854.426291][ T28] audit: type=1400 audit(854.397:2852): avc: denied { cpu } for pid=24089 comm="syz.4.5737" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 854.514035][T24111] erspan0: left allmulticast mode [ 854.519972][T24111] erspan0: left promiscuous mode [ 854.525291][T24111] bridge2: port 1(erspan0) entered disabled state [ 854.651153][T24124] netlink: 'syz.9.5749': attribute type 2 has an invalid length. [ 854.673512][T24124] netlink: 16174 bytes leftover after parsing attributes in process `syz.9.5749'. [ 854.775343][T24135] syzkaller0: entered promiscuous mode [ 854.780995][T24135] syzkaller0: entered allmulticast mode [ 854.981587][T24144] erspan0: left allmulticast mode [ 854.986735][T24144] erspan0: left promiscuous mode [ 854.992375][T24144] bridge2: port 1(erspan0) entered disabled state [ 855.062047][T24157] netlink: 'syz.5.5763': attribute type 2 has an invalid length. [ 855.069967][T24157] netlink: 16174 bytes leftover after parsing attributes in process `syz.5.5763'. [ 855.277735][T24172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5769'. [ 855.296598][T24172] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5769'. [ 855.434622][T24181] netlink: 'syz.9.5774': attribute type 2 has an invalid length. [ 855.456338][T24181] netlink: 16174 bytes leftover after parsing attributes in process `syz.9.5774'. [ 856.733325][T24281] netlink: 'syz.9.5817': attribute type 1 has an invalid length. [ 856.741617][T24281] netlink: 'syz.9.5817': attribute type 2 has an invalid length. [ 859.844640][T24325] __nla_validate_parse: 5 callbacks suppressed [ 859.844662][T24325] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.5833'. [ 859.929625][T24341] netlink: 'syz.0.5839': attribute type 2 has an invalid length. [ 859.937919][T24341] netlink: 'syz.0.5839': attribute type 8 has an invalid length. [ 859.953175][T24341] netlink: 132 bytes leftover after parsing attributes in process `syz.0.5839'. [ 860.004635][T24348] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5841'. [ 860.169889][T24360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5132 sclass=netlink_route_socket pid=24360 comm=syz.0.5847 [ 860.189106][T24370] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.5850'. [ 860.325752][T24320] bridge0: port 1(bridge_slave_0) entered blocking state [ 860.333103][T24320] bridge0: port 1(bridge_slave_0) entered disabled state [ 860.340400][T24320] bridge_slave_0: entered allmulticast mode [ 860.347599][T24320] bridge_slave_0: entered promiscuous mode [ 860.354673][T24320] bridge0: port 2(bridge_slave_1) entered blocking state [ 860.362112][T24320] bridge0: port 2(bridge_slave_1) entered disabled state [ 860.369533][T24320] bridge_slave_1: entered allmulticast mode [ 860.385020][T24320] bridge_slave_1: entered promiscuous mode [ 860.398613][T24396] syzkaller0: entered promiscuous mode [ 860.404241][T24396] syzkaller0: entered allmulticast mode [ 860.427654][T24398] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5861'. [ 860.444162][T24320] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 860.458643][T24320] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 860.487349][T24320] team0: Port device team_slave_0 added [ 860.503451][T24320] team0: Port device team_slave_1 added [ 860.530855][T24320] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 860.550049][T24402] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5863'. [ 860.558588][T24320] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 860.587468][T24320] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 860.599201][T24320] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 860.606740][T24320] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 860.632957][T24320] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 860.673096][T24320] hsr_slave_0: entered promiscuous mode [ 860.679498][T24320] hsr_slave_1: entered promiscuous mode [ 860.687531][T24320] debugfs: 'hsr0' already exists in 'hsr' [ 860.693516][T24320] Cannot create hsr debugfs directory [ 860.857637][T24320] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 860.873431][T24422] netlink: 104 bytes leftover after parsing attributes in process `syz.9.5872'. [ 860.938327][T24320] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.021289][T24428] netlink: 65047 bytes leftover after parsing attributes in process `syz.9.5874'. [ 861.078987][T24320] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.103160][T24436] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5877'. [ 861.158034][T24320] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.240114][T24320] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 861.266145][T24320] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 861.280282][T24320] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 861.292388][T24320] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 861.319471][T24320] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 861.333347][T24320] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 861.348003][T24320] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 861.375180][T24320] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 861.472271][T24474] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.5891'. [ 861.483483][T24472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24472 comm=syz.0.5890 [ 861.499665][T24320] 8021q: adding VLAN 0 to HW filter on device bond0 [ 861.526014][T24320] 8021q: adding VLAN 0 to HW filter on device team0 [ 861.547208][ T315] bridge0: port 1(bridge_slave_0) entered blocking state [ 861.554394][ T315] bridge0: port 1(bridge_slave_0) entered forwarding state [ 861.590843][ T2360] bridge0: port 2(bridge_slave_1) entered blocking state [ 861.597979][ T2360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 861.710395][T24495] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.720346][T24495] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.764936][T24320] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 861.975808][T24517] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24517 comm=syz.5.5903 [ 862.047757][T24320] veth0_vlan: entered promiscuous mode [ 862.063665][T24320] veth1_vlan: entered promiscuous mode [ 862.118032][T24320] veth0_macvtap: entered promiscuous mode [ 862.127092][T24320] veth1_macvtap: entered promiscuous mode [ 862.151224][T24320] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 862.162375][T24320] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 862.173829][ T2360] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.183924][ T2360] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.192922][ T315] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.210921][ T315] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 862.517840][T24556] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24556 comm=syz.8.5916 [ 862.561988][T24554] openvswitch: netlink: Flow key attr not present in new flow. [ 862.646138][T24570] erspan0: left allmulticast mode [ 862.659134][T24570] erspan0: left promiscuous mode [ 862.664712][T24570] bridge5: port 1(erspan0) entered disabled state [ 862.676091][T24570] bridge6: port 1(erspan0) entered blocking state [ 862.682847][T24570] bridge6: port 1(erspan0) entered disabled state [ 862.692102][T24570] erspan0: entered allmulticast mode [ 862.703031][T24570] erspan0: entered promiscuous mode [ 862.886727][T24595] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24595 comm=syz.8.5931 [ 862.978766][ T28] audit: type=1400 audit(862.947:2853): avc: denied { nlmsg_read } for pid=24604 comm="syz.5.5936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 863.026420][ T28] audit: type=1400 audit(862.947:2854): avc: denied { read } for pid=24604 comm="syz.5.5936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 863.225272][T24591] bridge0: port 1(bridge_slave_0) entered blocking state [ 863.232530][T24591] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.240053][T24591] bridge_slave_0: entered allmulticast mode [ 863.247028][T24591] bridge_slave_0: entered promiscuous mode [ 863.256118][T24591] bridge0: port 2(bridge_slave_1) entered blocking state [ 863.263398][T24591] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.270755][T24591] bridge_slave_1: entered allmulticast mode [ 863.277689][T24591] bridge_slave_1: entered promiscuous mode [ 863.304291][T24591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 863.327238][T24591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 863.355223][T24591] team0: Port device team_slave_0 added [ 863.365292][T24591] team0: Port device team_slave_1 added [ 863.415018][T24591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 863.422152][T24591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.448938][T24591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 863.488279][T24591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 863.496137][T24591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 863.522658][T24591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 863.559452][ T2360] bridge_slave_1: left allmulticast mode [ 863.565541][ T2360] bridge_slave_1: left promiscuous mode [ 863.571532][ T2360] bridge0: port 2(bridge_slave_1) entered disabled state [ 863.589444][ T2360] bridge_slave_0: left allmulticast mode [ 863.600422][ T2360] bridge0: port 1(bridge_slave_0) entered disabled state [ 863.669103][ T2360] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 863.679168][ T2360] bond0 (unregistering): Released all slaves [ 863.734355][T24591] hsr_slave_0: entered promiscuous mode [ 863.746666][T24591] hsr_slave_1: entered promiscuous mode [ 863.752901][T24591] debugfs: 'hsr0' already exists in 'hsr' [ 863.758735][T24591] Cannot create hsr debugfs directory [ 863.816757][ T2360] hsr_slave_0: left promiscuous mode [ 863.825011][ T28] audit: type=1400 audit(863.797:2855): avc: denied { write } for pid=24662 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.847761][ T2360] hsr_slave_1: left promiscuous mode [ 863.854733][ T2360] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 863.869796][ T2360] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 863.902241][ T28] audit: type=1400 audit(863.867:2856): avc: denied { write } for pid=24680 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 863.963787][ T2360] team0 (unregistering): Port device team_slave_1 removed [ 863.974466][ T2360] team0 (unregistering): Port device team_slave_0 removed [ 864.015431][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 864.146011][T24700] netlink: 'syz.8.5966': attribute type 21 has an invalid length. [ 864.161907][T24696] syzkaller0: entered promiscuous mode [ 864.167593][T24700] IPv6: NLM_F_CREATE should be specified when creating new route [ 864.176164][T24696] syzkaller0: entered allmulticast mode [ 864.182482][T24700] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 864.189852][T24700] IPv6: NLM_F_CREATE should be set when creating new route [ 864.197260][T24700] IPv6: NLM_F_CREATE should be set when creating new route [ 864.204614][T24700] IPv6: NLM_F_CREATE should be set when creating new route [ 864.225931][ T28] audit: type=1400 audit(864.197:2857): avc: denied { write } for pid=24697 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 864.257071][T24711] netlink: 'syz.8.5966': attribute type 21 has an invalid length. [ 864.265286][T24711] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 864.317160][ T28] audit: type=1400 audit(864.287:2858): avc: denied { write } for pid=24712 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 864.365319][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 864.507078][ T28] audit: type=1400 audit(864.477:2859): avc: denied { write } for pid=24731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 864.554105][ T28] audit: type=1400 audit(864.517:2860): avc: denied { write } for pid=24745 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 864.597146][ T28] audit: type=1400 audit(864.547:2861): avc: denied { name_bind } for pid=24744 comm="syz.0.5976" src=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 864.639307][ T28] audit: type=1400 audit(864.547:2862): avc: denied { name_connect } for pid=24744 comm="syz.0.5976" dest=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 865.478884][T24773] __nla_validate_parse: 7 callbacks suppressed [ 865.478901][T24773] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5982'. [ 865.505036][T24775] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5981'. [ 865.554624][T24783] netlink: 104 bytes leftover after parsing attributes in process `syz.0.5985'. [ 865.622242][T24775] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.634449][T24775] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.696361][T24787] syzkaller0: entered promiscuous mode [ 865.704732][T24787] syzkaller0: entered allmulticast mode [ 865.873104][T24591] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 865.895671][T24591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 865.909232][T24591] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 865.929829][T24591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 865.946733][T24591] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 865.965632][T24591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 865.973984][T24591] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 865.992720][T24591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 866.020214][T24829] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5993'. [ 866.101490][T24591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 866.133009][T24591] 8021q: adding VLAN 0 to HW filter on device team0 [ 866.163859][ T3964] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.171014][ T3964] bridge0: port 1(bridge_slave_0) entered forwarding state [ 866.204415][T24851] netlink: 104 bytes leftover after parsing attributes in process `syz.8.5996'. [ 866.217560][ T3964] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.224684][ T3964] bridge0: port 2(bridge_slave_1) entered forwarding state [ 866.394556][T24873] syzkaller0: entered promiscuous mode [ 866.405058][T24873] syzkaller0: entered allmulticast mode [ 866.582821][T24591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 866.594830][T24906] netlink: 104 bytes leftover after parsing attributes in process `syz.8.6006'. [ 866.633655][T24908] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24908 comm=syz.4.6004 [ 866.762025][T24926] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6012'. [ 866.825049][T24591] veth0_vlan: entered promiscuous mode [ 866.833463][T24591] veth1_vlan: entered promiscuous mode [ 866.858284][T24591] veth0_macvtap: entered promiscuous mode [ 866.871869][T24591] veth1_macvtap: entered promiscuous mode [ 866.887285][T24591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 866.908351][T24591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 866.920218][ T4890] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.929748][ T4890] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.941017][ T4890] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.949972][ T4890] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 866.986216][T24950] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6016'. [ 867.064357][T24955] netlink: 132 bytes leftover after parsing attributes in process `syz.9.5929'. [ 867.198827][T24962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=24962 comm=syz.4.6021 [ 867.266598][T24977] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6029'. [ 867.751016][T25044] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25044 comm=syz.4.6051 [ 867.909610][T25064] erspan0: left allmulticast mode [ 867.921133][T25064] erspan0: left promiscuous mode [ 867.929757][T25064] bridge6: port 1(erspan0) entered disabled state [ 868.092704][T25081] netlink: 'syz.8.6068': attribute type 2 has an invalid length. [ 868.971925][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.039362][T25176] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.049728][T25176] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.154773][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.257363][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.348893][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.562449][T25142] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.569839][T25142] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.592260][T25142] bridge_slave_0: entered allmulticast mode [ 869.598981][T25142] bridge_slave_0: entered promiscuous mode [ 869.606539][T25142] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.613773][T25142] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.621417][T25142] bridge_slave_1: entered allmulticast mode [ 869.628929][T25142] bridge_slave_1: entered promiscuous mode [ 869.678692][T25142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 869.717732][T25142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 869.815161][ T12] bridge_slave_1: left allmulticast mode [ 869.821457][ T12] bridge_slave_1: left promiscuous mode [ 869.827212][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 869.836270][ T12] bridge_slave_0: left allmulticast mode [ 869.842458][ T12] bridge_slave_0: left promiscuous mode [ 869.849484][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 869.996398][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 870.009110][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 870.025757][ T12] bond0 (unregistering): Released all slaves [ 870.088845][T25142] team0: Port device team_slave_0 added [ 870.099236][T25142] team0: Port device team_slave_1 added [ 870.152948][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 870.152966][ T28] audit: type=1400 audit(870.127:2873): avc: denied { write } for pid=25279 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 870.194866][T25142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 870.201955][T25142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.228075][ T28] audit: type=1400 audit(870.177:2874): avc: denied { write } for pid=25293 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 870.249690][T25142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 870.271088][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 870.300083][T25142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 870.307273][T25142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 870.333183][T25142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 870.351378][ T12] hsr_slave_0: left promiscuous mode [ 870.357201][ T12] hsr_slave_1: left promiscuous mode [ 870.362994][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 870.370495][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 870.378232][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 870.385650][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 870.396722][ T12] veth1_macvtap: left promiscuous mode [ 870.403269][ T12] veth0_macvtap: left promiscuous mode [ 870.408880][ T12] veth1_vlan: left promiscuous mode [ 870.500394][ T12] team0 (unregistering): Port device team_slave_1 removed [ 870.516825][ T12] team0 (unregistering): Port device team_slave_0 removed [ 870.577867][T25314] __nla_validate_parse: 14 callbacks suppressed [ 870.577883][T25314] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6161'. [ 870.611080][T25142] hsr_slave_0: entered promiscuous mode [ 870.617416][T25142] hsr_slave_1: entered promiscuous mode [ 870.623585][T25142] debugfs: 'hsr0' already exists in 'hsr' [ 870.629367][T25142] Cannot create hsr debugfs directory [ 870.811904][ T28] audit: type=1400 audit(870.787:2875): avc: denied { write } for pid=25319 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 870.884245][T25344] syzkaller0: entered promiscuous mode [ 870.884284][ T28] audit: type=1400 audit(870.857:2876): avc: denied { write } for pid=25347 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 870.891916][T25344] syzkaller0: entered allmulticast mode [ 870.951951][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 871.025169][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888104843e00: rx timeout, send abort [ 871.033724][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888104843e00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 871.109765][T25373] netlink: 104 bytes leftover after parsing attributes in process `syz.8.6175'. [ 871.126892][ T28] audit: type=1400 audit(871.097:2877): avc: denied { write } for pid=25355 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 871.196192][ T28] audit: type=1400 audit(871.167:2878): avc: denied { write } for pid=25381 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 871.434795][T25142] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 871.473863][ T28] audit: type=1400 audit(871.447:2879): avc: denied { write } for pid=25398 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 871.497277][T25142] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 871.509174][T25407] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25407 comm=syz.4.6187 [ 871.522770][T25142] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 871.533649][T25142] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 871.548900][T25142] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 871.564728][T25142] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 871.583629][ T28] audit: type=1400 audit(871.557:2880): avc: denied { write } for pid=25423 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 871.698610][T25142] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 871.716108][T25142] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 871.798849][ T28] audit: type=1400 audit(871.767:2881): avc: denied { write } for pid=25429 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 871.872933][ T28] audit: type=1400 audit(871.837:2882): avc: denied { write } for pid=25466 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 871.915192][T25142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 871.937891][T25142] 8021q: adding VLAN 0 to HW filter on device team0 [ 871.954126][T25465] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25465 comm=syz.4.6201 [ 871.985737][T25474] netlink: 104 bytes leftover after parsing attributes in process `syz.8.6202'. [ 871.999330][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 872.006484][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 872.046321][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 872.053531][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 872.244970][T25506] netlink: 68 bytes leftover after parsing attributes in process `syz.9.6211'. [ 872.302325][T25514] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.314555][T25514] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.432669][T25142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 872.557148][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811573fa00: rx timeout, send abort [ 872.565599][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811573fa00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 872.624385][T25142] veth0_vlan: entered promiscuous mode [ 872.636802][T25142] veth1_vlan: entered promiscuous mode [ 872.665392][T25142] veth0_macvtap: entered promiscuous mode [ 872.719295][T25563] netlink: 104 bytes leftover after parsing attributes in process `syz.8.6227'. [ 872.754474][T25142] veth1_macvtap: entered promiscuous mode [ 872.785509][T25142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 872.809618][T25142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 872.833854][ T315] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.851911][ T315] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.864671][ T315] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.874021][ T315] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 872.939867][T25581] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6096'. [ 873.044990][T25594] netlink: 'syz.8.6241': attribute type 20 has an invalid length. [ 873.136308][T25607] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25607 comm=syz.9.6246 [ 873.185652][T25610] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6247'. [ 874.114629][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811b6c5200: rx timeout, send abort [ 874.123080][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811b6c5200: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 874.209223][T25619] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6250'. [ 876.135458][T25638] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25638 comm=syz.9.6257 [ 876.291327][T25644] bridge0: port 1(bridge_slave_0) entered disabled state [ 876.302074][T25644] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.367062][T25654] syzkaller0: entered promiscuous mode [ 876.376417][T25654] syzkaller0: entered allmulticast mode [ 876.393783][T25661] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6267'. [ 876.413272][T25661] netlink: 12 bytes leftover after parsing attributes in process `syz.8.6267'. [ 876.430255][T25665] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6269'. [ 876.463248][T25669] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25669 comm=syz.8.6270 [ 876.565239][T25679] netlink: 'syz.9.6276': attribute type 10 has an invalid length. [ 876.573485][T25679] netlink: 156 bytes leftover after parsing attributes in process `syz.9.6276'. [ 876.642647][T25682] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6277'. [ 876.767136][T25693] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6283'. [ 876.788938][T25696] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25696 comm=syz.8.6284 [ 877.150114][T25722] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25722 comm=syz.5.6296 [ 877.180066][T25724] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6297'. [ 877.426798][T25735] syzkaller0: entered promiscuous mode [ 877.432663][T25735] syzkaller0: entered allmulticast mode [ 877.442274][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811bce3800: rx timeout, send abort [ 877.450691][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811bce3800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 877.559598][T25747] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25747 comm=syz.4.6308 [ 877.766474][T25768] syzkaller0: entered promiscuous mode [ 877.779902][T25768] syzkaller0: entered allmulticast mode [ 877.833153][T25774] netlink: 'syz.0.6319': attribute type 16 has an invalid length. [ 877.842153][T25774] netlink: 152 bytes leftover after parsing attributes in process `syz.0.6319'. [ 877.906224][T25786] netlink: 132 bytes leftover after parsing attributes in process `syz.8.6325'. [ 877.986792][T25796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25796 comm=syz.0.6330 [ 878.202583][T25829] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25829 comm=syz.8.6343 [ 878.468254][T25854] netlink: 28 bytes leftover after parsing attributes in process `syz.9.6354'. [ 878.645665][T25868] netlink: 'syz.9.6361': attribute type 1 has an invalid length. [ 878.940817][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811bae7200: rx timeout, send abort [ 878.949281][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811bae7200: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 878.979936][T25910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.989298][T25910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 879.120332][T25922] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 879.128652][T25922] syzkaller0: entered promiscuous mode [ 879.134464][T25922] syzkaller0: entered allmulticast mode [ 882.007802][T25928] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25928 comm=syz.9.6386 [ 882.039969][T25933] __nla_validate_parse: 5 callbacks suppressed [ 882.039985][T25933] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6384'. [ 882.083577][T25933] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6384'. [ 882.209865][T25957] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 882.219769][T25957] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 882.232965][T25958] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 882.241392][T25958] syzkaller0: entered promiscuous mode [ 882.246972][T25958] syzkaller0: entered allmulticast mode [ 882.361484][T25964] netlink: 'syz.4.6400': attribute type 3 has an invalid length. [ 882.364243][T25965] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25965 comm=syz.5.6401 [ 882.369601][T25964] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6400'. [ 882.425690][T25969] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6403'. [ 882.434673][T25969] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6403'. [ 882.575146][T25984] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 882.585565][T25984] syzkaller0: entered promiscuous mode [ 882.591716][T25984] syzkaller0: entered allmulticast mode [ 882.609961][T25988] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=25988 comm=syz.5.6412 [ 882.679487][T25994] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6415'. [ 882.814646][T26013] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26013 comm=syz.4.6424 [ 882.867716][T26017] syzkaller0: entered promiscuous mode [ 882.874536][T26017] syzkaller0: entered allmulticast mode [ 882.918335][T26021] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6428'. [ 883.324980][T26055] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26055 comm=syz.4.6438 [ 883.337711][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88811bc1fe00: rx timeout, send abort [ 883.337919][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811bc1fe00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 883.377990][T26057] netlink: 24 bytes leftover after parsing attributes in process `syz.0.6439'. [ 883.402798][T26025] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.428384][T26025] bridge0: port 1(bridge_slave_0) entered disabled state [ 883.435881][T26025] bridge_slave_0: entered allmulticast mode [ 883.442746][T26025] bridge_slave_0: entered promiscuous mode [ 883.449574][T26025] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.456707][T26025] bridge0: port 2(bridge_slave_1) entered disabled state [ 883.464106][T26025] bridge_slave_1: entered allmulticast mode [ 883.473733][T26025] bridge_slave_1: entered promiscuous mode [ 883.594194][T26060] syzkaller0: entered promiscuous mode [ 883.600168][T26060] syzkaller0: entered allmulticast mode [ 883.609014][T26025] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 883.620292][T26025] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 883.659846][T26025] team0: Port device team_slave_0 added [ 883.668320][T26025] team0: Port device team_slave_1 added [ 883.700384][T26025] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 883.709156][T26025] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 883.742193][T26025] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 883.754104][T26025] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 883.766723][T26025] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 883.783541][T26078] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26078 comm=syz.9.6449 [ 883.793679][T26025] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 883.849578][T26025] hsr_slave_0: entered promiscuous mode [ 883.864098][T26025] hsr_slave_1: entered promiscuous mode [ 883.870223][T26025] debugfs: 'hsr0' already exists in 'hsr' [ 883.882374][T26025] Cannot create hsr debugfs directory [ 883.907319][T26092] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6454'. [ 884.007650][T26025] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.043787][T26106] syzkaller0: entered promiscuous mode [ 884.049423][T26106] syzkaller0: entered allmulticast mode [ 884.076384][T26025] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.095461][T26110] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26110 comm=syz.9.6461 [ 884.126576][T26025] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.165709][T26116] netlink: 132 bytes leftover after parsing attributes in process `syz.9.6464'. [ 884.179556][T26025] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 884.287863][T26025] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 884.302330][T26025] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 884.318381][T26025] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 884.331145][T26025] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 884.340400][T26025] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 884.360906][T26025] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 884.377576][T26025] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 884.394329][T26025] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 884.408347][T26143] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26143 comm=syz.9.6473 [ 884.464284][T26025] 8021q: adding VLAN 0 to HW filter on device bond0 [ 884.490194][T26025] 8021q: adding VLAN 0 to HW filter on device team0 [ 884.513123][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 884.520353][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 884.556827][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 884.564053][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 884.699560][T26175] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26175 comm=syz.0.6483 [ 884.772904][T26025] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 884.953732][T26025] veth0_vlan: entered promiscuous mode [ 884.963833][T26025] veth1_vlan: entered promiscuous mode [ 884.992656][T26218] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26218 comm=syz.0.6493 [ 885.005297][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811bc1fe00: rx timeout, send abort [ 885.005444][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811bc1fe00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 885.005582][T26025] veth0_macvtap: entered promiscuous mode [ 885.058747][T26025] veth1_macvtap: entered promiscuous mode [ 885.076190][T26025] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 885.097494][T26025] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 885.111137][ T315] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.120114][ T315] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.130756][ T2360] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.140126][ T2360] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 885.349693][T26254] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26254 comm=syz.8.6504 [ 885.448649][T26271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 885.482122][T26271] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 885.594790][T26287] syzkaller0: entered promiscuous mode [ 885.600460][T26287] syzkaller0: entered allmulticast mode [ 885.866361][T26319] syzkaller0: entered promiscuous mode [ 885.872059][T26319] syzkaller0: entered allmulticast mode [ 886.198425][T26356] syzkaller0: entered promiscuous mode [ 886.204098][T26356] syzkaller0: entered allmulticast mode [ 886.568403][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88813e8d7800: rx timeout, send abort [ 886.576950][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88813e8d7800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 886.622535][T26394] syzkaller0: entered promiscuous mode [ 886.628209][T26394] syzkaller0: entered allmulticast mode [ 887.156790][T26425] syzkaller0: entered promiscuous mode [ 887.163559][T26425] syzkaller0: entered allmulticast mode [ 887.217011][T26436] __nla_validate_parse: 7 callbacks suppressed [ 887.217031][T26436] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6583'. [ 887.352958][T26444] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.6586'. [ 887.532011][T26459] selinux_netlink_send: 6 callbacks suppressed [ 887.532031][T26459] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26459 comm=syz.9.6592 [ 887.941720][T26484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26484 comm=syz.0.6605 [ 888.001761][T26490] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6608'. [ 888.072324][T26492] syzkaller0: entered promiscuous mode [ 888.077896][T26492] syzkaller0: entered allmulticast mode [ 888.123273][T26497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6611'. [ 888.133916][T26497] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6611'. [ 888.200246][T26508] netlink: 132 bytes leftover after parsing attributes in process `syz.0.6615'. [ 888.235917][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 888.235937][ T28] audit: type=1400 audit(888.207:2887): avc: denied { read } for pid=26509 comm="syz.0.6616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 888.249065][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811bc33200: rx timeout, send abort [ 888.269737][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811bc33200: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 888.350370][T26515] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26515 comm=syz.9.6618 [ 888.396062][T26522] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6620'. [ 888.510419][T26536] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6626'. [ 888.530173][T26540] gretap0 speed is unknown, defaulting to 1000 [ 888.536728][T26540] gretap0 speed is unknown, defaulting to 1000 [ 888.543297][T26540] gretap0 speed is unknown, defaulting to 1000 [ 888.550684][T26540] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 888.561300][T26540] gretap0 speed is unknown, defaulting to 1000 [ 888.575264][T26540] gretap0 speed is unknown, defaulting to 1000 [ 888.582264][T26540] gretap0 speed is unknown, defaulting to 1000 [ 888.589293][T26540] gretap0 speed is unknown, defaulting to 1000 [ 888.596556][T26540] gretap0 speed is unknown, defaulting to 1000 [ 888.603373][T26540] gretap0 speed is unknown, defaulting to 1000 [ 888.610186][T26540] gretap0 speed is unknown, defaulting to 1000 [ 888.617287][T26540] gretap0 speed is unknown, defaulting to 1000 [ 888.624174][T26540] gretap0 speed is unknown, defaulting to 1000 [ 888.638571][T26540] gretap0 speed is unknown, defaulting to 1000 [ 888.645590][T26540] gretap0 speed is unknown, defaulting to 1000 [ 888.695368][T26548] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26548 comm=syz.5.6631 [ 888.718479][T26552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.728212][T26552] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.753190][T26554] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6634'. [ 888.936582][T26566] netlink: 132 bytes leftover after parsing attributes in process `syz.5.6639'. [ 889.239488][T26576] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=26576 comm=syz.5.6644 [ 889.369493][T26590] gretap0 speed is unknown, defaulting to 1000 [ 889.522231][T26605] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 889.532171][T26605] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 889.687224][T26613] gretap0 speed is unknown, defaulting to 1000 [ 889.775175][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88811bc33200: rx timeout, send abort [ 889.783697][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88811bc33200: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 891.315253][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88813d94aa00: rx timeout, send abort [ 891.323704][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88813d94aa00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 893.199596][T26679] __nla_validate_parse: 2 callbacks suppressed [ 893.199618][T26679] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6689'. [ 893.247929][T26679] vlan2: entered allmulticast mode [ 893.267718][T26679] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 893.353102][T26694] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6696'. [ 893.374805][T26679] bridge0: port 1(bridge_slave_0) entered disabled state [ 893.390198][T26679] bridge0: port 2(bridge_slave_1) entered disabled state [ 893.414170][T26700] netlink: 'syz.9.6698': attribute type 10 has an invalid length. [ 893.475922][T26702] netlink: 'syz.9.6698': attribute type 10 has an invalid length. [ 893.657547][T26700] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 893.666775][T26700] team0: Port device netdevsim2 added [ 893.725003][T26709] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6702'. [ 893.741930][T26709] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6702'. [ 893.772154][T26711] syzkaller0: entered promiscuous mode [ 893.779167][T26711] syzkaller0: entered allmulticast mode [ 893.954613][T26733] netlink: 'syz.5.6713': attribute type 10 has an invalid length. [ 893.984076][T26733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 894.001546][T26733] team0: Port device netdevsim2 added [ 894.018741][T26738] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6715'. [ 894.027729][T26740] netlink: 'syz.5.6713': attribute type 10 has an invalid length. [ 894.046088][T26738] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6715'. [ 894.145940][T26752] syzkaller0: entered promiscuous mode [ 894.152091][T26752] syzkaller0: entered allmulticast mode [ 894.256599][T26760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6726'. [ 894.337455][T26772] netlink: 'syz.9.6733': attribute type 10 has an invalid length. [ 894.447524][T26787] syzkaller0: entered promiscuous mode [ 894.453969][T26787] syzkaller0: entered allmulticast mode [ 894.604552][T26807] netlink: 'syz.4.6749': attribute type 10 has an invalid length. [ 894.783055][T26821] syzkaller0: entered promiscuous mode [ 894.788692][T26821] syzkaller0: entered allmulticast mode [ 894.956328][T26846] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6768'. [ 894.970547][T26846] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6768'. [ 895.401996][T26908] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6799'. [ 895.680101][T26944] netlink: 'syz.5.6816': attribute type 10 has an invalid length. [ 895.834317][T26950] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.846919][T26950] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.976735][T26966] syzkaller0: entered promiscuous mode [ 895.982613][T26966] syzkaller0: entered allmulticast mode [ 896.484395][T27009] netlink: 'syz.0.6846': attribute type 10 has an invalid length. [ 896.498297][T27006] netlink: 'syz.4.6844': attribute type 1 has an invalid length. [ 896.513739][T27006] netlink: 'syz.4.6844': attribute type 2 has an invalid length. [ 896.895032][T27053] syzkaller0: entered promiscuous mode [ 896.900881][T27053] syzkaller0: entered allmulticast mode [ 897.247922][T27066] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 898.262508][T27108] __nla_validate_parse: 17 callbacks suppressed [ 898.262530][T27108] netlink: 12 bytes leftover after parsing attributes in process `syz.5.6891'. [ 898.468065][T27133] syzkaller0: entered promiscuous mode [ 898.474206][T27133] syzkaller0: entered allmulticast mode [ 901.748388][T27166] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6918'. [ 901.936866][T27190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6928'. [ 902.087679][T27208] syzkaller0: entered promiscuous mode [ 902.096914][T27208] syzkaller0: entered allmulticast mode [ 902.237696][T27221] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6942'. [ 902.433265][T27156] bridge0: port 1(bridge_slave_0) entered blocking state [ 902.449655][T27156] bridge0: port 1(bridge_slave_0) entered disabled state [ 902.460316][T27156] bridge_slave_0: entered allmulticast mode [ 902.467257][T27156] bridge_slave_0: entered promiscuous mode [ 902.474812][T27156] bridge0: port 2(bridge_slave_1) entered blocking state [ 902.482096][T27156] bridge0: port 2(bridge_slave_1) entered disabled state [ 902.489387][T27156] bridge_slave_1: entered allmulticast mode [ 902.496523][T27156] bridge_slave_1: entered promiscuous mode [ 902.517322][T27156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 902.528423][T27156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 902.551119][T27156] team0: Port device team_slave_0 added [ 902.558134][T27156] team0: Port device team_slave_1 added [ 902.578286][T27156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 902.588828][T27156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.615354][T27156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 902.627747][T27156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 902.635038][T27156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 902.662483][T27156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 902.695927][T27156] hsr_slave_0: entered promiscuous mode [ 902.702378][T27156] hsr_slave_1: entered promiscuous mode [ 902.708677][T27156] debugfs: 'hsr0' already exists in 'hsr' [ 902.714755][T27156] Cannot create hsr debugfs directory [ 902.811049][T27156] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 902.919800][T27257] syzkaller0: entered promiscuous mode [ 902.933248][T27257] syzkaller0: entered allmulticast mode [ 902.966464][T27156] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.030355][T27156] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.084463][T27267] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6960'. [ 903.117498][T27156] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 903.362295][T27156] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 903.375348][T27156] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 903.383719][T27285] validate_nla: 7 callbacks suppressed [ 903.383791][T27285] netlink: 'syz.4.6968': attribute type 10 has an invalid length. [ 903.398171][T27156] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 903.408646][T27156] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 903.416664][T27156] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 903.425685][T27156] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 903.433697][T27156] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 903.461491][T27290] netlink: 28 bytes leftover after parsing attributes in process `syz.4.6970'. [ 903.479801][T27156] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 903.656629][T27156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 903.669372][T27156] 8021q: adding VLAN 0 to HW filter on device team0 [ 903.680395][T13509] bridge0: port 1(bridge_slave_0) entered blocking state [ 903.687599][T13509] bridge0: port 1(bridge_slave_0) entered forwarding state [ 903.710850][ T315] bridge0: port 2(bridge_slave_1) entered blocking state [ 903.717950][ T315] bridge0: port 2(bridge_slave_1) entered forwarding state [ 903.837853][T27323] netlink: 'syz.4.6980': attribute type 10 has an invalid length. [ 903.899633][T27329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.6983'. [ 904.052246][T27156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 904.068484][T27344] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6988'. [ 904.102417][T27344] netlink: 132 bytes leftover after parsing attributes in process `syz.4.6988'. [ 904.146744][T27156] veth0_vlan: entered promiscuous mode [ 904.154883][T27156] veth1_vlan: entered promiscuous mode [ 904.181418][T27156] veth0_macvtap: entered promiscuous mode [ 904.206514][T27156] veth1_macvtap: entered promiscuous mode [ 904.227762][T27362] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6992'. [ 904.239286][T27156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 904.271554][T27156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 904.293153][ T4890] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.324516][ T4890] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.345414][ T4890] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.362218][ T4890] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 904.378235][T27374] netlink: 'syz.5.7000': attribute type 10 has an invalid length. [ 904.387521][T27368] syzkaller0: entered promiscuous mode [ 904.393405][T27368] syzkaller0: entered allmulticast mode [ 904.433167][T27379] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7001'. [ 904.457701][T27379] netlink: 132 bytes leftover after parsing attributes in process `syz.4.7001'. [ 904.539232][T27388] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7006'. [ 904.876630][T27416] netlink: 20 bytes leftover after parsing attributes in process `syz.9.7017'. [ 904.888899][T27419] netlink: 'syz.0.7018': attribute type 10 has an invalid length. [ 904.910102][T27416] netlink: 132 bytes leftover after parsing attributes in process `syz.9.7017'. [ 905.313958][T27445] 8021q: VLANs not supported on vcan0 [ 905.374926][T27445] bridge0: port 1(bridge_slave_0) entered disabled state [ 905.389413][T27445] bridge0: port 2(bridge_slave_1) entered disabled state [ 905.891000][T27481] netlink: 'syz.2.7045': attribute type 10 has an invalid length. [ 906.187382][T27507] pimreg: tun_chr_ioctl cmd 1074025681 [ 906.266415][T27517] netlink: 'syz.4.7062': attribute type 10 has an invalid length. [ 907.261422][T27569] syzkaller0: entered promiscuous mode [ 907.266954][T27569] syzkaller0: entered allmulticast mode [ 907.546074][T27601] netlink: 'syz.4.7100': attribute type 10 has an invalid length. [ 907.603662][T27603] tap0: tun_chr_ioctl cmd 1074025681 [ 907.635843][T27603] tap0: tun_chr_ioctl cmd 2147767517 [ 908.061297][T27628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 908.092400][T27628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 908.252437][T27644] syzkaller0: entered promiscuous mode [ 908.258029][T27644] syzkaller0: entered allmulticast mode [ 908.478494][T27664] __nla_validate_parse: 8 callbacks suppressed [ 908.478513][T27664] netlink: 132 bytes leftover after parsing attributes in process `syz.9.7128'. [ 908.674800][T27677] syzkaller0: entered promiscuous mode [ 908.680449][T27677] syzkaller0: entered allmulticast mode [ 909.533522][T27747] netlink: 16 bytes leftover after parsing attributes in process `syz.0.7165'. [ 909.635165][T27756] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7169'. [ 910.779161][T27793] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7182'. [ 910.792707][T27794] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7181'. [ 911.136482][T27801] syzkaller0: entered promiscuous mode [ 911.147839][T27801] syzkaller0: entered allmulticast mode [ 911.262515][T27828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7194'. [ 911.651048][T27856] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7206'. [ 912.253442][T27903] netlink: 72 bytes leftover after parsing attributes in process `syz.5.7227'. [ 912.260442][T27905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 912.274498][T27905] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 912.368144][T27915] netlink: 'syz.0.7233': attribute type 10 has an invalid length. [ 912.467544][T27925] syzkaller0: entered promiscuous mode [ 912.479560][T27925] syzkaller0: entered allmulticast mode [ 912.524309][T27933] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=27933 comm=syz.9.7241 [ 912.538082][T27933] bridge0: port 1(bridge_slave_0) entered disabled state [ 912.709260][T27939] netlink: 72 bytes leftover after parsing attributes in process `syz.9.7244'. [ 912.908942][T27950] netlink: 132 bytes leftover after parsing attributes in process `syz.0.7246'. [ 912.965867][T27953] loop9: detected capacity change from 0 to 512 [ 912.981026][T27953] EXT4-fs (loop9): blocks per group (255) and clusters per group (8192) inconsistent [ 913.241113][T27962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.250816][T27962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.297674][T27964] loop5: detected capacity change from 0 to 1024 [ 913.308496][T27964] EXT4-fs: inline encryption not supported [ 913.464435][T27964] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 913.510068][ T28] audit: type=1400 audit(913.477:2888): avc: denied { write } for pid=27963 comm="syz.5.7254" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 913.595207][T27973] netlink: 72 bytes leftover after parsing attributes in process `syz.0.7257'. [ 913.620310][T26025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 913.793659][T27981] loop0: detected capacity change from 0 to 512 [ 913.810901][T27981] EXT4-fs: Ignoring removed i_version option [ 913.837059][T27981] EXT4-fs: Ignoring removed nobh option [ 913.853986][T27981] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 913.866316][T27981] EXT4-fs (loop0): 1 truncate cleaned up [ 913.876486][T27981] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 913.890900][ T28] audit: type=1400 audit(913.867:2889): avc: denied { write } for pid=27980 comm="syz.0.7262" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 913.998837][T27986] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7258'. [ 914.056084][T27986] bridge1: port 1(erspan0) entered blocking state [ 914.083951][T27986] bridge1: port 1(erspan0) entered disabled state [ 914.107186][T27986] erspan0: entered allmulticast mode [ 914.137190][T27986] erspan0: entered promiscuous mode [ 914.153581][T25142] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 914.803607][T28012] loop4: detected capacity change from 0 to 512 [ 914.855283][T28012] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 914.877398][ T28] audit: type=1400 audit(914.847:2890): avc: denied { write } for pid=28010 comm="syz.4.7274" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 914.937643][T28024] xt_hashlimit: size too large, truncated to 1048576 [ 915.094145][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888127a1c800: rx timeout, send abort [ 915.102745][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888127a1c800: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 915.212376][T28037] loop5: detected capacity change from 0 to 128 [ 915.221261][T28037] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 915.232927][T23854] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 915.242858][T28037] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 915.290340][T28039] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7281'. [ 915.306269][T28039] bridge1: port 1(erspan0) entered blocking state [ 915.313033][T28039] bridge1: port 1(erspan0) entered disabled state [ 915.319657][T28039] erspan0: entered allmulticast mode [ 915.326272][T28039] erspan0: entered promiscuous mode [ 915.360136][T13509] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 915.399876][ T28] audit: type=1400 audit(915.367:2891): avc: denied { write } for pid=28040 comm="syz.5.7286" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 915.491359][T28047] syzkaller0: entered promiscuous mode [ 915.497118][T28047] syzkaller0: entered allmulticast mode [ 915.706566][T28076] loop2: detected capacity change from 0 to 512 [ 915.980453][T28102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7302'. [ 916.047294][T28106] bridge1: port 1(erspan0) entered blocking state [ 916.065357][T28106] bridge1: port 1(erspan0) entered disabled state [ 916.081859][T28106] erspan0: entered allmulticast mode [ 916.093115][T28106] erspan0: entered promiscuous mode [ 916.346807][T28129] loop5: detected capacity change from 0 to 512 [ 916.401268][T28129] EXT4-fs (loop5): orphan cleanup on readonly fs [ 916.415307][T28129] EXT4-fs (loop5): 1 orphan inode deleted [ 916.432587][T28129] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 916.633838][T28181] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7309'. [ 916.650137][T28179] loop9: detected capacity change from 0 to 1024 [ 916.656767][T28181] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7309'. [ 916.683044][T28179] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 916.723304][T28189] loop2: detected capacity change from 0 to 128 [ 916.730048][T28189] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 916.738415][ T28] audit: type=1400 audit(916.707:2892): avc: denied { write } for pid=28178 comm="syz.9.7310" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 916.759689][ T28] audit: type=1400 audit(916.717:2893): avc: denied { map } for pid=28178 comm="syz.9.7310" path="/367/file1/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 916.776846][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888135d95200: rx timeout, send abort [ 916.782721][ T28] audit: type=1400 audit(916.717:2894): avc: denied { execute } for pid=28178 comm="syz.9.7310" path="/367/file1/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 916.792053][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff888135d95200: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 916.843700][T26025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.957889][T24591] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 916.973999][T28201] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7315'. [ 917.013249][T28201] erspan0: left allmulticast mode [ 917.028250][T28201] erspan0: left promiscuous mode [ 917.044686][T28201] bridge1: port 1(erspan0) entered disabled state [ 917.112215][T28201] bridge2: port 1(erspan0) entered blocking state [ 917.139848][T28201] bridge2: port 1(erspan0) entered disabled state [ 917.155955][T28201] erspan0: entered allmulticast mode [ 917.193168][T28201] erspan0: entered promiscuous mode [ 917.797155][T28238] loop0: detected capacity change from 0 to 4096 [ 917.804160][T28238] EXT4-fs: test_dummy_encryption option not supported [ 917.822506][T28240] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7333'. [ 917.866571][T28240] erspan0: left allmulticast mode [ 917.880283][T28240] erspan0: left promiscuous mode [ 917.886118][T28240] bridge1: port 1(erspan0) entered disabled state [ 917.895366][T28240] bridge2: port 1(erspan0) entered blocking state [ 917.901928][T28240] bridge2: port 1(erspan0) entered disabled state [ 917.908523][T28240] erspan0: entered allmulticast mode [ 917.914780][T28240] erspan0: entered promiscuous mode [ 917.963994][T28249] EXT4-fs: Ignoring removed bh option [ 917.974342][T28249] EXT4-fs (loop2): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 918.007007][T28249] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 918.037548][ T11] hid-generic 0006:0008:0001.001A: unknown main item tag 0x0 [ 918.048111][T28248] syzkaller0: entered promiscuous mode [ 918.057408][ T11] hid-generic 0006:0008:0001.001A: unknown main item tag 0x0 [ 918.062756][T28248] syzkaller0: entered allmulticast mode [ 918.071257][T27156] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 918.080169][T28248] tipc: Started in network mode [ 918.085297][T28248] tipc: Node identity da8045fc6d86, cluster identity 4711 [ 918.086674][ T11] hid-generic 0006:0008:0001.001A: unknown main item tag 0x0 [ 918.092873][T28248] tipc: Enabled bearer , priority 0 [ 918.112225][T28247] tipc: Resetting bearer [ 918.118037][ T11] hid-generic 0006:0008:0001.001A: unknown main item tag 0x0 [ 918.118080][ T11] hid-generic 0006:0008:0001.001A: unknown main item tag 0x0 [ 918.133325][ T11] hid-generic 0006:0008:0001.001A: unknown main item tag 0x0 [ 918.149747][ T11] hid-generic 0006:0008:0001.001A: unknown main item tag 0x0 [ 918.157474][ T11] hid-generic 0006:0008:0001.001A: unknown main item tag 0x0 [ 918.157738][T28247] tipc: Disabling bearer [ 918.165247][ T11] hid-generic 0006:0008:0001.001A: unknown main item tag 0x0 [ 918.204248][T28261] xt_hashlimit: size too large, truncated to 1048576 [ 918.215777][ T11] hid-generic 0006:0008:0001.001A: unknown main item tag 0x0 [ 918.233311][ T11] hid-generic 0006:0008:0001.001A: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 918.300385][ T28] audit: type=1400 audit(918.267:2895): avc: denied { ioctl } for pid=28268 comm="syz.9.7344" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9203 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 918.496080][T28281] set_capacity_and_notify: 1 callbacks suppressed [ 918.496100][T28281] loop2: detected capacity change from 0 to 256 [ 918.685967][ C1] vxcan1: j1939_tp_rxtimer: 0xffff888113fe1c00: rx timeout, send abort [ 918.694567][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff888113fe1c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 918.777162][T28285] syzkaller0: entered promiscuous mode [ 918.803752][T28285] syzkaller0: entered allmulticast mode [ 918.855706][T28288] loop5: detected capacity change from 0 to 256 [ 918.909008][T28288] FAT-fs (loop5): invalid media value (0x67) [ 918.976809][T28288] FAT-fs (loop5): Can't find a valid FAT filesystem [ 919.368870][T28295] loop4: detected capacity change from 0 to 512 [ 919.379020][T28296] loop5: detected capacity change from 0 to 512 [ 919.394529][T28298] loop2: detected capacity change from 0 to 512 [ 919.403106][T28295] EXT4-fs: Ignoring removed oldalloc option [ 919.412798][T28296] EXT4-fs: Ignoring removed i_version option [ 919.439474][T28296] EXT4-fs: Ignoring removed bh option [ 919.452189][T28298] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.7356: iget: bad i_size value: 38620345925642 [ 919.484640][T28295] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 919.504677][T20864] ================================================================== [ 919.512850][T20864] BUG: KCSAN: data-race in dentry_unlink_inode / path_openat [ 919.515435][T28298] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 919.520273][T20864] [ 919.520283][T20864] write to 0xffff88811abb2cf0 of 8 bytes by task 18953 on cpu 1: [ 919.520306][T20864] dentry_unlink_inode+0x65/0x260 [ 919.544536][T20864] dentry_kill+0x184/0x500 [ 919.548984][T20864] finish_dput+0x16/0x1d0 [ 919.552490][T28295] Quota error (device loop4): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 919.553346][T20864] dput+0x48/0x50 [ 919.567326][T20864] filename_renameat2+0x478/0x6a0 [ 919.570224][ T28] audit: type=1400 audit(919.477:2896): avc: denied { write } for pid=28293 comm="syz.4.7355" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 919.572380][T20864] __se_sys_rename+0x4a/0x1c0 [ 919.572410][T20864] __x64_sys_rename+0x31/0x40 [ 919.602863][T20864] x64_sys_call+0x2b3/0x3020 [ 919.607498][T20864] do_syscall_64+0x136/0x3c0 [ 919.612248][T20864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.618164][T20864] [ 919.620500][T20864] read to 0xffff88811abb2cf0 of 8 bytes by task 20864 on cpu 0: [ 919.628143][T20864] path_openat+0x649/0x2000 [ 919.632681][T20864] do_file_open+0x16c/0x290 [ 919.637211][T20864] do_sys_openat2+0xa0/0x130 [ 919.641824][T20864] __x64_sys_openat+0xf2/0x120 [ 919.646621][T20864] x64_sys_call+0x1e39/0x3020 [ 919.651317][T20864] do_syscall_64+0x136/0x3c0 [ 919.655944][T20864] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 919.661848][T20864] [ 919.664181][T20864] value changed: 0xffff88813ea43428 -> 0x0000000000000000 [ 919.671297][T20864] [ 919.673655][T20864] Reported by Kernel Concurrency Sanitizer on: [ 919.679825][T20864] CPU: 0 UID: 0 PID: 20864 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 919.688791][T20864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 919.698860][T20864] ================================================================== [ 919.728128][T28296] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 919.743066][ T28] audit: type=1400 audit(919.717:2897): avc: denied { write } for pid=28294 comm="syz.5.7354" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 919.765124][T28295] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0 [ 919.774766][T28295] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.7355: Failed to acquire dquot type 1 [ 919.787076][T28298] EXT4-fs error (device loop2): ext4_orphan_get:1404: comm syz.2.7356: couldn't read orphan inode 15 (err -117) [ 919.798979][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 919.798996][ C1] EXT4-fs (loop2): initial error at time 919: ext4_orphan_get:1399: inode 15 [ 919.799057][ C1] EXT4-fs (loop2): last error at time 919: ext4_orphan_get:1399: inode 15 [ 919.828901][T28298] loop2: lost filesystem error report for type 5 error -117 [ 919.829666][T28298] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 919.853824][ T28] audit: type=1400 audit(919.827:2898): avc: denied { write } for pid=28297 comm="syz.2.7356" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 920.448450][T23854] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.450238][T27156] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 920.458363][T26025] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.