last executing test programs: 6m39.873124633s ago: executing program 4 (id=519): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) fadvise64(0xffffffffffffffff, 0x7f, 0xe4ff, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, 0x0, 0x48001) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$FIBMAP(0xffffffffffffffff, 0x1, 0x0) uname(&(0x7f0000000080)=""/161) read(0xffffffffffffffff, &(0x7f00000001c0)=""/160, 0xa0) ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) dup2(r0, r0) syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 6m39.734977347s ago: executing program 4 (id=521): socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$inet(0x2, 0x2, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x8840) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="20002dbd7000fedbdf251c000000080003", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r4, @ANYBLOB="945f71f20300000500000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000200), r0) sendmsg$IEEE802154_ASSOCIATE_RESP(r5, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000340)={0x14, r6, 0x5, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000) r7 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0xd, 0xffffffffffffffff, 0xc) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0xbc, 0x2, 0x80, 0x9, 0x0, 0x6, 0x40211, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x92, 0x4, @perf_config_ext={0x395, 0x7}, 0x10c, 0x4, 0x7, 0x3, 0x2, 0x9, 0x4, 0x0, 0x1000}, 0x0, 0xe, r7, 0x4) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'macsec0\x00'}) r10 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, r10, 0x200, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) shutdown(r8, 0x1) setsockopt(r8, 0x84, 0x80, &(0x7f00000001c0), 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r11, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{0x0}], 0x1}, 0x1f00) sendmsg$tipc(r12, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r12, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4000011) 6m38.613905552s ago: executing program 4 (id=538): syz_mount_image$iso9660(&(0x7f0000001080), &(0x7f00000010c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="c672c4e23832f90150ab8568d0c31651713ca5f4a7614bcb04bac8a32f90ae8411029580dec30eaeb30d4500a00000000000007e9d7b285bfc87f477d90463153fb255ba"], 0x1, 0x1045, &(0x7f0000001140)="$eJzs3Vl0nGd9+PHfTLxMbBYDxnHyD2RwSHCMcbQkNsZhUbQ4CrIVLDnEbMGxZSMi28EOS8wWln/3DWhL6V5aqLuRUkrpLXdtL3rR03O46W25LOpGS0uh5zd6JCuObcnYslw/n48OaDzzzLzvOD76vs+rmXkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIhG/0BXV3cjRob37n+kfWH9A/tG91zk9tnH+0aj86jfWHC7EY38X7RasXHmqo3Pa8zd+oL8/02xfubR1kcrv7fi9NoN63a9ZEVz9v4X2aGr4tRTpx8/ODU1cXK5d2SZ7B7cOzw2Orynb/dge3hstL1z+/auux8YGmsPDY8Mjh0YGx/c0+7fN9g3Prqvvbn/rnb3zp297cFtB0b379090DcyOHvljtf0dHVtbz+47aHBvn1jo3vvfnDbWP8DwyMjw3t3d8bkzTlmR/5DfPPweHt8sG9Pu31kcmqid6GdzEHdixnUs9Cgnq6enu7unp7u7ffuvHdHV9eK51zRdY54zojl/0fL8lqSn+Pwo2iW/sdIDMfe2B+PRPu8X/0xEPtiNPZc4PZitv933D140e3O7/+tM1fduu5s/18cnf5vmHm0DRfq/wX25ep9nYqn4nQ8HgdjKqZiIk4u+x5d3a/dMRh7YzjGYjSGY0/0da5pl2vasTO2x/boikfjgRiKsWjHUAzHSAzGWByIsRiPwc6/qP7YF4PRF+MxGvuiHZujP+6KdnTHztgZvdGOwdgWB2I09sfe2B0D0dd5lCMx2fl7773IPs4N6l7MoJ6LDNJ/Lt9S/SiHS/bD2f4DAPW4f7BP/wGgMnvH9nX16D8AVGXc/B8AAAAAAAAAAAAAAAAAAAAAAAAAAACutEY04x8i4ot3Tjfmr0zZ6iz4f8G7rWp07tmMxsxavtHa3rujf6h7aKCrq6uru3uw+6rs/ZwXxejYeF+7/8SxJ05OnDo1cbi9//jkoROHJxb9CJd7/0t037pvr167Yd2unfmHLUcnjk+eOjF57ODRJdsgAMyzIprx7Yi47ZnpxitKy2PL/oGh9sjD7eHjR07MG9ucXSbgMlu5wLHFUlt1Vbem7QBcg1ZGM3oj4puPTDc2ZePLMUDz1Z2FAZd79y6oc96hEdE5Z6GxAHBJVkUzRiPi8Iu+0rg9Im6I62B+38pjgs6T2D8w1HkiU5MHjz8ZnXMYN8yMWnfunWbPfVzjxxLrIt6U+7rKmo0A/OhWRzO+GhHHXtiKV3Z+HwAAXO9a0Zw5hx7TjTuWe2cAAAAAAAAAAAAAAAAAAAAAAAAAAADgOtGIZuyIiNba6UbXvOsvb/3/3qGBq7L3c6z/DwCXYEU047tl/f9u6/9fedoOwDVoZTSjv6z/32P9fwCowqpoxqNl/f9e6/9f+8cS1v8H4ApYHc34Zln//x7r/wNAFVrRjJnX/U037l3unQEAAAAAAAAAAAAAAAAAAAAAAAAAAIDrxI3RjNUR0Rz4QGddmfnr0s9fYeZ5Cyw3kzdvK5cXsybfyrLWYLORX1fwCQEAC2pFM+7rXJpu9C33zgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADXtGY0428jovGt6UY0IuLpiHbMfO9a7p0DAJZGoxn/GBEv+/vprH/ct+7bq9duWLdrZ0TcEDd0Dgka88ePjo33tftPHHvi5MSpUxOH2/uPTx46cXhisZtr9Q/sG92zFE9kUVYt8f6vuuw9bOUx2TxbOju8f2Cos9NTkwePP5lXNxs3XPamAKhXK5rx/c6l6UZjuXcGALgqVjaa8fyIeOx7Z+bmnStm5vwrZv7U1fxh8aX1Z+emrXKwMHvMMHve4CUXuXze44stRyeOT546MXns4NGFJuGtsl0zXwC4PI1GM/4qInY/trHT1Uasee456DLuOxGx4zPtMi7W5LjZE96rO3FvHZmcmth26MTU4Rz/2Yj46y/fWsY3V+X4clARK8+O78qxz0TEt74+OzY6Y1eXsa2zY7tz7I6IOPi1Z49tlbE3nh3bk2M3RcTU55499sYyds3Zsb1L+7cMANeWnP9/MCI+v/XMXJsvNv+fncOPl+9LPf9fOe9OrbLdlVfqyQNApXKO/Ddl/r9ygfn/30XEMz+4tYybmUuvKbevnTefv/rPAgC4FDn/fyh7/oUzc+fyy/y/TLPPzv8/ve7sHP5w+b7U8//V58z/c7s3XaknDwCVyv7fHxE9B87M/b59Mf2fnfcvdf9b5/Q/t7vxSj15AKhU9v/tETH20Jm519Atpv+bby/3L39eqv7feE7/c7s3X7FnDwB1yv7nfPrhG8/MvS7+Wur/Gv0HgCsu+/+qiPj6X56ZO6e/mP7fUt4dsNTn/9ee0//c7suv2LMHgDo1Yn1jpswr46WdS0PDI4Newg8AAADXk876PutnT/c3XhoN838AAAC43jRiQ/n9/5q4aebSkZiMqZiw/D8AAABcLzq//98ws5xfROOmaJj/AwAAwPVmU+f9/533AHQ+/rcVpzsf17Oi2Tk30GgsPKKxNTbOjNhYVgU6XEbMnF9orBkaHhnc1j86sqs77ux8ykDnnQbnfbSVnbcfbImbZ0bdXD6TaM2zH7GVo7q37eqOLXHLzMhbZj6R8PbN5xnZs+iRvTkSAK53mxbo8WL6vyVumxlx28ynAq645Txl7VJWALhWbOq8/r/zGoAL9n+BEY17Fpj/v3juJQXb4lCciKk4HFs77zbovOLgvI+6Zt7LELYucDbg7Nju2LrALP/s2J5LGNt71f+7AMBS2rRAhxfT/60LzP/XeEkhAFxTTj11+vGDU1MTJ5fwwnI/RwDg2VQaAAAAAAAAAAAAAACufVfj/X8uuODC/7ULy/2TCVhqzWjGP0VE41vTjXYjIp6OaMfMd5/WAwDXp+z/d0r/X6H/AFCF7P906f8m/QeAKmT//7n0/3b9B4AqZP//pfT/lfoPAFXI/v9r6f8d+g8AVcj+/1vp/536DwBVyP7/e+n/q/QfAKqQ/f9u6f9m/QeAKmT//6P0/y79B4AqZP//s/R/i/4DQBWy/98r/X+1/gNAFbL//1X6v1X/AaAK2f//Lv1/jf4DQBWy/98v/d+m/wBQhez//5T+363/AFCF7P8PSv+79B8AqpD9/2Hpf7f+A0AVsv9R+t+j/wBQhex/o/S/V/8BoArNcgYg+3+P/gNAFbL+N5T+36v/AFCF7P+K0v/t+g8AVcj+ryz936H/AFCF7P+q0v/X6j8AVCH7v7r0f6f+A0AVsv+t0v/X6T8AVCH7f2Pp/y79B4AqZP/XlP7fp/8AUIXs/9rS/9frPwBUIfv/vNL/N+g/AFQh+//80v836j8AVCH7/4LS/zfpPwBUIfv/wtL/Pv0HgCpk/9eV/t+v/wBQhez/i0r/+/UfAKqQ/X9x6f+A/gNAFbL/Lyn9H9R/AKhC9n996f+Q/gNAFbL/Ly39363/AFCF7P+G0v8H9B8AqpD9v6n0f1j/AaAK2f+Npf8P6j8AVCH7f3Pp/5v1HwCqkP2/pfR/RP8BoArZ//9X+r9H/wGgCtn/W0v/9+o/AFQh+/+y0v9R/QeAKmT/X176/5D+A0AVsv+3lf6/Rf8BoArZ/3bp/z79B4AqZP9fUfo/pv8AUIXs/6bS/3H9B4AqZP9vL/3fr/8AUIXs/ytL/x/WfwCoQvb/jtL/t+o/AFQh+39n6f8j+g8AVcj+v6r0/4D+A0AVsv+bS//fpv8AUIXs/12l/2/XfwCoQvZ/S+n/O/QfAKqQ/X916f879R8AqpD931r6/y79B4AqZP9fU/r/qP4DQBWy/9tK/9+t/wBQhez/3aX/B/UfAKqQ/e8q/X9M/wGgCtn/7tL/Q/oPAFXI/veU/h/WfwCoQva/t/R/Qv8BoArZ/3tK/4/oPwBUIft/b+n/Uf0HgCpk/7eX/r9H/wGgCtn/HaX/k/oPAFXI/r+29P+9+g8AVcj+7yz9f1z/AaAK2f/Xlf5P6T8AVCH7v6v0/5j+A0AVsv/3lf4f138AqEL2//Wl/yf0HwCqkP1/Q+n/E/oPAFXI/r+x9P99+g8AVcj+v6n0/6T+A0AVsv99pf+n9B8AqpD9v7/0/0n9B4AqZP/7S//fr/8AUIXs/0Dp/wf0HwCqkP0fLP3/oP4DQBWy/0Ol/x/SfwCoQvZ/d+n/U/oPAFXI/j9Q+n9a/wGgCtn/4dL/D+s/AFQh+/9g6f9H9B8AqpD9f3Pp/0f1HwCqkP0fKf3/mP4DQBWy/3tK/z+u/wBQhez/3tL/p/UfAKqQ/R8t/f+E/gNAFbL/D5X+f1L/AaAK2f+3lP5/Sv8BoArZ/32l/5/WfwCoQvZ/rPT//+s/AFQh+z9e+v9j+g8AVcj+7y/9/3H9B4AqZP8fLv3/Cf0HgCpk/99a+v+T+g8AVcj+P1L6/1P6DwBVyP4fKP3/af0HgCpk/99W+v8z+g8AVcj+v730/2f1HwCqkP1/R+n/z+k/AFQh+//O0v+f138AqEL2/12l/7+g/wBQhez/o6X/n9F/AKhC9v/dpf+f1X8AqEL2/2Dp/+f0HwCqkP1/rPT/F/UfAKqQ/T9U+v9L+g8AVcj+Hy79/2X9B4AqZP8nSv8/r/8AUIXs/5HS/1/RfwCoQvb/aOn/F/QfAKqQ/X9P6f+v6j8AVCH7P1n6/2v6DwBVyP6/t/T/1/UfAKqQ/X+89P839B8AqpD9nyr9/039B4AqZP+Plf7/lv4DQBWy/8dL/39b/wGgCtn/E6X/v6P/AFCF7P8Tpf9f1H8AqEL2/32l/7+r/wBQhez/ydL/39N/AKhC9v9U6f+X9B8AqpD9f7L0/8v6DwBVyP6/v/T/9/UfAKqQ/f9A6f8Z/QeAKmT/P1j6/wf6DwBVyP5/qPT/D/UfAKqQ/X+q9P+P9B8AqpD9P136/8f6DwBVyP5/uPT/T/QfAKqQ/f9I6f9X9B8AqpD9/2jp/zP6DwBVyP5/rPT/T/UfAKqQ/f946f9X9R8AqpD9f7r0/8/0HwCqkP3/ROn/1/QfAKqQ/f9k6f+f6z8AVCH7/6nS/6/rPwBUIfv/6dL/v9B/AKjC/wYAAP//aB9Xnw==") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x8003, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) clock_gettime(0x2, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x89480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x9) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x400, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffffffc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'bridge_slave_0\x00', 0x4}, 0x18) 6m38.372628541s ago: executing program 4 (id=529): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000800", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0x1c, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x800}, [@map_fd={0x18, 0x0, 0x1, 0x0, r0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_val={0x18, 0x2, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @alu={0x7, 0x0, 0x0, 0x2, 0x3, 0xfffffffffffffff8, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @generic={0x4, 0x8, 0x7, 0x6, 0x10}, @generic={0xac, 0x8, 0x2, 0x3ff, 0x729}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x72, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x6, 0x8, &(0x7f00000002c0)="b80000050000", &(0x7f0000000300)=""/8, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffb}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x3) ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x0) r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) r4 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000000c0)={'veth1_virt_wifi\x00', &(0x7f0000000040)=@ethtool_eee={0x44, 0x1, 0x3, 0x400, 0x3, 0x7, 0x15ac, 0xf, [0x4, 0x8]}}) setns(r3, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$unix(0x1, 0x5, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) bind$unix(r7, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) listen(r7, 0x0) ioctl$int_in(r6, 0x5421, &(0x7f0000000180)=0x8) connect$unix(r6, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) connect$unix(r6, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e) ptrace(0x10, r5) ptrace$setregset(0x4205, r5, 0x1, &(0x7f0000000100)={0x0, 0x700}) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r8, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x24) 6m38.132501668s ago: executing program 4 (id=532): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x40, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0x8}, 0x100882, 0x7ff, 0x6, 0x6, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1002, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x41, 0x30012}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) prctl$PR_GET_THP_DISABLE(0x2a) pread64(0xffffffffffffffff, &(0x7f0000000380)=""/148, 0x94, 0x40002f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7a}, 0x94) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000000)={[{@noload}, {@stripe={'stripe', 0x3d, 0xdc}}, {@data_err_abort}, {@noload}, {@data_err_ignore}, {@test_dummy_encryption}]}, 0xff, 0x451, &(0x7f0000000940)="$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") sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_pidfd_open(r2, 0x0) wait4(r2, 0x0, 0x40000000, 0x0) r4 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r3, 0xc040ff0b, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x4) fcntl$notify(r5, 0x402, 0x6b) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000040)) rename(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000200)='./file0\x00') syz_open_procfs(0x0, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000240)={0x0, 0xff}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000001900)={r6, 0x1000, "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"}, &(0x7f0000002940)=0x1008) syz_emit_ethernet(0x52, &(0x7f0000000bc0)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0xc, 0x4, 0x0, 0x0, 0x44, 0x64, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x2}, @rand_addr=0x64010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @ssrr={0x89, 0x3, 0x1b}, @lsrr={0x83, 0x3, 0x1}]}}, {{0x4e20, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0x3}}}}}}, 0x0) 6m38.009493192s ago: executing program 4 (id=534): syz_mount_image$iso9660(&(0x7f0000001080), &(0x7f00000010c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="c672c4e23832f90150ab8568d0c31651713ca5f4a7614bcb04bac8a32f90ae8411029580dec30eaeb30d4500a00000000000007e9d7b285bfc87f477d90463153fb255ba"], 0x1, 0x1045, &(0x7f0000001140)="$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") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x8003, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) clock_gettime(0x2, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x89480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x9) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x400, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffffffc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'bridge_slave_0\x00', 0x4}, 0x18) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'syz_tun\x00', 0x1}, 0x18) 6m37.955448053s ago: executing program 32 (id=534): syz_mount_image$iso9660(&(0x7f0000001080), &(0x7f00000010c0)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="c672c4e23832f90150ab8568d0c31651713ca5f4a7614bcb04bac8a32f90ae8411029580dec30eaeb30d4500a00000000000007e9d7b285bfc87f477d90463153fb255ba"], 0x1, 0x1045, &(0x7f0000001140)="$eJzs3Vl0nGd9+PHfTLxMbBYDxnHyD2RwSHCMcbQkNsZhUbQ4CrIVLDnEbMGxZSMi28EOS8wWln/3DWhL6V5aqLuRUkrpLXdtL3rR03O46W25LOpGS0uh5zd6JCuObcnYslw/n48OaDzzzLzvOD76vs+rmXkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIhG/0BXV3cjRob37n+kfWH9A/tG91zk9tnH+0aj86jfWHC7EY38X7RasXHmqo3Pa8zd+oL8/02xfubR1kcrv7fi9NoN63a9ZEVz9v4X2aGr4tRTpx8/ODU1cXK5d2SZ7B7cOzw2Orynb/dge3hstL1z+/auux8YGmsPDY8Mjh0YGx/c0+7fN9g3Prqvvbn/rnb3zp297cFtB0b379090DcyOHvljtf0dHVtbz+47aHBvn1jo3vvfnDbWP8DwyMjw3t3d8bkzTlmR/5DfPPweHt8sG9Pu31kcmqid6GdzEHdixnUs9Cgnq6enu7unp7u7ffuvHdHV9eK51zRdY54zojl/0fL8lqSn+Pwo2iW/sdIDMfe2B+PRPu8X/0xEPtiNPZc4PZitv933D140e3O7/+tM1fduu5s/18cnf5vmHm0DRfq/wX25ep9nYqn4nQ8HgdjKqZiIk4u+x5d3a/dMRh7YzjGYjSGY0/0da5pl2vasTO2x/boikfjgRiKsWjHUAzHSAzGWByIsRiPwc6/qP7YF4PRF+MxGvuiHZujP+6KdnTHztgZvdGOwdgWB2I09sfe2B0D0dd5lCMx2fl7773IPs4N6l7MoJ6LDNJ/Lt9S/SiHS/bD2f4DAPW4f7BP/wGgMnvH9nX16D8AVGXc/B8AAAAAAAAAAAAAAAAAAAAAAAAAAACutEY04x8i4ot3Tjfmr0zZ6iz4f8G7rWp07tmMxsxavtHa3rujf6h7aKCrq6uru3uw+6rs/ZwXxejYeF+7/8SxJ05OnDo1cbi9//jkoROHJxb9CJd7/0t037pvr167Yd2unfmHLUcnjk+eOjF57ODRJdsgAMyzIprx7Yi47ZnpxitKy2PL/oGh9sjD7eHjR07MG9ucXSbgMlu5wLHFUlt1Vbem7QBcg1ZGM3oj4puPTDc2ZePLMUDz1Z2FAZd79y6oc96hEdE5Z6GxAHBJVkUzRiPi8Iu+0rg9Im6I62B+38pjgs6T2D8w1HkiU5MHjz8ZnXMYN8yMWnfunWbPfVzjxxLrIt6U+7rKmo0A/OhWRzO+GhHHXtiKV3Z+HwAAXO9a0Zw5hx7TjTuWe2cAAAAAAAAAAAAAAAAAAAAAAAAAAADgOtGIZuyIiNba6UbXvOsvb/3/3qGBq7L3c6z/DwCXYEU047tl/f9u6/9fedoOwDVoZTSjv6z/32P9fwCowqpoxqNl/f9e6/9f+8cS1v8H4ApYHc34Zln//x7r/wNAFVrRjJnX/U037l3unQEAAAAAAAAAAAAAAAAAAAAAAAAAAIDrxI3RjNUR0Rz4QGddmfnr0s9fYeZ5Cyw3kzdvK5cXsybfyrLWYLORX1fwCQEAC2pFM+7rXJpu9C33zgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADXtGY0428jovGt6UY0IuLpiHbMfO9a7p0DAJZGoxn/GBEv+/vprH/ct+7bq9duWLdrZ0TcEDd0Dgka88ePjo33tftPHHvi5MSpUxOH2/uPTx46cXhisZtr9Q/sG92zFE9kUVYt8f6vuuw9bOUx2TxbOju8f2Cos9NTkwePP5lXNxs3XPamAKhXK5rx/c6l6UZjuXcGALgqVjaa8fyIeOx7Z+bmnStm5vwrZv7U1fxh8aX1Z+emrXKwMHvMMHve4CUXuXze44stRyeOT546MXns4NGFJuGtsl0zXwC4PI1GM/4qInY/trHT1Uasee456DLuOxGx4zPtMi7W5LjZE96rO3FvHZmcmth26MTU4Rz/2Yj46y/fWsY3V+X4clARK8+O78qxz0TEt74+OzY6Y1eXsa2zY7tz7I6IOPi1Z49tlbE3nh3bk2M3RcTU55499sYyds3Zsb1L+7cMANeWnP9/MCI+v/XMXJsvNv+fncOPl+9LPf9fOe9OrbLdlVfqyQNApXKO/Ddl/r9ygfn/30XEMz+4tYybmUuvKbevnTefv/rPAgC4FDn/fyh7/oUzc+fyy/y/TLPPzv8/ve7sHP5w+b7U8//V58z/c7s3XaknDwCVyv7fHxE9B87M/b59Mf2fnfcvdf9b5/Q/t7vxSj15AKhU9v/tETH20Jm519Atpv+bby/3L39eqv7feE7/c7s3X7FnDwB1yv7nfPrhG8/MvS7+Wur/Gv0HgCsu+/+qiPj6X56ZO6e/mP7fUt4dsNTn/9ee0//c7suv2LMHgDo1Yn1jpswr46WdS0PDI4Newg8AAADXk876PutnT/c3XhoN838AAAC43jRiQ/n9/5q4aebSkZiMqZiw/D8AAABcLzq//98ws5xfROOmaJj/AwAAwPVmU+f9/533AHQ+/rcVpzsf17Oi2Tk30GgsPKKxNTbOjNhYVgU6XEbMnF9orBkaHhnc1j86sqs77ux8ykDnnQbnfbSVnbcfbImbZ0bdXD6TaM2zH7GVo7q37eqOLXHLzMhbZj6R8PbN5xnZs+iRvTkSAK53mxbo8WL6vyVumxlx28ynAq645Txl7VJWALhWbOq8/r/zGoAL9n+BEY17Fpj/v3juJQXb4lCciKk4HFs77zbovOLgvI+6Zt7LELYucDbg7Nju2LrALP/s2J5LGNt71f+7AMBS2rRAhxfT/60LzP/XeEkhAFxTTj11+vGDU1MTJ5fwwnI/RwDg2VQaAAAAAAAAAAAAAACufVfj/X8uuODC/7ULy/2TCVhqzWjGP0VE41vTjXYjIp6OaMfMd5/WAwDXp+z/d0r/X6H/AFCF7P906f8m/QeAKmT//7n0/3b9B4AqZP//pfT/lfoPAFXI/v9r6f8d+g8AVcj+/1vp/536DwBVyP7/e+n/q/QfAKqQ/f9u6f9m/QeAKmT//6P0/y79B4AqZP//s/R/i/4DQBWy/98r/X+1/gNAFbL//1X6v1X/AaAK2f//Lv1/jf4DQBWy/98v/d+m/wBQhez//5T+363/AFCF7P8PSv+79B8AqpD9/2Hpf7f+A0AVsv9R+t+j/wBQhex/o/S/V/8BoArNcgYg+3+P/gNAFbL+N5T+36v/AFCF7P+K0v/t+g8AVcj+ryz936H/AFCF7P+q0v/X6j8AVCH7v7r0f6f+A0AVsv+t0v/X6T8AVCH7f2Pp/y79B4AqZP/XlP7fp/8AUIXs/9rS/9frPwBUIfv/vNL/N+g/AFQh+//80v836j8AVCH7/4LS/zfpPwBUIfv/wtL/Pv0HgCpk/9eV/t+v/wBQhez/i0r/+/UfAKqQ/X9x6f+A/gNAFbL/Lyn9H9R/AKhC9n996f+Q/gNAFbL/Ly39363/AFCF7P+G0v8H9B8AqpD9v6n0f1j/AaAK2f+Npf8P6j8AVCH7f3Pp/5v1HwCqkP2/pfR/RP8BoArZ//9X+r9H/wGgCtn/W0v/9+o/AFQh+/+y0v9R/QeAKmT/X176/5D+A0AVsv+3lf6/Rf8BoArZ/3bp/z79B4AqZP9fUfo/pv8AUIXs/6bS/3H9B4AqZP9vL/3fr/8AUIXs/ytL/x/WfwCoQvb/jtL/t+o/AFQh+39n6f8j+g8AVcj+v6r0/4D+A0AVsv+bS//fpv8AUIXs/12l/2/XfwCoQvZ/S+n/O/QfAKqQ/X916f879R8AqpD931r6/y79B4AqZP9fU/r/qP4DQBWy/9tK/9+t/wBQhez/3aX/B/UfAKqQ/e8q/X9M/wGgCtn/7tL/Q/oPAFXI/veU/h/WfwCoQva/t/R/Qv8BoArZ/3tK/4/oPwBUIft/b+n/Uf0HgCpk/7eX/r9H/wGgCtn/HaX/k/oPAFXI/r+29P+9+g8AVcj+7yz9f1z/AaAK2f/Xlf5P6T8AVCH7v6v0/5j+A0AVsv/3lf4f138AqEL2//Wl/yf0HwCqkP1/Q+n/E/oPAFXI/r+x9P99+g8AVcj+v6n0/6T+A0AVsv99pf+n9B8AqpD9v7/0/0n9B4AqZP/7S//fr/8AUIXs/0Dp/wf0HwCqkP0fLP3/oP4DQBWy/0Ol/x/SfwCoQvZ/d+n/U/oPAFXI/j9Q+n9a/wGgCtn/4dL/D+s/AFQh+/9g6f9H9B8AqpD9f3Pp/0f1HwCqkP0fKf3/mP4DQBWy/3tK/z+u/wBQhez/3tL/p/UfAKqQ/R8t/f+E/gNAFbL/D5X+f1L/AaAK2f+3lP5/Sv8BoArZ/32l/5/WfwCoQvZ/rPT//+s/AFQh+z9e+v9j+g8AVcj+7y/9/3H9B4AqZP8fLv3/Cf0HgCpk/99a+v+T+g8AVcj+P1L6/1P6DwBVyP4fKP3/af0HgCpk/99W+v8z+g8AVcj+v730/2f1HwCqkP1/R+n/z+k/AFQh+//O0v+f138AqEL2/12l/7+g/wBQhez/o6X/n9F/AKhC9v/dpf+f1X8AqEL2/2Dp/+f0HwCqkP1/rPT/F/UfAKqQ/T9U+v9L+g8AVcj+Hy79/2X9B4AqZP8nSv8/r/8AUIXs/5HS/1/RfwCoQvb/aOn/F/QfAKqQ/X9P6f+v6j8AVCH7P1n6/2v6DwBVyP6/t/T/1/UfAKqQ/X+89P839B8AqpD9nyr9/039B4AqZP+Plf7/lv4DQBWy/8dL/39b/wGgCtn/E6X/v6P/AFCF7P8Tpf9f1H8AqEL2/32l/7+r/wBQhez/ydL/39N/AKhC9v9U6f+X9B8AqpD9f7L0/8v6DwBVyP6/v/T/9/UfAKqQ/f9A6f8Z/QeAKmT/P1j6/wf6DwBVyP5/qPT/D/UfAKqQ/X+q9P+P9B8AqpD9P136/8f6DwBVyP5/uPT/T/QfAKqQ/f9I6f9X9B8AqpD9/2jp/zP6DwBVyP5/rPT/T/UfAKqQ/f946f9X9R8AqpD9f7r0/8/0HwCqkP3/ROn/1/QfAKqQ/f9k6f+f6z8AVCH7/6nS/6/rPwBUIfv/6dL/v9B/AKjC/wYAAP//aB9Xnw==") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$pokeuser(0x6, r0, 0x358, 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x8003, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) clock_gettime(0x2, &(0x7f00000001c0)) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x89480, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x4, @perf_config_ext={0x9, 0x3}, 0x0, 0xa88, 0x8406, 0x9, 0x0, 0x3c, 0xffff, 0x0, 0x0, 0x0, 0x46}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x9) bind$rxrpc(r1, &(0x7f0000000100)=@in4={0x21, 0x400, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) ptrace$pokeuser(0x6, r0, 0x388, 0xfffffffffffffffc) r2 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f00000000c0)={0x2, 'bridge_slave_0\x00', 0x4}, 0x18) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) setsockopt$IP_VS_SO_SET_STARTDAEMON(r2, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'syz_tun\x00', 0x1}, 0x18) 8.290667928s ago: executing program 3 (id=2870): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 5.172713477s ago: executing program 3 (id=2900): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[], 0x0, 0x5, 0xc6, &(0x7f0000001440)=""/198, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfb8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000000)=@framed={{}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) perf_event_open(&(0x7f0000001000)={0x1, 0x80, 0x34, 0x7, 0x2, 0x5, 0x0, 0x80, 0x2, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xf, 0x0, @perf_config_ext={0x0, 0x80000000}, 0x400, 0x8428, 0x3e34, 0x9, 0x0, 0x3f, 0x1c54, 0x0, 0x69ff, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114e00000000008510000002000000850000000000000095000007000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001b00"/26], 0x0, 0x74}, 0x7b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180200001000000000002000fcffffff9500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400ed000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r3, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r3, 0x0, &(0x7f0000000000), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/16, @ANYBLOB="0000000000000000b702", @ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x80}, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000003000), 0x201, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0xe, 0x1, &(0x7f0000001080)=@raw=[@alu={0x7, 0x0, 0x1, 0x7, 0x8, 0x50, 0x4}], &(0x7f0000001140)='GPL\x00', 0x4, 0xd4, &(0x7f0000001180)=""/212, 0x41100, 0x43, '\x00', 0x0, @sk_skb=0x26, r2, 0x8, &(0x7f0000001280)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001340)={0x5, 0x0, 0x4, 0x8}, 0x10, 0x0, r0, 0x6, &(0x7f00000019c0)=[r3, 0xffffffffffffffff], &(0x7f0000001a00)=[{0x0, 0x5, 0xd, 0x9}, {0x0, 0x2, 0x5, 0xb}, {0x2, 0x2, 0x4}, {0x1, 0x4, 0x1, 0xc}, {0x3, 0x1, 0x4, 0x5}, {0x6, 0x4, 0x3, 0x4}], 0x10, 0x80000001}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.844515927s ago: executing program 3 (id=2906): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) socket$tipc(0x1e, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000a80)=@newtfilter={0xb4, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x80, 0x2, [@TCA_MATCHALL_ACT={0x7c, 0x2, [@m_tunnel_key={0x78, 0x1, 0x0, 0x0, {{0xf}, {0x48, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @remote}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @ipv4={'\x00', '\xff\xff', @remote}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x10000000, 0x7fff, 0x7}, 0x1}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000000)="27030200000214000e00002fb96dffff1144ee163cddcb000000800000827600000000000000", 0x26}, {&(0x7f00000004c0)="f058050000007f8f", 0x300}], 0x2}, 0x5) 4.672649323s ago: executing program 3 (id=2909): syz_mount_image$vfat(&(0x7f0000000880), &(0x7f0000003200)='./file1\x00', 0x4e04, &(0x7f0000003240)=ANY=[], 0x3, 0x335, &(0x7f0000000a40)="$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") socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x10) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x4000, 0x2000003}) 3.669789865s ago: executing program 3 (id=2917): ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x13) ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000180)={0xfbfffff8, 0x1008, 0xfbfbfffd, 0x2, 0x0, "1fb73a6900f4ff0900000000000000d3861000", 0x1, 0x5}) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000080)=0xd) 3.285151416s ago: executing program 3 (id=2920): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000040000000500000000000000", @ANYRES32], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0x7101}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000380)=r4) write$cgroup_devices(r3, &(0x7f0000000280)=ANY=[@ANYBLOB="1e030600bc5cb60128876360864666702c1ffe80000000000000", @ANYRESDEC], 0xffdd) 3.18110404s ago: executing program 0 (id=2853): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7ffe}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000800)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2b, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x0, 0x8, 0xb2, 0xa8}, 0x39}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x884}, 0x2) close(r1) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r3, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e00000000acc10200000002125ce882cbf400930bf4533f00429c65112a093bbf60b85bcb06", 0x2e}], 0x1}, 0x4005) 3.103348102s ago: executing program 1 (id=2926): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') socket(0x80000000000000a, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) socket$inet6_udp(0xa, 0x2, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x1a00048, &(0x7f0000000180)={[{@shortname_win95}, {@uni_xlateno}, {@rodir}, {@uni_xlate}, {@shortname_win95}, {@numtail}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '869'}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@fat=@check_strict}, {@uni_xlateno}, {@utf8no}, {@shortname_mixed}, {@utf8no}, {@shortname_win95}]}, 0x3, 0x350, &(0x7f0000000900)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x13, 0x4, &(0x7f0000000780)=ANY=[@ANYBLOB="18000000080000000000000009000000731131000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 2.849013721s ago: executing program 0 (id=2929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) 1.61380557s ago: executing program 1 (id=2931): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000900)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000c00000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f400002000000000000080000000000000000010000000000000044000500ac1414aa000004000000000000000000000000003c00000002000000ac"], 0xfc}}, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newlink={0x58, 0x10, 0xffffff1f, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4408}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 1.529769962s ago: executing program 0 (id=2933): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x23101, 0x0) write$vga_arbiter(r0, 0x0, 0x0) 1.493415893s ago: executing program 0 (id=2934): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$eJzs3M1vVFUfAODfvf3gffmsigpItEqMjR8tLags3Gg0cYFRowvUVW0LIRRqaE0sIVCNwY2JIdG1ujTxL3DnxqgrExNXujckRNmAxsWYe+demE47dFqnM4V5nmSYc+acO+ecOffMPfccpgF0rcHsnyRia0T8GhE7qtHFGQarT9eunJ3468rZiSQqldf+SPJ8V6+cnSizlsdtKSJDaUT6YVIUstjs/JkT49PTU6eL+MjcyXdGZufPPHH85PixqWNTp8YOHTp4YPTpp8aebEk7s3Zd3XNuZu/uF9+4+NLEkYtv//B1Vt+tRXptO9akf+lLg1nD/6zk6tMejv//p+I2mm014aS3gxVhVXoiIuuuvmz8VyqV8zVpO+KFD1Y4fMs6Vw9YR9m1adMyrxfXxYVKQ8lNU4FbQRKdrgHQGeX1Prv/LR9tnH503OVnqzdAWbuvFY9qSm+kRZ6+uvvbVhqMiCMLf3+ePaIV6xAAACv4eOKzw/H4cvO/NO6pybe92EMZiIg7IuLOiLgrInZGxN0Red57I2JXM4XWbBDUbw0tnf+kl+qytHR3IZv/PVPsbS2e/5WzvxjoKWLb8vb3JUePT0/tLz6ToejblMVHb1LGt8///EmjtNr5X/bIyi/ngkU9LvXWLdBNjs+N55PSFrj8fsSe3vinUqnUtT+5/kEnEbE7Ivas7q23l4Hjj361t1Gmldu/5O1uaMGZUPky4pFq/y9EXftLydL9yf5tN/YnR/4X01P7R8qzYqkff7rwSqPym2//+sj6f/Pi879I+WK+CAy8VbtfOxsNdi63Nizjwm8fNbynWev535+8nn8flduu743PzZ0ejehPDufxRa+P3Ti2jJf5s/YP7ctSyvaXR6b5d1wU/X9fROwt9svuj4gHiro/GBEPRcS+hq2P+P65xmkbof8na/o/ifrzf9e56nPZ//OrDvSc+O6bRuU31/8H89BQ8Ur+/beCZiu49k8OAAAAbh1pvnKTpMPXw2k6PFz9j707Y3M6PTM799jRmXdPTVZXeAaiLy1XunbUrIeOJgvFO1bjY8VacZl+oFg3/rQn8vjwxMz0ZIfbDt1uS4Pxn/m9p9O1A9bdcvtoY8v8oA24/dSP/3Rx9PzL7awM0FZ+rw3da4Xxn7arHkD7uf5D91pu/J+vi9sLgNuT6z90L+MfupfxD92rbvz3xC+dqgnQRmv4Ob/Ahgm8OryaozZFK0uPdIN8CE0Emv97EOsdeHNjVKOJQKe/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFrj3wAAAP//dNXrDA==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x100, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x40086610, &(0x7f00000004c0)={@id={0x2, 0x0, @b}}) 1.464503564s ago: executing program 1 (id=2937): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xa}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x200010d0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) 1.319449949s ago: executing program 1 (id=2938): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528) syz_emit_ethernet(0x66, &(0x7f0000000200)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @private1, [{0x4, 0x1, "9595f429ae08"}]}}}}}}, 0x0) 1.319134199s ago: executing program 0 (id=2939): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000740)="98e2d24a2d8ce4a509d138cc91611ed14f69b7d7aebfeca49d719bfbb537aef2a00ebefaf03915f43ec35efc4f2f060cab2fa2b5236842aaac0b9519376ea044a920d446a5c2a54c1ff847b71d1aab9f7b8323243230b8c20dc28ce7715a595fb6b0b71597c4888d791ba8eab8a133f969e0594d70a1b98e61bed565e34f3cd997040fe04a3259c409f0f5e0508f45bd23bf63ba65b20df98c34e561b6e820f83ecf47add09fc8bb21b550dc14233bcb5f16194ae6", 0xb5, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @window={0x3, 0x6, 0x7}, @mss={0x2, 0x7}, @window={0x3, 0x0, 0x4}, @window={0x3, 0x8, 0x6}, @timestamp, @window={0x3, 0xfffe}, @sack_perm], 0x2000000000000061) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000240)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x43}}, 0xfffffec4) r5 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x27, 0x1c, 0x3fc, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @address_request}}}}, 0x0) sendmsg(r5, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) rt_tgsigqueueinfo(r0, 0xffffffffffffffff, 0x1d, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r6, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) 1.122498155s ago: executing program 2 (id=2941): bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0x1, 0x58}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x8}, 0x28) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x8601, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x10, 0xa}, 0x862c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(0xffffffffffffffff, 0xc008240a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0xb701, 0x0) 1.067500727s ago: executing program 5 (id=2942): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x4e, 0x0, &(0x7f00007d0000)) 996.750809ms ago: executing program 5 (id=2943): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x4e, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)=@newtfilter={0x24, 0x2c, 0xd3f, 0x70b524, 0x25dfdbfa, {0x0, 0x0, 0x0, r3, {0xe, 0xffe0}, {}, {0x7, 0xfff2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4008848}, 0xc884) 727.738337ms ago: executing program 5 (id=2944): r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x23101, 0x0) write$vga_arbiter(r0, 0x0, 0x0) 592.848932ms ago: executing program 1 (id=2945): perf_event_open(&(0x7f00000010c0)={0x2, 0x80, 0xb9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xc, 0x7}, 0x410, 0x2000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[], 0x0, 0x5, 0xc6, &(0x7f0000001440)=""/198, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfb8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0xc, &(0x7f0000000000)=@framed={{}, [@printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x71}}, @call={0x85, 0x0, 0x0, 0x8}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f00000001c0), 0x12) perf_event_open(&(0x7f0000001000)={0x1, 0x80, 0x34, 0x7, 0x2, 0x5, 0x0, 0x80, 0x2, 0x8, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x2, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0xf, 0x0, @perf_config_ext={0x0, 0x80000000}, 0x400, 0x8428, 0x3e34, 0x9, 0x0, 0x3f, 0x1c54, 0x0, 0x69ff, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071114e00000000008510000002000000850000000000000095000007000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001b00"/26], 0x0, 0x74}, 0x7b) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001700)={0x3, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180200001000000000002000fcffffff9500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="19000000040000000400ed000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r2, &(0x7f0000000280), &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r2, 0x0, &(0x7f0000000000), 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001c40)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/16, @ANYBLOB="0000000000000000b702", @ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0), 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fe, 0x20, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x80}, 0x0, 0x1, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mkdir(&(0x7f0000000000)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000003000), 0x201, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001a80)={0xe, 0x1, &(0x7f0000001080)=@raw=[@alu={0x7, 0x0, 0x1, 0x7, 0x8, 0x50, 0x4}], &(0x7f0000001140)='GPL\x00', 0x4, 0xd4, &(0x7f0000001180)=""/212, 0x41100, 0x43, '\x00', 0x0, @sk_skb=0x26, r1, 0x8, &(0x7f0000001280)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000001340)={0x5, 0x0, 0x4, 0x8}, 0x10, 0x0, r0, 0x6, &(0x7f00000019c0)=[r2, 0xffffffffffffffff], &(0x7f0000001a00)=[{0x0, 0x5, 0xd, 0x9}, {0x0, 0x2, 0x5, 0xb}, {0x2, 0x2, 0x4}, {0x1, 0x4, 0x1, 0xc}, {0x3, 0x1, 0x4, 0x5}, {0x6, 0x4, 0x3, 0x4}], 0x10, 0x80000001}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) 505.163875ms ago: executing program 5 (id=2946): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002380)={r1, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600, 0x1}}, 0x20) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfc, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0xca, 0x0, 0x1000}}}}}}, 0x0) 504.645544ms ago: executing program 1 (id=2947): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r2) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r4], 0x1c}}, 0x4008054) write$nci(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='p\x00\t'], 0xc) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) write$nci(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r5, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 479.109276ms ago: executing program 2 (id=2948): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@deltfilter={0x24, 0x2d, 0x1, 0x78bd2f, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0x3}, {0xfff2, 0xffff}, {0x3, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2b14bdd23ad2f270}, 0x20044000) 478.680096ms ago: executing program 2 (id=2949): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="03000000040000000400"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xc1) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0xb, 0x5, 0x10001, 0xa, 0x1, 0xffffffffffffffff, 0x3}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x62a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x100000000}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000580)='ns/pid_for_children\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='memory.stat\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0xc}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 406.156408ms ago: executing program 2 (id=2950): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$eJzs28tvG8UfAPDvrpP219cvoSqPPoBAQVQ8kiYtpQcuIJA4gIQEh3IMSVqVug1qgkSrCAJC5YgqcUcckfgLOMEFASckrnBHlSoUIbVwMlp7N7Ed23nUiaH+fKRtZ3bXnfl6drwzO90A+tZI9kcSsTcifo2IoVq28YSR2l+3lxam/lpamEqiUnnjj6R63q2lhani1OJze4rMQET6SRKHW5Q7d+XqhclyeeZynh+bv/ju2NyVq8+cvzh5bubczKWJ06dPnhh/7tTEs12JM4vr1qEPZo8cfOWt669Nnbn+9o9fJ0X8TXF0yUing49XKl0urrf21aWTgR5WhA0p1bppDFb7/1CUYqXxhuLlj3taOWBLVSqVyn3tDy9WgLtYEr2uAdAbxY0+m//mW3Hr34bRR+/dfKE2Acpiv51vtSMDkebnDDbNb7tpJCLOLP79RbbFRp9DpFtUKQDgrvZtNv55umH8l48/0qh/LvT/fA1lOCLuiYj9EXEqIg5ExL0R1XPvj4gHWhWStC+/eZFk9fgnvbHp4NYhG/89n69tNY7/lgdXw6U8t68a/2By9nx55nj+nRyLwZ1ZfrxDGd+99Mtn7Y7Vj/+yLSu/GAvm9bgxsLPxM9OT85N3EnO9mx9FHBpoFX+yvBKQNd/BiDi0yTLOP/nVkSJ9uNR4bO34O+jCOlPly4gnau2/GE3xF5LO65Nj/4vyzPGx4qpY7aefr73ervw7ir8Lsvbf3fL6X45/OKlfr53beBnXfvu07Zxms9f/juTNhn3vT87PXx6P2JG8Wqt0/f6JpvMmVs7P4j92tHX/3x8r38Th7PpPIx6MiIci4uG87o9ExKMRcbRD/D+8+Ng7HeP/s138Ozv8q92RxT/d0P7FD1+79l9J7IjmPa0TpQvff9NQ6HBT/Gu2/8lq6li+Zz2/f+up1+auZgAAAPjvySb7eyNJR5fTaTo6Wvs//Adid1qenZt/6uzse5ema+8IDMdgWjzpGqp7HjqeT+uL/ERT/kT+3Pjz0q5qfnRqtjzd6+Chz+1p0/8zv5d6XTtgy3lfC/qX/g99q/49AKDPuP9D/2rR/3f1oh7A9mt1//+wB/UAtl9T/7fsB33E/B/6l/4P/Uv/h740tyvWfkleQmJVItJ/RTUktijR618mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA7vgnAAD//wW66qg=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='rdma.current\x00', 0x275a, 0x0) fsetxattr(r0, &(0x7f0000000b40)=@known='trusted.overlay.redirect\x00', &(0x7f0000000080)=':\x00', 0x2, 0x0) 406.066428ms ago: executing program 5 (id=2951): timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) futex(0x0, 0xc, 0x0, 0x0, &(0x7f0000000000), 0xaffffffa) 387.192388ms ago: executing program 0 (id=2952): memfd_create(&(0x7f0000000380)='\x103q}2\x9a\xce\xaf\x03\xdfyR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7R\x94\xaf\xbb\xdcM\x90k\xd6\x05\r\x84\x87\x1e?\x10\x95SWFO{\x1f\x1b!\xd5\x991D\x1c\b\x8c`\xeaSA\x90m\xb6&\xd0\xf1\xb3\xed:\x82\xbd\xe3i|BL\x1f\x9d\x00\x00\xc5\xb8$\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\r\xd6h\x80\x8fQ|\xf5d\x10\x10\xd7\t\x00\x00\x00\x00\x00\x00\x00<\xfeeS\xb2l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfaa\xd3\xf1\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7~x\xb8vo\xe6\x15@\xc9\"CY\x11\xb9u\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D4E^7%8\x94y\x90\xf0l\xa0\'L%\xd4\xda\xee\x81\x98\xcc\xfd\xa2\x89$\x9by\xf1\xbb\x01\xb7\xcd\xbf\x99\x1f\x90@b\x03\xb3\xe0CfU\x16{\xbey\xa1cs\x96U\x11\xdb*\xdf\xcdG\xc7z\x85\x8aE\xf7\xd5\x9dAj\xe3\xfb\xc4\xa0\x14\x87\x19\x17\xed\xd1\x185%Q%\x81\xfaK\x82\xec=\xa3\xb8~\xb6O\xbd\x19*\xdb\x1c\x10\xa4\x8dIl\xc1\xceG\xd0h\xa1\xab:dP\xb6\xa0BR\xbe\x03\xac\xd9\x87\x00@\x80\x94\xd88\xc9\x03\x97\x17r\x85#\x7f\x8cu\x8f\xcc\x7fF\xb5\xea\xa6\xc1\x9d\xac\x89\xc9\xa1tuJw\xee\x1a\xe73\xa8\xadS\xd1\x11#d\xc2\xcfdj\x9ec\x93\xd5K\x90*_3\x89\v\xab\x04ih\x12\x93\xc5m\x8f~{\xe5\x85\xa5g\x00\x00\x00\xe45Q\xab%\xa8[\xf3\x17\x94\xf8\xdfq\xff\xd2?\xafW\xde\x1bW]\x1f\aaV\xc5\xc82*\xc7\xc5\"C}L\x10e\xc6\x90\xc0\xf9z\xb6+/d\x86\xf2\xbe\xc9:u\t\\e\x05)\xe4\xd2\xc4\x1a\xc9\xac\xdb\x925\x02\x94@\xa2\xe1\xee\x16\xb4\x98\xff\x0f\xbb\xb2\x81\xcf\x13g6l\xcc\xc8\x02\v\xa2\xb2\xf6\xbf@d\xcecC\x9fVz\xf4\x14\xa5\x8b|\xe1\xc0\xfa3X\xf4\xd9L\xe6\x8f\x9dy\x0fX.\xc5EQ\xd1/\xa1\xd0\x03>\xf0\x90\x13B\xe2\x97\x8b!\xf7\"\xecX\x92\xab\xbc^\xb2\x80@\xcc+\xbbp\xdc|N\xd3[=G\xb2\xe1\x9c\xc5\x81y\x84\xef\xacQ\x01\xdd\xe7<\xb8\xf1Hn\x86\xa6\xe3\x18N\x19\"[-\xdb\xef\xc3\xe0\xa8}', 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106a05310300000000000109022400010000800009040002010300010009210000000122f80409058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000140)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 215.510554ms ago: executing program 2 (id=2953): r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000808, &(0x7f00000001c0)={0xa, 0x4e20, 0x8, @loopback}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000040)=0x1000, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x4968, 0x4) sendto$inet6(r0, &(0x7f00000002c0)="8d", 0x1, 0x80001, 0x0, 0x0) r1 = eventfd2(0x0, 0x0) epoll_create(0xb) socket$nl_generic(0x10, 0x3, 0x10) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r2, 0x1, &(0x7f0000000440)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, r1}]) 108.165587ms ago: executing program 2 (id=2954): r0 = socket(0x10, 0x3, 0x0) recvmmsg$unix(r0, &(0x7f00000011c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x2, 0x0) 0s ago: executing program 5 (id=2955): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x5}, @TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r4, &(0x7f00000000c0)={&(0x7f0000000140)=@xdp={0x2c, 0xdd86, r5, 0x15}, 0x80, &(0x7f0000000500)=[{&(0x7f00000002c0)="f2", 0x14}], 0x1}, 0x44) kernel console output (not intermixed with test programs): [ 359.414354][T12352] total_active_anon 12345344 [ 359.418993][T12352] total_inactive_file 0 [ 359.423169][T12352] total_active_file 0 [ 359.427220][T12352] total_unevictable 0 [ 359.431238][T12352] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1610,pid=12237,uid=0 [ 359.446241][T12352] Memory cgroup out of memory: Killed process 12237 (syz.2.1610) total-vm:94168kB, anon-rss:1404kB, file-rss:22092kB, shmem-rss:4kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 359.522408][T12357] hub 8-0:1.0: USB hub found [ 359.527244][T12357] hub 8-0:1.0: 8 ports detected [ 360.117089][T12371] hub 8-0:1.0: USB hub found [ 360.121881][T12371] hub 8-0:1.0: 8 ports detected [ 360.208773][T12373] loop3: detected capacity change from 0 to 256 [ 360.308267][T12373] FAT-fs (loop3): Directory bread(block 1285) failed [ 360.392148][T12373] FAT-fs (loop3): Directory bread(block 1286) failed [ 360.488951][T12373] FAT-fs (loop3): Directory bread(block 1287) failed [ 360.591039][T12373] FAT-fs (loop3): Directory bread(block 1288) failed [ 360.743309][T12380] hub 8-0:1.0: USB hub found [ 360.748338][T12380] hub 8-0:1.0: 8 ports detected [ 360.996890][T12382] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1624'. [ 361.012723][T12373] FAT-fs (loop3): Directory bread(block 1285) failed [ 361.058104][T12373] FAT-fs (loop3): Directory bread(block 1286) failed [ 361.088867][T12373] FAT-fs (loop3): Directory bread(block 1287) failed [ 361.102465][T12376] loop1: detected capacity change from 0 to 164 [ 361.124707][T12373] FAT-fs (loop3): Directory bread(block 1288) failed [ 361.198672][T12383] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 361.255306][T12373] FAT-fs (loop3): Directory bread(block 1285) failed [ 361.291435][T12386] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1621'. [ 361.307970][T12376] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 361.579407][T12399] hub 8-0:1.0: USB hub found [ 361.584215][T12399] hub 8-0:1.0: 8 ports detected [ 362.100964][T12388] syz.5.1626 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 362.145905][T12388] CPU: 1 UID: 0 PID: 12388 Comm: syz.5.1626 Not tainted syzkaller #0 PREEMPT(full) [ 362.145939][T12388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 362.145953][T12388] Call Trace: [ 362.145961][T12388] [ 362.146071][T12388] __dump_stack+0x1d/0x30 [ 362.146099][T12388] dump_stack_lvl+0x95/0xd0 [ 362.146123][T12388] dump_stack+0x15/0x1b [ 362.146212][T12388] dump_header+0x80/0x240 [ 362.146237][T12388] oom_kill_process+0x295/0x350 [ 362.146390][T12388] out_of_memory+0x97d/0xb80 [ 362.146424][T12388] try_charge_memcg+0x62f/0xa10 [ 362.146583][T12388] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 362.146609][T12388] __alloc_frozen_pages_noprof+0x18a/0x350 [ 362.146643][T12388] alloc_pages_mpol+0xb3/0x260 [ 362.146733][T12388] alloc_pages_noprof+0x8f/0x140 [ 362.146796][T12388] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 362.146831][T12388] __kvmalloc_node_noprof+0x3d4/0x640 [ 362.146897][T12388] ? futex_hash_allocate+0x190/0x9a0 [ 362.146930][T12388] ? futex_hash_allocate+0x190/0x9a0 [ 362.146964][T12388] futex_hash_allocate+0x190/0x9a0 [ 362.147007][T12388] ? cap_task_prctl+0x13f/0x6b0 [ 362.147042][T12388] futex_hash_prctl+0xd8/0xf0 [ 362.147078][T12388] __se_sys_prctl+0x4f4/0x1400 [ 362.147109][T12388] __x64_sys_prctl+0x67/0x80 [ 362.147199][T12388] x64_sys_call+0x2533/0x3020 [ 362.147223][T12388] do_syscall_64+0x12c/0x3b0 [ 362.147255][T12388] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 362.147280][T12388] RIP: 0033:0x7efefe36ce59 [ 362.147303][T12388] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.147324][T12388] RSP: 002b:00007efefcdc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 362.147349][T12388] RAX: ffffffffffffffda RBX: 00007efefe5e5fa0 RCX: 00007efefe36ce59 [ 362.147440][T12388] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 362.147470][T12388] RBP: 00007efefe402d6f R08: 0000000000000000 R09: 0000000000000000 [ 362.147485][T12388] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.147501][T12388] R13: 00007efefe5e6038 R14: 00007efefe5e5fa0 R15: 00007ffc97146568 [ 362.147522][T12388] [ 362.150480][T12388] memory: usage 307200kB, limit 307200kB, failcnt 2293 [ 362.187700][T12404] hub 8-0:1.0: USB hub found [ 362.191065][T12388] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 362.193915][T12404] hub 8-0:1.0: 8 ports detected [ 362.198801][T12388] kmem: usage 302364kB, limit 9007199254740988kB, failcnt 0 [ 362.453729][T12388] Memory cgroup stats for /syz5: [ 362.453923][T12388] cache 0 [ 362.477364][T12388] rss 4952064 [ 362.485076][T12388] shmem 0 [ 362.509978][T12388] mapped_file 0 [ 362.530103][T12388] dirty 0 [ 362.536653][ T28] audit: type=1326 audit(2000000240.642:1125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12384 comm="syz.0.1625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc64fce59 code=0x7ffc0000 [ 362.576308][T12410] hub 8-0:1.0: USB hub found [ 362.581429][T12410] hub 8-0:1.0: 8 ports detected [ 362.622470][T12388] writeback 0 [ 362.650989][T12388] workingset_refault_anon 0 [ 362.688571][T12388] workingset_refault_file 392 [ 362.725046][T12388] swap 0 [ 362.751373][T12388] swapcached 0 [ 362.769431][T12388] pgpgin 96703 [ 362.775999][ T28] audit: type=1326 audit(2000000240.642:1126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12384 comm="syz.0.1625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc64fce59 code=0x7ffc0000 [ 362.823727][T12388] pgpgout 95494 [ 362.846375][T12388] pgfault 135119 [ 362.870150][T12388] pgmajfault 5 [ 362.898929][T12388] inactive_anon 2056192 [ 362.928047][T12388] active_anon 2895872 [ 362.951491][T12413] netlink: 'syz.0.1633': attribute type 3 has an invalid length. [ 363.030398][T12413] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1633'. [ 363.034669][ T28] audit: type=1326 audit(2000000240.652:1127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12384 comm="syz.0.1625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f4cc64fce59 code=0x7ffc0000 [ 363.042048][T12388] inactive_file 0 [ 363.065563][ T28] audit: type=1326 audit(2000000240.732:1128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12384 comm="syz.0.1625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc64fce59 code=0x7ffc0000 [ 363.095196][T12388] active_file 0 [ 363.101245][T12388] unevictable 0 [ 363.105071][T12388] hierarchical_memory_limit 314572800 [ 363.110747][T12388] hierarchical_memsw_limit 9223372036854771712 [ 363.117379][T12388] total_cache 0 [ 363.121982][T12388] total_rss 4952064 [ 363.151770][T12388] total_shmem 0 [ 363.155340][ T28] audit: type=1326 audit(2000000240.742:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12384 comm="syz.0.1625" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4cc64fce59 code=0x7ffc0000 [ 363.181374][T12388] total_mapped_file 0 [ 363.185416][T12388] total_dirty 0 [ 363.189255][T12388] total_writeback 0 [ 363.193176][T12388] total_workingset_refault_anon 0 [ 363.198522][T12388] total_workingset_refault_file 392 [ 363.203832][T12388] total_swap 0 [ 363.216930][T12388] total_swapcached 0 [ 363.223304][T12421] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1636'. [ 363.237681][T12388] total_pgpgin 96703 [ 363.248237][T12388] total_pgpgout 95494 [ 363.266271][T12388] total_pgfault 135119 [ 363.270468][T12388] total_pgmajfault 5 [ 363.348099][T12388] total_inactive_anon 2056192 [ 363.352989][T12388] total_active_anon 2895872 [ 363.357913][T12388] total_inactive_file 0 [ 363.362174][T12388] total_active_file 0 [ 363.366581][T12388] total_unevictable 0 [ 363.375067][T12388] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1626,pid=12387,uid=0 [ 363.411023][T12388] Memory cgroup out of memory: Killed process 12388 (syz.5.1626) total-vm:94300kB, anon-rss:1420kB, file-rss:22300kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 363.508757][T12424] loop2: detected capacity change from 0 to 164 [ 363.667470][T12436] hub 8-0:1.0: USB hub found [ 363.672240][T12436] hub 8-0:1.0: 8 ports detected [ 363.768846][T12437] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 364.099640][T12548] hub 8-0:1.0: USB hub found [ 364.104569][T12548] hub 8-0:1.0: 8 ports detected [ 364.193961][T12546] loop1: detected capacity change from 0 to 512 [ 364.206344][T12546] EXT4-fs: test_dummy_encryption option not supported [ 364.521441][T12556] hub 8-0:1.0: USB hub found [ 364.526378][T12556] hub 8-0:1.0: 8 ports detected [ 364.808651][ T28] audit: type=1326 audit(2000000242.932:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12542 comm="syz.1.1644" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8b86ce59 code=0x7ffc0000 [ 364.956530][ T28] audit: type=1326 audit(2000000242.982:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12542 comm="syz.1.1644" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8b86ce59 code=0x7ffc0000 [ 364.968196][T12561] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1649'. [ 364.995220][ T28] audit: type=1326 audit(2000000242.982:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12542 comm="syz.1.1644" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fbf8b86ce59 code=0x7ffc0000 [ 365.037150][ T28] audit: type=1326 audit(2000000242.982:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12542 comm="syz.1.1644" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8b86ce59 code=0x7ffc0000 [ 365.037208][T12563] loop5: detected capacity change from 0 to 256 [ 365.072061][ T28] audit: type=1326 audit(2000000242.982:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12542 comm="syz.1.1644" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8b86ce59 code=0x7ffc0000 [ 365.106231][T12563] FAT-fs (loop5): Directory bread(block 1285) failed [ 365.117396][T12563] FAT-fs (loop5): Directory bread(block 1286) failed [ 365.124376][T12563] FAT-fs (loop5): Directory bread(block 1287) failed [ 365.131686][T12563] FAT-fs (loop5): Directory bread(block 1288) failed [ 365.159705][T12563] FAT-fs (loop5): FAT read failed (blocknr 1281) [ 365.282216][T12578] hub 8-0:1.0: USB hub found [ 365.287356][T12578] hub 8-0:1.0: 8 ports detected [ 365.365660][T12576] loop3: detected capacity change from 0 to 164 [ 365.603335][T12576] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 365.916018][T12694] hub 8-0:1.0: USB hub found [ 365.921100][T12694] hub 8-0:1.0: 8 ports detected [ 366.208172][T12693] loop3: detected capacity change from 0 to 164 [ 366.217930][T12696] loop1: detected capacity change from 0 to 164 [ 366.533981][T12693] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 366.571968][T12701] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1663'. [ 366.585610][T12696] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 366.756199][T12706] loop5: detected capacity change from 0 to 256 [ 366.773754][T12706] FAT-fs (loop5): Directory bread(block 1285) failed [ 366.782461][T12706] FAT-fs (loop5): Directory bread(block 1286) failed [ 366.796324][T12706] FAT-fs (loop5): Directory bread(block 1287) failed [ 366.813343][T12706] FAT-fs (loop5): Directory bread(block 1288) failed [ 366.830702][T12706] FAT-fs (loop5): FAT read failed (blocknr 1281) [ 366.839460][T12703] loop3: detected capacity change from 0 to 512 [ 366.894798][T12703] EXT4-fs: test_dummy_encryption option not supported [ 367.074347][ T28] audit: type=1326 audit(2000000245.122:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.3.1664" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4be8cce59 code=0x7ffc0000 [ 367.295520][ T28] audit: type=1326 audit(2000000245.122:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.3.1664" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd4be8cce59 code=0x7ffc0000 [ 367.366824][ T28] audit: type=1326 audit(2000000245.122:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.3.1664" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4be8cce59 code=0x7ffc0000 [ 367.397373][ T28] audit: type=1326 audit(2000000245.122:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12702 comm="syz.3.1664" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4be8cce59 code=0x7ffc0000 [ 367.450106][T12722] hub 8-0:1.0: USB hub found [ 367.454806][T12722] hub 8-0:1.0: 8 ports detected [ 367.490619][T12727] loop2: detected capacity change from 0 to 256 [ 367.501942][T12727] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 369.149734][T12745] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1677'. [ 369.160032][T12746] netlink: 'syz.0.1676': attribute type 3 has an invalid length. [ 369.823396][T12746] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1676'. [ 371.926218][ T28] audit: type=1326 audit(2000000250.052:1139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12850 comm="syz.5.1678" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefe36ce59 code=0x7ffc0000 [ 372.030931][ T28] audit: type=1326 audit(2000000250.152:1140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12850 comm="syz.5.1678" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efefe36ce59 code=0x7ffc0000 [ 373.049990][T12970] loop3: detected capacity change from 0 to 256 [ 373.065310][T12969] loop5: detected capacity change from 0 to 164 [ 373.246061][T12970] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 373.439598][T12969] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 376.351341][T12990] xt_CT: You must specify a L4 protocol and not use inversions on it [ 379.953781][T13041] xt_CT: You must specify a L4 protocol and not use inversions on it [ 380.702102][T13116] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1700'. [ 381.038748][T13116] netlink: 'syz.2.1700': attribute type 21 has an invalid length. [ 381.786109][T13159] netlink: 'syz.2.1703': attribute type 3 has an invalid length. [ 381.827163][T13159] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1703'. [ 382.135769][T13170] loop2: detected capacity change from 0 to 164 [ 382.294363][T13170] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 384.220235][T13292] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1714'. [ 384.231558][T13292] netlink: 'syz.1.1714': attribute type 21 has an invalid length. [ 384.363800][T13288] cgroup: fork rejected by pids controller in /syz5 [ 384.516308][T13401] hub 8-0:1.0: USB hub found [ 384.521111][T13401] hub 8-0:1.0: 8 ports detected [ 384.723713][T13405] xt_CT: You must specify a L4 protocol and not use inversions on it [ 384.798983][T13407] hub 8-0:1.0: USB hub found [ 384.804006][T13407] hub 8-0:1.0: 8 ports detected [ 387.468812][T13632] loop2: detected capacity change from 0 to 164 [ 387.755599][T13638] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 388.414568][T13643] xt_CT: You must specify a L4 protocol and not use inversions on it [ 389.435268][T13666] hub 8-0:1.0: USB hub found [ 389.440102][T13666] hub 8-0:1.0: 8 ports detected [ 393.571408][T13717] hub 8-0:1.0: USB hub found [ 393.614570][T13717] hub 8-0:1.0: 8 ports detected [ 394.003138][T13828] loop2: detected capacity change from 0 to 256 [ 394.037854][T13828] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 394.699214][T13846] hub 8-0:1.0: USB hub found [ 394.704184][T13846] hub 8-0:1.0: 8 ports detected [ 395.759601][T13859] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1751'. [ 395.792553][T13859] netlink: 'syz.5.1751': attribute type 21 has an invalid length. [ 396.953185][T13878] loop2: detected capacity change from 0 to 256 [ 396.994554][T13878] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 397.032479][T13879] hub 8-0:1.0: USB hub found [ 397.098911][T13879] hub 8-0:1.0: 8 ports detected [ 397.226637][T13883] xt_CT: You must specify a L4 protocol and not use inversions on it [ 398.042528][T13882] loop1: detected capacity change from 0 to 164 [ 398.493616][T13882] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 398.818746][T14101] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1764'. [ 398.979149][T14104] cgroup: fork rejected by pids controller in /syz2 [ 399.218385][T14207] netlink: 'syz.1.1764': attribute type 21 has an invalid length. [ 401.141143][T14225] loop3: detected capacity change from 0 to 256 [ 401.202357][T14225] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 401.333869][T14223] syz.0.1770 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 401.493205][T14223] CPU: 1 UID: 0 PID: 14223 Comm: syz.0.1770 Not tainted syzkaller #0 PREEMPT(full) [ 401.493239][T14223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 401.493251][T14223] Call Trace: [ 401.493260][T14223] [ 401.493274][T14223] __dump_stack+0x1d/0x30 [ 401.493302][T14223] dump_stack_lvl+0x95/0xd0 [ 401.493323][T14223] dump_stack+0x15/0x1b [ 401.493370][T14223] dump_header+0x80/0x240 [ 401.493396][T14223] oom_kill_process+0x295/0x350 [ 401.493446][T14223] out_of_memory+0x97d/0xb80 [ 401.493480][T14223] try_charge_memcg+0x62f/0xa10 [ 401.493515][T14223] charge_memcg+0x6d/0x120 [ 401.493543][T14223] __mem_cgroup_charge+0x28/0xb0 [ 401.493641][T14223] handle_mm_fault+0x105f/0x2e70 [ 401.493672][T14223] ? _raw_spin_lock+0x52/0xa0 [ 401.493714][T14223] __get_user_pages+0x1290/0x1f10 [ 401.493755][T14223] ? _raw_spin_unlock+0x9/0x30 [ 401.493795][T14223] __gup_longterm_locked+0x2fa/0xe30 [ 401.493824][T14223] ? should_fail_ex+0x30/0x280 [ 401.493955][T14223] ? should_failslab+0x8c/0xb0 [ 401.494049][T14223] pin_user_pages+0x88/0xc0 [ 401.494097][T14223] xdp_umem_pin_pages+0xc0/0x200 [ 401.494233][T14223] xdp_umem_create+0x4eb/0x590 [ 401.494267][T14223] xsk_setsockopt+0x5ea/0x640 [ 401.494301][T14223] ? __pfx_xsk_setsockopt+0x10/0x10 [ 401.494329][T14223] __sys_setsockopt+0x184/0x200 [ 401.494427][T14223] __x64_sys_setsockopt+0x64/0x80 [ 401.494455][T14223] x64_sys_call+0x2327/0x3020 [ 401.494480][T14223] do_syscall_64+0x12c/0x3b0 [ 401.494574][T14223] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.494608][T14223] RIP: 0033:0x7f4cc64fce59 [ 401.494672][T14223] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 401.494691][T14223] RSP: 002b:00007f4cc4f57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 401.494777][T14223] RAX: ffffffffffffffda RBX: 00007f4cc6775fa0 RCX: 00007f4cc64fce59 [ 401.494866][T14223] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000003 [ 401.494879][T14223] RBP: 00007f4cc6592d6f R08: 0000000000000020 R09: 0000000000000000 [ 401.494896][T14223] R10: 00002000000000c0 R11: 0000000000000246 R12: 0000000000000000 [ 401.494913][T14223] R13: 00007f4cc6776038 R14: 00007f4cc6775fa0 R15: 00007fff24c97598 [ 401.494939][T14223] [ 401.595861][T14223] memory: usage 304860kB, limit 307200kB, failcnt 5189 [ 402.015962][T14223] memory+swap: usage 246536kB, limit 9007199254740988kB, failcnt 0 [ 402.039334][T14223] kmem: usage 237472kB, limit 9007199254740988kB, failcnt 0 [ 402.076753][T14223] Memory cgroup stats for /syz0: [ 402.077084][T14223] cache 4096 [ 402.105914][T14223] rss 4943872 [ 402.109333][T14223] shmem 0 [ 402.120417][T14223] mapped_file 4096 [ 402.237525][T14236] hub 8-0:1.0: USB hub found [ 402.243691][T14236] hub 8-0:1.0: 8 ports detected [ 402.403533][T14237] xt_CT: You must specify a L4 protocol and not use inversions on it [ 403.527060][T14223] dirty 0 [ 403.540809][T14223] writeback 0 [ 403.566102][T14223] workingset_refault_anon 643 [ 403.592379][T14223] workingset_refault_file 9440 [ 403.621205][T14223] swap 180224 [ 403.638556][T14223] swapcached 10522624 [ 403.658779][T14223] pgpgin 245566 [ 403.680800][T14223] pgpgout 244356 [ 403.699266][T14223] pgfault 315650 [ 403.715835][T14223] pgmajfault 270 [ 403.735914][T14223] inactive_anon 3702784 [ 403.758007][T14223] active_anon 1249280 [ 403.766133][T14245] loop1: detected capacity change from 0 to 164 [ 403.783628][T14223] inactive_file 0 [ 403.799585][T14223] active_file 4096 [ 403.852564][T14223] unevictable 0 [ 403.955856][T14223] hierarchical_memory_limit 314572800 [ 403.969986][T14223] hierarchical_memsw_limit 9223372036854771712 [ 404.010576][T14223] total_cache 4096 [ 404.026392][T14223] total_rss 4943872 [ 404.044470][T14223] total_shmem 0 [ 404.057460][T14223] total_mapped_file 4096 [ 404.082486][T14223] total_dirty 0 [ 404.102017][T14245] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 404.110076][T14223] total_writeback 0 [ 404.128038][T14223] total_workingset_refault_anon 643 [ 404.149403][T14223] total_workingset_refault_file 9440 [ 404.172135][T14223] total_swap 180224 [ 404.189360][T14223] total_swapcached 10522624 [ 404.212645][T14223] total_pgpgin 245566 [ 404.233790][T14251] loop1: detected capacity change from 0 to 256 [ 404.240714][T14223] total_pgpgout 244356 [ 404.258394][T14223] total_pgfault 315650 [ 404.278466][T14251] FAT-fs (loop1): Directory bread(block 1285) failed [ 404.289766][T14223] total_pgmajfault 270 [ 404.314760][T14251] FAT-fs (loop1): Directory bread(block 1286) failed [ 404.322112][T14223] total_inactive_anon 3702784 [ 404.349361][T14223] total_active_anon 1249280 [ 404.360444][T14251] FAT-fs (loop1): Directory bread(block 1287) failed [ 404.373369][T14223] total_inactive_file 0 [ 404.381789][T14251] FAT-fs (loop1): Directory bread(block 1288) failed [ 404.396639][T14223] total_active_file 4096 [ 404.408097][T14223] total_unevictable 0 [ 404.422962][T14251] FAT-fs (loop1): Directory bread(block 1285) failed [ 404.433508][T14223] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1770,pid=14222,uid=0 [ 404.448539][T14251] FAT-fs (loop1): Directory bread(block 1286) failed [ 404.455307][T14251] FAT-fs (loop1): Directory bread(block 1287) failed [ 404.462438][T14251] FAT-fs (loop1): Directory bread(block 1288) failed [ 404.470521][T14223] Memory cgroup out of memory: Killed process 14223 (syz.0.1770) total-vm:96084kB, anon-rss:1732kB, file-rss:22220kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 404.474125][T14257] FAT-fs (loop1): FAT read failed (blocknr 1281) [ 404.487958][T14251] FAT-fs (loop1): Directory bread(block 1285) failed [ 404.615884][T14251] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1778'. [ 404.650634][T14261] hub 8-0:1.0: USB hub found [ 405.157036][T14261] hub 8-0:1.0: 8 ports detected [ 405.233585][T14481] loop1: detected capacity change from 0 to 256 [ 405.285609][T14481] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 405.869999][T14499] syz.5.1784 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 406.194777][T14499] CPU: 1 UID: 0 PID: 14499 Comm: syz.5.1784 Not tainted syzkaller #0 PREEMPT(full) [ 406.194814][T14499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 406.194970][T14499] Call Trace: [ 406.194978][T14499] [ 406.194987][T14499] __dump_stack+0x1d/0x30 [ 406.195012][T14499] dump_stack_lvl+0x95/0xd0 [ 406.195037][T14499] dump_stack+0x15/0x1b [ 406.195060][T14499] dump_header+0x80/0x240 [ 406.195085][T14499] oom_kill_process+0x295/0x350 [ 406.195150][T14499] out_of_memory+0x97d/0xb80 [ 406.195256][T14499] try_charge_memcg+0x62f/0xa10 [ 406.195290][T14499] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 406.195366][T14499] __alloc_frozen_pages_noprof+0x18a/0x350 [ 406.195397][T14499] alloc_pages_mpol+0xb3/0x260 [ 406.195472][T14499] alloc_pages_noprof+0x8f/0x140 [ 406.195494][T14499] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 406.195525][T14499] __kvmalloc_node_noprof+0x3d4/0x640 [ 406.195549][T14499] ? futex_hash_allocate+0x190/0x9a0 [ 406.195607][T14499] ? futex_hash_allocate+0x190/0x9a0 [ 406.195721][T14499] futex_hash_allocate+0x190/0x9a0 [ 406.195847][T14499] ? cap_task_prctl+0x13f/0x6b0 [ 406.195958][T14499] futex_hash_prctl+0xd8/0xf0 [ 406.195991][T14499] __se_sys_prctl+0x4f4/0x1400 [ 406.196017][T14499] __x64_sys_prctl+0x67/0x80 [ 406.196111][T14499] x64_sys_call+0x2533/0x3020 [ 406.196139][T14499] do_syscall_64+0x12c/0x3b0 [ 406.196201][T14499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.196222][T14499] RIP: 0033:0x7efefe36ce59 [ 406.196239][T14499] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 406.196258][T14499] RSP: 002b:00007efefcdc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 406.196280][T14499] RAX: ffffffffffffffda RBX: 00007efefe5e5fa0 RCX: 00007efefe36ce59 [ 406.196321][T14499] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 406.196334][T14499] RBP: 00007efefe402d6f R08: 0000000000000000 R09: 0000000000000000 [ 406.196427][T14499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.196440][T14499] R13: 00007efefe5e6038 R14: 00007efefe5e5fa0 R15: 00007ffc97146568 [ 406.196459][T14499] [ 406.456034][T14499] memory: usage 134300kB, limit 307200kB, failcnt 2363 [ 406.466189][T14499] memory+swap: usage 130920kB, limit 9007199254740988kB, failcnt 0 [ 406.474273][T14499] kmem: usage 114324kB, limit 9007199254740988kB, failcnt 0 [ 406.646199][T14499] Memory cgroup stats for /syz5: [ 406.646414][T14499] cache 11755520 [ 407.135857][T14589] xt_CT: You must specify a L4 protocol and not use inversions on it [ 407.637782][T14499] rss 5128192 [ 407.650678][T14499] shmem 11755520 [ 408.550079][T14499] mapped_file 0 [ 408.569516][T14499] dirty 0 [ 408.582215][T14499] writeback 0 [ 408.716616][T14499] workingset_refault_anon 0 [ 409.102123][T14499] workingset_refault_file 392 [ 409.122622][T14499] swap 0 [ 409.133962][T14499] swapcached 0 [ 409.146686][T14499] pgpgin 123031 [ 409.170556][T14499] pgpgout 118909 [ 409.187237][T14499] pgfault 171774 [ 409.202379][T14499] pgmajfault 5 [ 409.217121][T14499] inactive_anon 2056192 [ 409.233734][T14499] active_anon 14827520 [ 409.241820][T14690] loop1: detected capacity change from 0 to 164 [ 409.254960][T14499] inactive_file 0 [ 409.267985][T14499] active_file 0 [ 409.280685][T14499] unevictable 0 [ 409.306366][T14499] hierarchical_memory_limit 314572800 [ 409.337176][T14499] hierarchical_memsw_limit 9223372036854771712 [ 409.365867][T14499] total_cache 11755520 [ 409.384554][T14499] total_rss 5128192 [ 409.401629][T14499] total_shmem 11755520 [ 409.419587][T14499] total_mapped_file 0 [ 409.434086][T14499] total_dirty 0 [ 409.449746][T14690] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 409.459728][T14499] total_writeback 0 [ 409.474029][T14499] total_workingset_refault_anon 0 [ 409.492468][T14499] total_workingset_refault_file 392 [ 409.514651][T14499] total_swap 0 [ 409.528383][T14499] total_swapcached 0 [ 409.549655][T14499] total_pgpgin 123031 [ 409.572417][T14499] total_pgpgout 118909 [ 409.594557][T14499] total_pgfault 171774 [ 409.617041][T14499] total_pgmajfault 5 [ 409.637326][T14499] total_inactive_anon 2056192 [ 409.660718][T14499] total_active_anon 14827520 [ 409.674330][T14692] loop1: detected capacity change from 0 to 164 [ 409.685675][T14499] total_inactive_file 0 [ 409.702778][T14499] total_active_file 0 [ 409.723846][T14499] total_unevictable 0 [ 409.755055][T14499] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1784,pid=14494,uid=0 [ 409.822545][T14499] Memory cgroup out of memory: Killed process 14499 (syz.5.1784) total-vm:94168kB, anon-rss:1412kB, file-rss:22288kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 409.877449][T14692] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 409.934857][T14694] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1790'. [ 409.958648][T14694] netlink: 'syz.2.1790': attribute type 21 has an invalid length. [ 410.363132][T14714] xt_CT: You must specify a L4 protocol and not use inversions on it [ 410.574820][T14729] hub 8-0:1.0: USB hub found [ 410.701311][T14729] hub 8-0:1.0: 8 ports detected [ 411.177025][T14696] syz.5.1791 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 411.238741][T14696] CPU: 1 UID: 0 PID: 14696 Comm: syz.5.1791 Not tainted syzkaller #0 PREEMPT(full) [ 411.238798][T14696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 411.238813][T14696] Call Trace: [ 411.238833][T14696] [ 411.238844][T14696] __dump_stack+0x1d/0x30 [ 411.238938][T14696] dump_stack_lvl+0x95/0xd0 [ 411.238958][T14696] dump_stack+0x15/0x1b [ 411.238977][T14696] dump_header+0x80/0x240 [ 411.239000][T14696] oom_kill_process+0x295/0x350 [ 411.239106][T14696] out_of_memory+0x97d/0xb80 [ 411.239285][T14696] try_charge_memcg+0x62f/0xa10 [ 411.239328][T14696] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 411.239358][T14696] __alloc_frozen_pages_noprof+0x18a/0x350 [ 411.239388][T14696] alloc_pages_mpol+0xb3/0x260 [ 411.239500][T14696] alloc_pages_noprof+0x8f/0x140 [ 411.239528][T14696] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 411.239581][T14696] __kvmalloc_node_noprof+0x3d4/0x640 [ 411.239605][T14696] ? futex_hash_allocate+0x190/0x9a0 [ 411.239639][T14696] ? futex_hash_allocate+0x190/0x9a0 [ 411.239700][T14696] futex_hash_allocate+0x190/0x9a0 [ 411.239738][T14696] ? cap_task_prctl+0x13f/0x6b0 [ 411.239832][T14696] futex_hash_prctl+0xd8/0xf0 [ 411.239864][T14696] __se_sys_prctl+0x4f4/0x1400 [ 411.239891][T14696] __x64_sys_prctl+0x67/0x80 [ 411.239922][T14696] x64_sys_call+0x2533/0x3020 [ 411.239985][T14696] do_syscall_64+0x12c/0x3b0 [ 411.240016][T14696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.240039][T14696] RIP: 0033:0x7efefe36ce59 [ 411.240060][T14696] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 411.240092][T14696] RSP: 002b:00007efefcdc7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 411.240113][T14696] RAX: ffffffffffffffda RBX: 00007efefe5e5fa0 RCX: 00007efefe36ce59 [ 411.240178][T14696] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 411.240193][T14696] RBP: 00007efefe402d6f R08: 0000000000000000 R09: 0000000000000000 [ 411.240209][T14696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.240226][T14696] R13: 00007efefe5e6038 R14: 00007efefe5e5fa0 R15: 00007ffc97146568 [ 411.240247][T14696] [ 411.468101][T14696] memory: usage 307200kB, limit 307200kB, failcnt 2448 [ 411.495518][T14696] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 411.521625][T14696] kmem: usage 290468kB, limit 9007199254740988kB, failcnt 0 [ 411.548185][T14696] Memory cgroup stats for /syz5: [ 411.548422][T14696] cache 11755520 [ 411.586165][T14696] rss 5136384 [ 411.602218][T14696] shmem 11755520 [ 411.615908][T14696] mapped_file 0 [ 411.632093][T14696] dirty 0 [ 411.644524][T14696] writeback 0 [ 411.658511][T14696] workingset_refault_anon 0 [ 411.830800][T14696] workingset_refault_file 392 [ 411.848823][T14696] swap 0 [ 412.015824][T14696] swapcached 0 [ 412.026602][T14696] pgpgin 123070 [ 412.041200][T14696] pgpgout 118946 [ 412.053921][T14696] pgfault 171882 [ 412.069400][T14696] pgmajfault 5 [ 412.083127][T14696] inactive_anon 2056192 [ 412.108850][T14696] active_anon 14835712 [ 412.132827][T14696] inactive_file 0 [ 412.157676][T14696] active_file 0 [ 412.177207][T14696] unevictable 0 [ 412.196355][T15028] hub 8-0:1.0: USB hub found [ 412.201083][T14696] hierarchical_memory_limit 314572800 [ 412.224313][T14696] hierarchical_memsw_limit 9223372036854771712 [ 412.254419][T15028] hub 8-0:1.0: 8 ports detected [ 412.262654][T14696] total_cache 11755520 [ 412.280129][T14696] total_rss 5136384 [ 412.302438][T14696] total_shmem 11755520 [ 412.325367][T14696] total_mapped_file 0 [ 412.349192][T14696] total_dirty 0 [ 412.369806][T14696] total_writeback 0 [ 412.392022][T14696] total_workingset_refault_anon 0 [ 412.422375][T14696] total_workingset_refault_file 392 [ 412.453565][T14696] total_swap 0 [ 412.472164][T14696] total_swapcached 0 [ 412.494774][T14696] total_pgpgin 123070 [ 412.517911][T14696] total_pgpgout 118946 [ 412.542825][T14696] total_pgfault 171882 [ 412.566354][T14696] total_pgmajfault 5 [ 412.592155][T14696] total_inactive_anon 2056192 [ 412.623025][T14696] total_active_anon 14835712 [ 412.649536][T14696] total_inactive_file 0 [ 412.682199][T14696] total_active_file 0 [ 412.706190][T14696] total_unevictable 0 [ 412.727426][T14696] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz5,task_memcg=/syz5,task=syz.5.1791,pid=14695,uid=0 [ 412.812394][T14696] Memory cgroup out of memory: Killed process 14695 (syz.5.1791) total-vm:94300kB, anon-rss:1420kB, file-rss:22292kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 413.673670][T15032] syz.2.1801 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 414.010811][T15032] CPU: 0 UID: 0 PID: 15032 Comm: syz.2.1801 Not tainted syzkaller #0 PREEMPT(full) [ 414.010843][T15032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 414.010859][T15032] Call Trace: [ 414.010867][T15032] [ 414.010877][T15032] __dump_stack+0x1d/0x30 [ 414.010900][T15032] dump_stack_lvl+0x95/0xd0 [ 414.011005][T15032] dump_stack+0x15/0x1b [ 414.011029][T15032] dump_header+0x80/0x240 [ 414.011105][T15032] oom_kill_process+0x295/0x350 [ 414.011206][T15032] out_of_memory+0x97d/0xb80 [ 414.011257][T15032] try_charge_memcg+0x62f/0xa10 [ 414.011296][T15032] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 414.011327][T15032] __alloc_frozen_pages_noprof+0x18a/0x350 [ 414.011420][T15032] alloc_pages_mpol+0xb3/0x260 [ 414.011489][T15032] alloc_pages_noprof+0x8f/0x140 [ 414.011565][T15032] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 414.011596][T15032] __kvmalloc_node_noprof+0x3d4/0x640 [ 414.011616][T15032] ? futex_hash_allocate+0x190/0x9a0 [ 414.011651][T15032] ? futex_hash_allocate+0x190/0x9a0 [ 414.011693][T15032] futex_hash_allocate+0x190/0x9a0 [ 414.011721][T15032] ? cap_task_prctl+0x13f/0x6b0 [ 414.011745][T15032] futex_hash_prctl+0xd8/0xf0 [ 414.011888][T15032] __se_sys_prctl+0x4f4/0x1400 [ 414.011916][T15032] __x64_sys_prctl+0x67/0x80 [ 414.011998][T15032] x64_sys_call+0x2533/0x3020 [ 414.012020][T15032] do_syscall_64+0x12c/0x3b0 [ 414.012047][T15032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.012072][T15032] RIP: 0033:0x7f15c828ce59 [ 414.012093][T15032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 414.012200][T15032] RSP: 002b:00007f15c6cc6028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 414.012294][T15032] RAX: ffffffffffffffda RBX: 00007f15c8506090 RCX: 00007f15c828ce59 [ 414.012312][T15032] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 414.012328][T15032] RBP: 00007f15c8322d6f R08: 0000000000000000 R09: 0000000000000000 [ 414.012341][T15032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.012354][T15032] R13: 00007f15c8506128 R14: 00007f15c8506090 R15: 00007ffc711fd0d8 [ 414.012420][T15032] [ 414.234452][T15032] memory: usage 307200kB, limit 307200kB, failcnt 5617 [ 414.267447][T15032] memory+swap: usage 363108kB, limit 9007199254740988kB, failcnt 0 [ 414.284329][T15032] kmem: usage 246632kB, limit 9007199254740988kB, failcnt 0 [ 414.301928][T15032] Memory cgroup stats for /syz2: [ 414.302207][T15032] cache 57004032 [ 414.323408][T15032] rss 4673536 [ 414.334428][T15032] shmem 57004032 [ 414.341134][T15032] mapped_file 0 [ 414.349653][T15032] dirty 0 [ 414.355836][T15032] writeback 0 [ 414.365845][T15032] workingset_refault_anon 3 [ 414.419410][T15032] workingset_refault_file 12444 [ 414.435450][T15032] swap 57249792 [ 414.444604][T15032] swapcached 59781120 [ 414.455955][T15032] pgpgin 273176 [ 414.461008][T15032] pgpgout 258034 [ 414.470118][T15032] pgfault 298843 [ 414.480210][T15032] pgmajfault 151 [ 414.483797][T15032] inactive_anon 1818624 [ 414.491736][T15032] active_anon 60203008 [ 414.503433][T15032] inactive_file 0 [ 414.518190][T15032] active_file 0 [ 414.522770][T15146] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1805'. [ 414.539293][T15032] unevictable 0 [ 414.551793][T15032] hierarchical_memory_limit 314572800 [ 414.563718][T15146] netlink: 'syz.0.1805': attribute type 21 has an invalid length. [ 414.584680][T15032] hierarchical_memsw_limit 9223372036854771712 [ 414.736819][T15032] total_cache 57004032 [ 414.750230][T15032] total_rss 4673536 [ 414.763850][T15032] total_shmem 57004032 [ 414.775388][T15032] total_mapped_file 0 [ 414.989405][T15032] total_dirty 0 [ 414.996201][T15032] total_writeback 0 [ 415.004842][T15032] total_workingset_refault_anon 3 [ 415.387746][T15150] xt_CT: You must specify a L4 protocol and not use inversions on it [ 415.412320][T15032] total_workingset_refault_file 12444 [ 415.498406][T15032] total_swap 57249792 [ 415.714358][T15032] total_swapcached 59781120 [ 415.723610][T15032] total_pgpgin 273176 [ 415.737485][T15032] total_pgpgout 258034 [ 416.108200][T15032] total_pgfault 298843 [ 416.118587][T15032] total_pgmajfault 151 [ 416.128129][T15032] total_inactive_anon 1818624 [ 416.229635][T15158] hub 8-0:1.0: USB hub found [ 416.234457][T15158] hub 8-0:1.0: 8 ports detected [ 416.260189][T15032] total_active_anon 60203008 [ 416.274877][T15032] total_inactive_file 0 [ 416.283371][T15032] total_active_file 0 [ 416.295789][T15032] total_unevictable 0 [ 416.311043][T15032] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1801,pid=15030,uid=0 [ 416.363234][T15032] Memory cgroup out of memory: Killed process 15032 (syz.2.1801) total-vm:94300kB, anon-rss:1424kB, file-rss:22288kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 416.575863][T15160] netlink: 'syz.2.1809': attribute type 3 has an invalid length. [ 416.584540][T15160] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1809'. [ 418.306406][T15354] cgroup: fork rejected by pids controller in /syz3 [ 419.655997][T15379] syz.2.1814 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=1000 [ 419.670188][T15379] CPU: 1 UID: 0 PID: 15379 Comm: syz.2.1814 Not tainted syzkaller #0 PREEMPT(full) [ 419.670222][T15379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 419.670286][T15379] Call Trace: [ 419.670294][T15379] [ 419.670383][T15379] __dump_stack+0x1d/0x30 [ 419.670412][T15379] dump_stack_lvl+0x95/0xd0 [ 419.670438][T15379] dump_stack+0x15/0x1b [ 419.670461][T15379] dump_header+0x80/0x240 [ 419.670484][T15379] oom_kill_process+0x295/0x350 [ 419.670575][T15379] out_of_memory+0x97d/0xb80 [ 419.670612][T15379] try_charge_memcg+0x62f/0xa10 [ 419.670654][T15379] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 419.670788][T15379] __alloc_frozen_pages_noprof+0x18a/0x350 [ 419.670874][T15379] alloc_pages_mpol+0xb3/0x260 [ 419.670962][T15379] alloc_pages_noprof+0x8f/0x140 [ 419.670984][T15379] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 419.671060][T15379] __kvmalloc_node_noprof+0x3d4/0x640 [ 419.671105][T15379] ? futex_hash_allocate+0x190/0x9a0 [ 419.671132][T15379] ? futex_hash_allocate+0x190/0x9a0 [ 419.671178][T15379] futex_hash_allocate+0x190/0x9a0 [ 419.671271][T15379] ? cap_task_prctl+0x13f/0x6b0 [ 419.671296][T15379] futex_hash_prctl+0xd8/0xf0 [ 419.671323][T15379] __se_sys_prctl+0x4f4/0x1400 [ 419.671353][T15379] __x64_sys_prctl+0x67/0x80 [ 419.671414][T15379] x64_sys_call+0x2533/0x3020 [ 419.671440][T15379] do_syscall_64+0x12c/0x3b0 [ 419.671468][T15379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 419.671585][T15379] RIP: 0033:0x7f15c828ce59 [ 419.671605][T15379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 419.671684][T15379] RSP: 002b:00007f15c6ce7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 419.671710][T15379] RAX: ffffffffffffffda RBX: 00007f15c8505fa0 RCX: 00007f15c828ce59 [ 419.671725][T15379] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 419.671816][T15379] RBP: 00007f15c8322d6f R08: 0000000000000000 R09: 0000000000000000 [ 419.671832][T15379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 419.671847][T15379] R13: 00007f15c8506038 R14: 00007f15c8505fa0 R15: 00007ffc711fd0d8 [ 419.671867][T15379] [ 419.671874][T15379] memory: usage 307200kB, limit 307200kB, failcnt 5687 [ 420.081342][T15379] memory+swap: usage 336300kB, limit 9007199254740988kB, failcnt 0 [ 420.094935][T15379] kmem: usage 219680kB, limit 9007199254740988kB, failcnt 0 [ 420.216904][T15484] loop3: detected capacity change from 0 to 164 [ 420.255287][T15379] Memory cgroup stats for /syz2: [ 420.255729][T15379] cache 57004032 [ 420.264614][T15379] rss 4665344 [ 420.268342][T15379] shmem 57004032 [ 420.271948][T15379] mapped_file 0 [ 420.275803][T15379] dirty 0 [ 420.278805][T15379] writeback 0 [ 420.282130][T15379] workingset_refault_anon 3 [ 420.286928][T15379] workingset_refault_file 12444 [ 420.291921][T15379] swap 57249792 [ 420.295428][T15379] swapcached 59781120 [ 420.299801][T15379] pgpgin 273251 [ 420.303371][T15379] pgpgout 258111 [ 420.455850][T15379] pgfault 299097 [ 420.459551][T15379] pgmajfault 151 [ 420.466869][T15379] inactive_anon 1818624 [ 420.615183][T15379] active_anon 60194816 [ 420.651040][T15379] inactive_file 0 [ 420.676309][T15379] active_file 0 [ 420.698622][T15379] unevictable 0 [ 420.741927][T15379] hierarchical_memory_limit 314572800 [ 420.792904][T15379] hierarchical_memsw_limit 9223372036854771712 [ 420.850753][T15379] total_cache 57004032 [ 420.880294][T15379] total_rss 4665344 [ 420.905462][T15379] total_shmem 57004032 [ 421.121038][T15379] total_mapped_file 0 [ 421.134014][T15379] total_dirty 0 [ 421.146531][T15379] total_writeback 0 [ 421.158252][T15379] total_workingset_refault_anon 3 [ 421.178775][T15379] total_workingset_refault_file 12444 [ 421.201755][T15379] total_swap 57249792 [ 421.225434][T15379] total_swapcached 59781120 [ 421.244547][T15379] total_pgpgin 273251 [ 421.293003][T15379] total_pgpgout 258111 [ 421.314920][T15379] total_pgfault 299097 [ 421.330316][T15484] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 421.345787][T15379] total_pgmajfault 151 [ 421.358181][T15379] total_inactive_anon 1818624 [ 421.376641][T15379] total_active_anon 60194816 [ 421.389614][T15379] total_inactive_file 0 [ 421.408922][T15379] total_active_file 0 [ 421.439954][T15379] total_unevictable 0 [ 421.458118][T15379] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.1814,pid=15378,uid=0 [ 421.491227][T15379] Memory cgroup out of memory: Killed process 15379 (syz.2.1814) total-vm:94168kB, anon-rss:1416kB, file-rss:22292kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 422.470219][T15712] hub 8-0:1.0: USB hub found [ 423.857386][T15712] hub 8-0:1.0: 8 ports detected [ 424.099735][T15723] hub 8-0:1.0: USB hub found [ 424.104520][T15723] hub 8-0:1.0: 8 ports detected [ 428.176989][T15843] xt_CT: You must specify a L4 protocol and not use inversions on it [ 428.686862][T15850] loop2: detected capacity change from 0 to 256 [ 429.638957][T15866] loop3: detected capacity change from 0 to 256 [ 429.796600][ T28] audit: type=1400 audit(2000000307.922:1141): avc: denied { remount } for pid=15859 comm="syz.3.1835" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 431.428099][T15979] hub 8-0:1.0: USB hub found [ 431.433054][T15979] hub 8-0:1.0: 8 ports detected [ 431.675230][T15982] loop3: detected capacity change from 0 to 256 [ 432.120523][T15991] hub 8-0:1.0: USB hub found [ 432.125247][T15991] hub 8-0:1.0: 8 ports detected [ 432.136031][T15992] hub 8-0:1.0: USB hub found [ 432.140773][T15992] hub 8-0:1.0: 8 ports detected [ 432.186187][T15995] hub 8-0:1.0: USB hub found [ 432.195145][T15994] netlink: 'syz.0.1844': attribute type 3 has an invalid length. [ 432.204387][T15995] hub 8-0:1.0: 8 ports detected [ 432.209512][T15994] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1844'. [ 433.141630][T16007] loop1: detected capacity change from 0 to 256 [ 433.238347][T16114] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1851'. [ 435.569565][T16224] hub 8-0:1.0: USB hub found [ 435.574749][T16224] hub 8-0:1.0: 8 ports detected [ 436.666100][T16232] hub 8-0:1.0: USB hub found [ 436.671598][T16232] hub 8-0:1.0: 8 ports detected [ 436.742346][T16235] hub 8-0:1.0: USB hub found [ 436.747564][T16235] hub 8-0:1.0: 8 ports detected [ 436.861900][T16241] netlink: 'syz.2.1858': attribute type 3 has an invalid length. [ 437.057393][T16241] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1858'. [ 437.192220][T16249] loop2: detected capacity change from 0 to 256 [ 438.176120][T16252] loop3: detected capacity change from 0 to 256 [ 438.548220][T16250] hub 8-0:1.0: USB hub found [ 438.553004][T16250] hub 8-0:1.0: 8 ports detected [ 440.151361][T16260] xt_CT: You must specify a L4 protocol and not use inversions on it [ 441.131228][T16263] xt_CT: You must specify a L4 protocol and not use inversions on it [ 442.919145][T16281] loop2: detected capacity change from 0 to 256 [ 447.589994][T16308] loop3: detected capacity change from 0 to 164 [ 447.626239][T16308] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 448.216918][T16288] xt_CT: You must specify a L4 protocol and not use inversions on it [ 448.619832][T16317] hub 8-0:1.0: USB hub found [ 448.624662][T16317] hub 8-0:1.0: 8 ports detected [ 449.336320][T16321] loop3: detected capacity change from 0 to 256 [ 449.462980][T16426] hub 8-0:1.0: USB hub found [ 449.524340][T16426] hub 8-0:1.0: 8 ports detected [ 449.624656][T16428] loop3: detected capacity change from 0 to 256 [ 450.466175][T16642] hub 8-0:1.0: USB hub found [ 450.471509][T16642] hub 8-0:1.0: 8 ports detected [ 450.987493][T16646] hub 8-0:1.0: USB hub found [ 450.992312][T16646] hub 8-0:1.0: 8 ports detected [ 451.020916][T16638] loop3: detected capacity change from 0 to 256 [ 451.315998][T16648] loop1: detected capacity change from 0 to 256 [ 451.703794][T16655] loop2: detected capacity change from 0 to 256 [ 451.796880][T16652] loop5: detected capacity change from 0 to 256 [ 454.536995][T16850] xt_CT: You must specify a L4 protocol and not use inversions on it [ 454.848777][T16874] loop1: detected capacity change from 0 to 164 [ 455.131806][T16874] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 455.974582][T17094] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1897'. [ 455.978021][T17094] netlink: 'syz.3.1897': attribute type 21 has an invalid length. [ 456.319177][T17101] loop3: detected capacity change from 0 to 256 [ 456.374816][T17100] loop5: detected capacity change from 0 to 256 [ 457.347746][T17105] hub 8-0:1.0: USB hub found [ 457.352640][T17105] hub 8-0:1.0: 8 ports detected [ 458.044312][T17210] loop2: detected capacity change from 0 to 256 [ 458.260735][T17220] xt_CT: You must specify a L4 protocol and not use inversions on it [ 460.097106][T17494] hub 8-0:1.0: USB hub found [ 460.102171][T17494] hub 8-0:1.0: 8 ports detected [ 460.881004][T17545] loop1: detected capacity change from 0 to 256 [ 460.997569][T17547] loop2: detected capacity change from 0 to 256 [ 462.405925][T17660] loop1: detected capacity change from 0 to 256 [ 462.496252][T17663] loop2: detected capacity change from 0 to 256 [ 463.250581][T17878] xt_CT: You must specify a L4 protocol and not use inversions on it [ 465.431421][T17990] hub 8-0:1.0: USB hub found [ 465.436227][T17990] hub 8-0:1.0: 8 ports detected [ 466.593517][T17994] xt_CT: You must specify a L4 protocol and not use inversions on it [ 467.982622][T18105] xt_CT: You must specify a L4 protocol and not use inversions on it [ 471.703929][T18144] hub 8-0:1.0: USB hub found [ 471.708778][T18144] hub 8-0:1.0: 8 ports detected [ 471.737753][T18145] hub 8-0:1.0: USB hub found [ 471.742592][T18145] hub 8-0:1.0: 8 ports detected [ 471.845577][T18153] hub 8-0:1.0: USB hub found [ 471.850409][T18153] hub 8-0:1.0: 8 ports detected [ 471.992689][T18158] loop5: detected capacity change from 0 to 164 [ 472.132682][T18158] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 473.002617][T18266] hub 8-0:1.0: USB hub found [ 473.007421][T18266] hub 8-0:1.0: 8 ports detected [ 473.477687][T18278] hub 8-0:1.0: USB hub found [ 473.482747][T18278] hub 8-0:1.0: 8 ports detected [ 475.528647][T18288] hub 8-0:1.0: USB hub found [ 475.533477][T18288] hub 8-0:1.0: 8 ports detected [ 476.001807][T18290] hub 8-0:1.0: USB hub found [ 476.471776][T18290] hub 8-0:1.0: 8 ports detected [ 476.773300][T18399] loop5: detected capacity change from 0 to 256 [ 476.807934][T18403] loop2: detected capacity change from 0 to 164 [ 476.832258][T18401] loop1: detected capacity change from 0 to 256 [ 476.942376][T18403] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 477.195905][T18408] loop2: detected capacity change from 0 to 256 [ 477.519634][T18514] hub 8-0:1.0: USB hub found [ 477.524383][T18514] hub 8-0:1.0: 8 ports detected [ 478.292528][T18523] loop3: detected capacity change from 0 to 256 [ 478.308861][T18520] loop1: detected capacity change from 0 to 256 [ 478.512760][T18532] hub 8-0:1.0: USB hub found [ 478.518195][T18532] hub 8-0:1.0: 8 ports detected [ 478.611605][T18536] hub 8-0:1.0: USB hub found [ 478.616582][T18536] hub 8-0:1.0: 8 ports detected [ 480.041225][T18708] loop1: detected capacity change from 0 to 256 [ 480.566704][T18724] loop3: detected capacity change from 0 to 164 [ 480.868794][T18724] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 480.975003][T18754] loop2: detected capacity change from 0 to 256 [ 481.159948][T18756] loop3: detected capacity change from 0 to 256 [ 481.296308][T18760] loop1: detected capacity change from 0 to 256 [ 481.490697][T18766] hub 8-0:1.0: USB hub found [ 481.511704][T18766] hub 8-0:1.0: 8 ports detected [ 481.830700][T18878] xt_CT: You must specify a L4 protocol and not use inversions on it [ 482.677112][T18883] loop1: detected capacity change from 0 to 256 [ 484.135658][T19007] loop3: detected capacity change from 0 to 256 [ 485.230178][T19022] loop1: detected capacity change from 0 to 164 [ 485.377270][T19022] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 485.409244][T19126] loop2: detected capacity change from 0 to 256 [ 485.655477][T19137] hub 8-0:1.0: USB hub found [ 485.710464][T19137] hub 8-0:1.0: 8 ports detected [ 487.017871][T19354] xt_CT: You must specify a L4 protocol and not use inversions on it [ 487.994605][T19360] netlink: 'syz.5.2000': attribute type 3 has an invalid length. [ 488.035231][T19360] netlink: 199836 bytes leftover after parsing attributes in process `syz.5.2000'. [ 488.289554][T19362] loop2: detected capacity change from 0 to 256 [ 488.797504][T19470] loop5: detected capacity change from 0 to 164 [ 488.806560][T19473] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2005'. [ 488.836206][T19473] netlink: 'syz.3.2005': attribute type 21 has an invalid length. [ 488.927298][ T28] audit: type=1326 audit(2000000367.052:1142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19476 comm="syz.3.2006" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4be8cce59 code=0x7ffc0000 [ 489.030867][ T28] audit: type=1326 audit(2000000367.072:1143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19476 comm="syz.3.2006" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fd4be8cce59 code=0x7ffc0000 [ 489.127204][ T28] audit: type=1326 audit(2000000367.072:1144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19476 comm="syz.3.2006" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd4be8cce59 code=0x7ffc0000 [ 489.272748][T19480] loop3: detected capacity change from 0 to 256 [ 489.614979][T19470] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 490.695752][T19496] loop1: detected capacity change from 0 to 256 [ 491.210784][T19601] hub 8-0:1.0: USB hub found [ 491.215523][T19601] hub 8-0:1.0: 8 ports detected [ 491.362814][T19603] loop2: detected capacity change from 0 to 256 [ 491.895525][T19614] xt_CT: You must specify a L4 protocol and not use inversions on it [ 492.055857][ T28] audit: type=1326 audit(2000000370.152:1145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19610 comm="syz.1.2017" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8b86ce59 code=0x7ffc0000 [ 492.503566][ T28] audit: type=1326 audit(2000000370.162:1146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19610 comm="syz.1.2017" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8b86ce59 code=0x7ffc0000 [ 492.535394][T19617] loop3: detected capacity change from 0 to 256 [ 492.545657][ T28] audit: type=1326 audit(2000000370.162:1147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19610 comm="syz.1.2017" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fbf8b86ce59 code=0x7ffc0000 [ 493.522411][ T28] audit: type=1326 audit(2000000370.162:1148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19610 comm="syz.1.2017" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8b86ce59 code=0x7ffc0000 [ 493.566118][ T28] audit: type=1326 audit(2000000370.172:1149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19610 comm="syz.1.2017" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf8b86ce59 code=0x7ffc0000 [ 493.603420][T19624] xt_CT: You must specify a L4 protocol and not use inversions on it [ 494.481166][T19883] loop2: detected capacity change from 0 to 256 [ 497.479826][T20056] hub 8-0:1.0: USB hub found [ 497.509464][T20056] hub 8-0:1.0: 8 ports detected [ 497.772045][T20060] hub 8-0:1.0: USB hub found [ 497.802678][T20060] hub 8-0:1.0: 8 ports detected [ 498.103094][T20063] loop1: detected capacity change from 0 to 256 [ 498.704905][ T28] audit: type=1400 audit(2000000376.822:1150): avc: denied { mounton } for pid=20276 comm="syz.1.2034" path="/394/file0" dev="tmpfs" ino=2185 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 498.775634][ T28] audit: type=1400 audit(2000000376.822:1151): avc: denied { mount } for pid=20276 comm="syz.1.2034" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 498.808195][T20284] veth1_macvtap: left promiscuous mode [ 498.844659][T20286] wg2: entered promiscuous mode [ 498.860129][T20286] wg2: entered allmulticast mode [ 498.922365][T20293] dummy0: entered promiscuous mode [ 498.933729][T20293] dummy0: entered allmulticast mode [ 498.947021][T20291] tap0: tun_chr_ioctl cmd 1074025681 [ 499.024810][T20293] lo speed is unknown, defaulting to 1000 [ 499.445807][T20317] syzkaller0: entered promiscuous mode [ 499.460555][T20317] syzkaller0: entered allmulticast mode [ 499.478635][ T28] audit: type=1400 audit(2000000377.592:1152): avc: denied { relabelfrom } for pid=20316 comm="syz.2.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 499.542319][ T28] audit: type=1400 audit(2000000377.592:1153): avc: denied { relabelto } for pid=20316 comm="syz.2.2049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 499.887550][T20336] syzkaller0: entered promiscuous mode [ 499.901990][T20336] syzkaller0: entered allmulticast mode [ 500.216979][T20344] syzkaller0: entered promiscuous mode [ 500.231851][T20344] syzkaller0: entered allmulticast mode [ 500.365678][T20347] syzkaller0: entered promiscuous mode [ 500.375917][T20347] syzkaller0: entered allmulticast mode [ 500.382972][T20351] bridge0: port 10(gretap0) entered blocking state [ 500.394768][T20351] bridge0: port 10(gretap0) entered disabled state [ 500.402461][T20351] gretap0: entered allmulticast mode [ 500.431182][T20351] gretap0: entered promiscuous mode [ 500.468642][T20351] bridge0: port 10(gretap0) entered blocking state [ 500.475261][T20351] bridge0: port 10(gretap0) entered forwarding state [ 500.540785][T20462] syzkaller0: entered promiscuous mode [ 500.560753][T20462] syzkaller0: entered allmulticast mode [ 500.760913][ T28] audit: type=1400 audit(2000000378.862:1154): avc: denied { write } for pid=20467 comm="syz.0.2067" name="cgroup.subtree_control" dev="cgroup2" ino=272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 500.819319][ T28] audit: type=1400 audit(2000000378.882:1155): avc: denied { open } for pid=20467 comm="syz.0.2067" path="" dev="cgroup2" ino=272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 500.962118][T20481] syzkaller0: entered promiscuous mode [ 500.979782][T20481] syzkaller0: entered allmulticast mode [ 501.732776][T20505] lo speed is unknown, defaulting to 1000 [ 502.197699][T20552] bridge0: entered allmulticast mode [ 502.218589][T20552] batadv12: left allmulticast mode [ 502.227023][T20552] batadv12: left promiscuous mode [ 502.235658][T20552] bridge0: port 13(batadv12) entered disabled state [ 502.274646][T20552] batadv11: left allmulticast mode [ 502.279938][T20552] batadv11: left promiscuous mode [ 502.286968][T20552] bridge0: port 12(batadv11) entered disabled state [ 502.296667][T20552] batadv10: left allmulticast mode [ 502.301862][T20552] batadv10: left promiscuous mode [ 502.307311][T20552] bridge0: port 11(batadv10) entered disabled state [ 502.314674][T20552] batadv9: left allmulticast mode [ 502.320559][T20552] batadv9: left promiscuous mode [ 502.326080][T20552] bridge0: port 10(batadv9) entered disabled state [ 502.333282][T20552] batadv8: left allmulticast mode [ 502.338495][T20552] batadv8: left promiscuous mode [ 502.343557][T20552] bridge0: port 9(batadv8) entered disabled state [ 502.351010][T20552] batadv7: left allmulticast mode [ 502.356245][T20552] batadv7: left promiscuous mode [ 502.361501][T20552] bridge0: port 8(batadv7) entered disabled state [ 502.371823][T20552] batadv6: left allmulticast mode [ 502.378194][T20552] batadv6: left promiscuous mode [ 502.383285][T20552] bridge0: port 7(batadv6) entered disabled state [ 502.390603][T20552] batadv5: left allmulticast mode [ 502.396090][T20552] batadv5: left promiscuous mode [ 502.401159][T20552] bridge0: port 6(batadv5) entered disabled state [ 502.408361][T20552] batadv3: left allmulticast mode [ 502.413500][T20552] batadv3: left promiscuous mode [ 502.418727][T20552] bridge0: port 5(batadv3) entered disabled state [ 502.426248][T20552] batadv2: left allmulticast mode [ 502.431285][T20552] batadv2: left promiscuous mode [ 502.436395][T20552] bridge0: port 4(batadv2) entered disabled state [ 502.443567][T20552] batadv1: left allmulticast mode [ 502.448799][T20552] batadv1: left promiscuous mode [ 502.454059][T20552] bridge0: port 3(batadv1) entered disabled state [ 502.461185][T20552] bridge_slave_1: left allmulticast mode [ 502.466998][T20552] bridge_slave_1: left promiscuous mode [ 502.472936][T20552] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.481106][T20552] bridge_slave_0: left allmulticast mode [ 502.486996][T20552] bridge_slave_0: left promiscuous mode [ 502.492866][T20552] bridge0: port 1(bridge_slave_0) entered disabled state [ 502.547100][T20660] syzkaller0: entered promiscuous mode [ 502.552677][T20660] syzkaller0: entered allmulticast mode [ 502.749833][T20769] bridge0: port 17(gretap0) entered blocking state [ 502.758610][T20769] bridge0: port 17(gretap0) entered disabled state [ 502.769147][T20769] gretap0: entered allmulticast mode [ 502.782400][T20769] gretap0: entered promiscuous mode [ 502.796878][T20769] bridge0: port 17(gretap0) entered blocking state [ 502.804404][T20769] bridge0: port 17(gretap0) entered forwarding state [ 502.939367][T20781] syzkaller0: entered promiscuous mode [ 502.951898][T20781] syzkaller0: entered allmulticast mode [ 503.024302][ T28] audit: type=1400 audit(2000000381.132:1156): avc: denied { ioctl } for pid=20784 comm="syz.1.2113" path="pid:[4026532365]" dev="nsfs" ino=4026532365 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 503.248489][ T28] audit: type=1400 audit(2000000381.362:1157): avc: denied { unmount } for pid=5678 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 503.363452][ T28] audit: type=1400 audit(2000000381.482:1158): avc: denied { ioctl } for pid=20910 comm="syz.5.2125" path="socket:[28894]" dev="sockfs" ino=28894 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 503.452611][ T28] audit: type=1400 audit(2000000381.542:1159): avc: denied { setopt } for pid=20913 comm="syz.3.2126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 503.681425][T20945] syzkaller0: entered promiscuous mode [ 503.687296][T20945] syzkaller0: entered allmulticast mode [ 503.859837][T20978] netlink: 'syz.3.2148': attribute type 1 has an invalid length. [ 503.905642][T20978] 8021q: adding VLAN 0 to HW filter on device bond0 [ 503.934709][T20978] bond0: (slave geneve2): making interface the new active one [ 503.944024][T20978] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 503.950877][T20989] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2153'. [ 504.006957][T20994] xt_connbytes: Forcing CT accounting to be enabled [ 504.165142][T20986] syzkaller0: entered promiscuous mode [ 504.171195][T20986] syzkaller0: entered allmulticast mode [ 504.236674][ T28] audit: type=1400 audit(2000000382.362:1160): avc: denied { create } for pid=21012 comm="syz.3.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 504.273010][ T28] audit: type=1400 audit(2000000382.382:1161): avc: denied { setopt } for pid=21012 comm="syz.3.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 504.318884][ T28] audit: type=1400 audit(2000000382.382:1162): avc: denied { write } for pid=21012 comm="syz.3.2160" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 504.371994][T21021] syzkaller0: entered promiscuous mode [ 504.377857][T21021] syzkaller0: entered allmulticast mode [ 504.427504][T21027] syzkaller0: entered promiscuous mode [ 504.442914][ T28] audit: type=1400 audit(2000000382.552:1163): avc: denied { name_connect } for pid=21033 comm="syz.0.2166" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 504.465521][T21027] syzkaller0: entered allmulticast mode [ 504.535787][T21042] syzkaller0: entered promiscuous mode [ 504.550861][T21042] syzkaller0: entered allmulticast mode [ 504.571394][ T28] audit: type=1400 audit(2000000382.692:1164): avc: denied { open } for pid=21044 comm="syz.5.2169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 504.624005][ T28] audit: type=1400 audit(2000000382.692:1165): avc: denied { kernel } for pid=21044 comm="syz.5.2169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 504.661276][ T28] audit: type=1400 audit(2000000382.782:1166): avc: denied { write } for pid=21044 comm="syz.5.2169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 504.661547][T21152] netlink: 'syz.0.2173': attribute type 1 has an invalid length. [ 504.689944][T21152] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2173'. [ 504.710306][T21045] lo speed is unknown, defaulting to 1000 [ 504.845654][T21163] syzkaller0: entered promiscuous mode [ 504.858312][T21163] syzkaller0: entered allmulticast mode [ 505.071430][T21172] ------------[ cut here ]------------ [ 505.076942][T21172] WARNING: kernel/signal.c:2174 at do_notify_parent+0x5c3/0x600, CPU#1: syz.5.2169/21172 [ 505.086872][T21172] Modules linked in: [ 505.090777][T21172] CPU: 1 UID: 0 PID: 21172 Comm: syz.5.2169 Not tainted syzkaller #0 PREEMPT(full) [ 505.100228][T21172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 505.110475][T21172] RIP: 0010:do_notify_parent+0x5c3/0x600 [ 505.116134][T21172] Code: 8b 05 c1 79 f6 07 48 3b 44 24 48 75 41 44 89 f0 48 83 c4 50 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 9e 1a 1e 00 90 <0f> 0b 90 45 31 f6 eb cc e8 90 1a 1e 00 90 0f 0b 90 e9 af fa ff ff [ 505.135887][T21172] RSP: 0018:ffffc9000da2bdd8 EFLAGS: 00010093 [ 505.141961][T21172] RAX: ffffffff813b1682 RBX: ffff888174c4c400 RCX: ffff888174c4c400 [ 505.150230][T21172] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 0000000000000040 [ 505.158209][T21172] RBP: 0000000000000080 R08: ffff888174c4cf00 R09: 0000000000000000 [ 505.166205][T21172] R10: ffffc9000da2bdf0 R11: 0001c9000da2bdf0 R12: ffff888174c4c400 [ 505.174355][T21172] R13: ffff888174c4cc28 R14: ffff8881cb96f190 R15: 0000000000000080 [ 505.182470][T21172] FS: 0000000000000000(0000) GS:ffff8882ae9fb000(0000) knlGS:0000000000000000 [ 505.191508][T21172] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 505.198107][T21172] CR2: 00007f15c82da540 CR3: 000000019889c000 CR4: 00000000003506f0 [ 505.206207][T21172] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 505.214198][T21172] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 505.222358][T21172] Call Trace: [ 505.225679][T21172] [ 505.228642][T21172] ? _raw_spin_lock_irqsave+0x57/0xb0 [ 505.234112][T21172] ? __list_add_valid_or_report+0x38/0xe0 [ 505.239855][T21172] do_exit+0xc13/0x1530 [ 505.244028][T21172] ? switch_fpu_return+0xe7/0x1b0 [ 505.249060][T21172] __x64_sys_exit+0x1f/0x20 [ 505.253611][T21172] x64_sys_call+0x301d/0x3020 [ 505.258350][T21172] do_syscall_64+0x12c/0x3b0 [ 505.263024][T21172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.268968][T21172] RIP: 0033:0x7efefe36ce59 [ 505.273455][T21172] Code: Unable to access opcode bytes at 0x7efefe36ce2f. [ 505.280478][T21172] RSP: 002b:00007efefcdc6fd8 EFLAGS: 00000246 ORIG_RAX: 000000000000003c [ 505.288951][T21172] RAX: ffffffffffffffda RBX: 00007efefe5e5fa0 RCX: 00007efefe36ce59 [ 505.297103][T21172] RDX: 00007efefcdc79c8 RSI: 0000000000000000 RDI: 0000000000000000 [ 505.305129][T21172] RBP: 00007efefe402d6f R08: 0000000000000000 R09: 0000000000000000 [ 505.313177][T21172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 505.321213][T21172] R13: 00007efefe5e6038 R14: 00007efefe5e5fa0 R15: 00007ffc97146568 [ 505.329251][T21172] [ 505.332271][T21172] ---[ end trace 0000000000000000 ]--- [ 505.374466][T21187] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 505.514973][T21223] syzkaller0: entered promiscuous mode [ 505.522873][T21223] syzkaller0: entered allmulticast mode [ 505.593033][ T28] audit: type=1400 audit(2000000383.712:1167): avc: denied { create } for pid=21229 comm="syz.1.2199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 505.622497][ T28] audit: type=1400 audit(2000000383.742:1168): avc: denied { write } for pid=21229 comm="syz.1.2199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 505.679332][ T28] audit: type=1400 audit(2000000383.772:1169): avc: denied { create } for pid=21233 comm="syz.5.2202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 505.925537][T21232] lo speed is unknown, defaulting to 1000 [ 506.130993][T21274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2217'. [ 506.393255][T21291] syzkaller0: entered promiscuous mode [ 506.398951][T21291] syzkaller0: entered allmulticast mode [ 506.475609][T21293] syzkaller0: entered promiscuous mode [ 506.481164][T21293] syzkaller0: entered allmulticast mode [ 506.596363][T21303] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2229'. [ 506.720659][T21315] syz_tun: entered allmulticast mode [ 506.734275][T21315] pim6reg: entered allmulticast mode [ 506.749234][T21315] syz_tun (unregistering): left allmulticast mode [ 506.921463][T21326] syzkaller0: entered promiscuous mode [ 506.927006][T21326] syzkaller0: entered allmulticast mode [ 507.108770][T21344] syzkaller0: entered promiscuous mode [ 507.114298][T21344] syzkaller0: entered allmulticast mode [ 507.379651][T21368] lo: entered allmulticast mode [ 508.707887][T21240] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 508.717501][T21283] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2220'. [ 508.893139][T21415] syzkaller0: entered promiscuous mode [ 508.901873][T21415] syzkaller0: entered allmulticast mode [ 508.997791][T21420] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 509.082156][T21434] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.127086][T21440] syzkaller0: entered promiscuous mode [ 509.137301][T21440] syzkaller0: entered allmulticast mode [ 509.174544][T21447] syz_tun (unregistering): left allmulticast mode [ 509.199473][T21449] syzkaller0: entered promiscuous mode [ 509.205340][T21449] syzkaller0: entered allmulticast mode [ 509.345462][T21465] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2295'. [ 509.368513][T21467] vlan2: entered promiscuous mode [ 509.379383][T21467] bridge0: entered promiscuous mode [ 509.425594][T21472] syzkaller0: entered promiscuous mode [ 509.431625][T21472] syzkaller0: entered allmulticast mode [ 509.550050][T21482] syzkaller0: entered promiscuous mode [ 509.556112][T21482] syzkaller0: entered allmulticast mode [ 509.582823][T21486] syzkaller0: entered promiscuous mode [ 509.588564][T21486] syzkaller0: entered allmulticast mode [ 509.639549][T21488] netlink: 'syz.2.2305': attribute type 1 has an invalid length. [ 509.652683][T21488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 509.752243][T21501] syzkaller0: entered promiscuous mode [ 509.758095][T21501] syzkaller0: entered allmulticast mode [ 509.772072][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 509.772100][ T28] audit: type=1400 audit(2000000387.892:1174): avc: denied { mount } for pid=21504 comm="syz.3.2313" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 509.803904][ T28] audit: type=1400 audit(2000000387.912:1175): avc: denied { unmount } for pid=3295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 509.850094][ T28] audit: type=1400 audit(2000000387.972:1176): avc: denied { connect } for pid=21509 comm="syz.3.2314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 509.899210][ T28] audit: type=1400 audit(2000000387.972:1177): avc: denied { read } for pid=21509 comm="syz.3.2314" path="socket:[29969]" dev="sockfs" ino=29969 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 509.902588][T21513] syzkaller0: entered promiscuous mode [ 509.951713][T21513] syzkaller0: entered allmulticast mode [ 510.172866][T21539] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.239546][T21545] syzkaller0: entered promiscuous mode [ 510.250417][T21545] syzkaller0: entered allmulticast mode [ 510.309842][T21552] syzkaller0: entered promiscuous mode [ 510.315399][T21552] syzkaller0: entered allmulticast mode [ 510.360291][T21554] syzkaller0: entered promiscuous mode [ 510.367192][T21554] syzkaller0: entered allmulticast mode [ 510.449358][T21563] syzkaller0: entered promiscuous mode [ 510.455042][T21563] syzkaller0: entered allmulticast mode [ 510.557680][T21577] syzkaller0: entered promiscuous mode [ 510.563477][T21577] syzkaller0: entered allmulticast mode [ 510.596568][ T28] audit: type=1400 audit(2000000388.712:1178): avc: denied { read } for pid=21574 comm="syz.1.2346" laddr=::ffff:127.0.0.1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 510.697972][T21585] syzkaller0: entered promiscuous mode [ 510.703676][T21585] syzkaller0: entered allmulticast mode [ 510.789848][T21593] syzkaller0: entered promiscuous mode [ 510.800464][T21593] syzkaller0: entered allmulticast mode [ 510.935083][T21612] syzkaller0: entered promiscuous mode [ 510.940983][T21612] syzkaller0: entered allmulticast mode [ 511.130475][T21631] syzkaller0: entered promiscuous mode [ 511.136616][T21631] syzkaller0: entered allmulticast mode [ 511.252192][T21655] syzkaller0: entered promiscuous mode [ 511.262306][T21655] syzkaller0: entered allmulticast mode [ 511.344879][T21665] loop2: detected capacity change from 0 to 2048 [ 511.365497][T21665] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 511.394636][T21665] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 511.409144][T21665] EXT4-fs error (device loop2) in ext4_setattr:6120: error 28 [ 511.434157][T21674] syz_tun: entered allmulticast mode [ 511.444042][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 511.608714][T21684] syzkaller0: entered promiscuous mode [ 511.621232][T21698] loop2: detected capacity change from 0 to 128 [ 511.622499][T21684] syzkaller0: entered allmulticast mode [ 511.743340][T21703] pim6reg: entered allmulticast mode [ 511.779383][T21707] syzkaller0: entered promiscuous mode [ 511.785187][T21707] syzkaller0: entered allmulticast mode [ 512.041645][T21821] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2412'. [ 512.269343][T21837] xt_hashlimit: size too large, truncated to 1048576 [ 512.355211][T21846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.382994][T21840] syzkaller0: entered promiscuous mode [ 512.389306][T21846] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.397791][T21840] syzkaller0: entered allmulticast mode [ 512.408080][T21848] syzkaller0: entered promiscuous mode [ 512.413971][T21848] syzkaller0: entered allmulticast mode [ 512.763359][T21966] syzkaller0: entered promiscuous mode [ 512.781374][T21966] syzkaller0: entered allmulticast mode [ 512.983531][T21970] syzkaller0: entered promiscuous mode [ 513.004378][T21970] syzkaller0: entered allmulticast mode [ 513.034777][T21983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.043652][T21983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.154688][T21994] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2443'. [ 513.154876][T21992] syzkaller0: entered promiscuous mode [ 513.169341][T21992] syzkaller0: entered allmulticast mode [ 513.222054][T22006] ieee802154 phy1 wpan1: encryption failed: -22 [ 513.387814][T22015] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.432377][T22015] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 513.441335][T22015] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 513.451721][T22015] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 513.462321][T22015] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 513.475159][T22015] veth1_vlan: left promiscuous mode [ 513.481033][T22015] veth0_vlan: left promiscuous mode [ 513.486898][T22015] veth0_vlan: entered promiscuous mode [ 513.494490][T22015] veth1_vlan: entered promiscuous mode [ 513.502323][T22015] veth1_macvtap: left promiscuous mode [ 513.508372][T22015] veth0_macvtap: left promiscuous mode [ 513.514461][T22015] veth0_macvtap: entered promiscuous mode [ 513.521186][T22015] veth1_macvtap: entered promiscuous mode [ 513.530136][T22015] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 513.538311][T22015] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 513.546719][T22015] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 513.554687][T22015] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 513.564607][T22015] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 513.575286][T22015] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 513.584304][T22015] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 513.594197][T22015] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 513.603247][T22015] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 513.611410][T22015] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 513.619737][T22015] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 513.628514][T22015] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 513.636905][T22015] 8021q: adding VLAN 0 to HW filter on device batadv9 [ 513.644883][T22015] 8021q: adding VLAN 0 to HW filter on device batadv10 [ 513.653260][T22015] 8021q: adding VLAN 0 to HW filter on device batadv11 [ 513.661811][T22015] 8021q: adding VLAN 0 to HW filter on device batadv12 [ 513.675366][T22026] vlan0: entered promiscuous mode [ 513.702059][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.711241][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.728350][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.740783][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 513.780089][ T28] audit: type=1400 audit(2000000391.902:1179): avc: denied { getopt } for pid=22144 comm="syz.5.2462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 513.808174][T22143] syzkaller0: entered promiscuous mode [ 513.813975][T22143] syzkaller0: entered allmulticast mode [ 513.822873][T22150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.843299][T22150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.971050][T22156] syzkaller0: entered promiscuous mode [ 513.976748][T22156] syzkaller0: entered allmulticast mode [ 514.190995][T22272] loop2: detected capacity change from 0 to 256 [ 514.212401][T22272] FAT-fs (loop2): codepage cp936 not found [ 514.250653][T22279] netlink: 'syz.3.2477': attribute type 1 has an invalid length. [ 514.368303][T22279] 8021q: adding VLAN 0 to HW filter on device bond1 [ 514.599463][T22287] syzkaller0: entered promiscuous mode [ 514.648253][T22287] syzkaller0: entered allmulticast mode [ 515.195040][T22503] syzkaller0: entered promiscuous mode [ 515.226691][T22503] syzkaller0: entered allmulticast mode [ 515.259703][T22514] netlink: 'syz.5.2489': attribute type 1 has an invalid length. [ 515.273260][T22513] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.280780][T22513] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 515.295141][T22514] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.344892][T22514] bond0: (slave geneve2): making interface the new active one [ 515.355379][T22514] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 515.449101][ T28] audit: type=1400 audit(2000000393.502:1180): avc: denied { getopt } for pid=22501 comm="syz.1.2484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 515.838527][T22604] loop2: detected capacity change from 0 to 1024 [ 515.894975][T22604] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 515.904419][T22633] syzkaller0: entered promiscuous mode [ 515.912808][T22633] syzkaller0: entered allmulticast mode [ 515.922364][T22604] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 515.924163][ T28] audit: type=1400 audit(2000000394.042:1181): avc: denied { write } for pid=22597 comm="syz.2.2493" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 515.979006][T22604] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 21 with max blocks 44 with error 28 [ 516.011264][T22638] syzkaller0: entered promiscuous mode [ 516.018634][T22638] syzkaller0: entered allmulticast mode [ 516.024287][T22604] EXT4-fs (loop2): This should not happen!! Data will be lost [ 516.024287][T22604] [ 516.050527][T22639] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 516.062868][T22639] EXT4-fs (loop2): This should not happen!! Data will be lost [ 516.062868][T22639] [ 516.072708][T22639] EXT4-fs (loop2): Total free blocks count 0 [ 516.086224][T22604] EXT4-fs (loop2): Total free blocks count 0 [ 516.088494][T22639] EXT4-fs (loop2): Free/Dirty block details [ 516.098493][T22639] EXT4-fs (loop2): free_blocks=20480 [ 516.103827][T22639] EXT4-fs (loop2): dirty_blocks=80 [ 516.124879][ T3299] EXT4-fs warning (device loop2): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 516.170423][T22646] loop5: detected capacity change from 0 to 512 [ 516.203803][T22646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.220279][T22650] syzkaller0: entered promiscuous mode [ 516.238531][T22650] syzkaller0: entered allmulticast mode [ 516.296634][ T28] audit: type=1400 audit(2000000394.412:1182): avc: denied { write } for pid=22644 comm="syz.5.2501" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 516.376303][ T5678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.478472][T22666] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2507'. [ 516.661613][T22684] syzkaller0: entered promiscuous mode [ 516.678451][T22684] syzkaller0: entered allmulticast mode [ 516.764653][T22699] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2524'. [ 516.903488][T22719] loop2: detected capacity change from 0 to 256 [ 517.011370][T22733] loop2: detected capacity change from 0 to 256 [ 517.076433][T22733] FAT-fs (loop2): IO charset cp865 not found [ 517.097697][T22743] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2545'. [ 517.194473][T22755] loop5: detected capacity change from 0 to 256 [ 517.273873][T22759] loop2: detected capacity change from 0 to 4096 [ 517.305522][T22759] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 517.339695][ T28] audit: type=1400 audit(2000000395.462:1183): avc: denied { write } for pid=22758 comm="syz.2.2551" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 517.470018][T22782] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2559'. [ 517.540047][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 517.652115][T22807] loop5: detected capacity change from 0 to 128 [ 517.669732][T22807] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 517.699029][T22807] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 517.716176][T22807] ext2 filesystem being mounted at /435/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 517.746505][T22815] syzkaller0: entered promiscuous mode [ 517.748480][ T28] audit: type=1400 audit(2000000395.872:1184): avc: denied { write } for pid=22806 comm="syz.5.2571" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 517.752099][T22815] syzkaller0: entered allmulticast mode [ 517.792163][ T28] audit: type=1400 audit(2000000395.902:1185): avc: denied { write } for pid=22806 comm="syz.5.2571" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 517.814196][ T28] audit: type=1400 audit(2000000395.902:1186): avc: denied { write } for pid=22806 comm="syz.5.2571" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 517.836087][ T28] audit: type=1400 audit(2000000395.902:1187): avc: denied { write } for pid=22806 comm="syz.5.2571" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 517.837274][ T5678] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 517.857892][ T28] audit: type=1400 audit(2000000395.902:1188): avc: denied { create } for pid=22806 comm="syz.5.2571" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 517.857958][ T28] audit: type=1400 audit(2000000395.902:1189): avc: denied { write } for pid=22806 comm="syz.5.2571" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 517.946197][T22938] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.956844][T22938] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.044103][T23034] pim6reg: entered allmulticast mode [ 518.118742][T23046] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.139887][T23046] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.169358][T23050] syzkaller0: entered promiscuous mode [ 518.174906][T23050] syzkaller0: entered allmulticast mode [ 518.208639][T23054] syzkaller0: entered promiscuous mode [ 518.214129][T23054] syzkaller0: entered allmulticast mode [ 518.302639][T23058] lo: entered allmulticast mode [ 518.321868][T23060] netlink: 'syz.0.2594': attribute type 1 has an invalid length. [ 518.338717][T23063] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.339631][T23060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.349383][T23063] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.367422][T23060] bond0: (slave geneve2): making interface the new active one [ 518.376677][T23060] bond0: (slave geneve2): Enslaving as an active interface with an up link [ 518.452245][T23073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.461561][T23073] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.619870][T23085] syzkaller0: entered promiscuous mode [ 518.625370][T23085] syzkaller0: entered allmulticast mode [ 518.739349][T23097] syzkaller0: entered promiscuous mode [ 518.744931][T23097] syzkaller0: entered allmulticast mode [ 518.876465][T23113] syzkaller0: entered promiscuous mode [ 518.887572][T23113] syzkaller0: entered allmulticast mode [ 518.942140][T23120] syzkaller0: entered promiscuous mode [ 518.947828][T23120] syzkaller0: entered allmulticast mode [ 519.843361][T23460] loop5: detected capacity change from 0 to 512 [ 519.958117][T23460] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.018159][T23460] ext4 filesystem being mounted at /442/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 520.187680][ T5678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.451245][T23481] loop3: detected capacity change from 0 to 512 [ 520.481287][T23482] loop5: detected capacity change from 0 to 256 [ 520.517691][T23482] FAT-fs (loop5): IO charset cp936 not found [ 520.731486][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 520.731502][ T28] audit: type=1400 audit(2000000398.852:1193): avc: denied { connect } for pid=23480 comm="syz.5.2644" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 521.492037][T23507] loop3: detected capacity change from 0 to 4096 [ 521.511039][T23507] EXT4-fs: inline encryption not supported [ 521.531037][T23507] EXT4-fs: Ignoring removed mblk_io_submit option [ 521.544360][T23507] EXT4-fs: Ignoring removed bh option [ 521.560675][T23507] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 521.585083][T23507] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0002] [ 521.596571][T23507] System zones: 0-5 [ 521.618472][T23507] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 521.637219][T23522] xt_hashlimit: size too large, truncated to 1048576 [ 521.653705][T23519] syzkaller0: entered promiscuous mode [ 521.659705][T23519] syzkaller0: entered allmulticast mode [ 521.996507][T23635] lo: entered allmulticast mode [ 522.144475][T23646] loop5: detected capacity change from 0 to 512 [ 522.178305][T23646] EXT4-fs (loop5): orphan cleanup on readonly fs [ 522.208505][T23646] EXT4-fs warning (device loop5): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 522.241315][T23646] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 522.246681][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.248316][T23646] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.2669: couldn't read orphan inode 26 (err -116) [ 522.287905][T23646] loop5: lost filesystem error report for type 5 error -116 [ 522.291197][T23646] EXT4-fs (loop5): Remounting filesystem read-only [ 522.298578][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 522.298602][ C0] EXT4-fs (loop5): initial error at time 2000000400: ext4_orphan_get:1402 [ 522.298628][ C0] EXT4-fs (loop5): last error at time 2000000400: ext4_orphan_get:1402 [ 522.365834][T23646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 522.449640][ T5678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 522.568681][T23664] syzkaller0: entered promiscuous mode [ 522.580779][T23664] syzkaller0: entered allmulticast mode [ 522.962445][T23787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 522.988909][T23787] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.016164][T23789] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 523.035140][T23789] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 523.353196][T23801] syzkaller0: entered promiscuous mode [ 523.359926][T23801] syzkaller0: entered allmulticast mode [ 523.641716][T23830] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2703'. [ 523.897101][T23848] loop2: detected capacity change from 0 to 128 [ 524.171100][T23847] syzkaller0: entered promiscuous mode [ 524.228502][T23847] syzkaller0: entered allmulticast mode [ 524.745986][T23858] netlink: 'syz.1.2714': attribute type 1 has an invalid length. [ 524.888675][T23858] 8021q: adding VLAN 0 to HW filter on device bond0 [ 524.902168][T23864] bond0: (slave geneve0): making interface the new active one [ 524.941960][T23864] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 525.404570][T23967] netlink: 48 bytes leftover after parsing attributes in process `syz.3.2716'. [ 525.870106][T23971] syzkaller0: entered promiscuous mode [ 525.889275][T23971] syzkaller0: entered allmulticast mode [ 526.024718][T24095] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2728'. [ 526.357471][T24125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 526.378922][T24125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 526.421414][T24125] tap0: tun_chr_ioctl cmd 2147767511 [ 526.425076][T24132] loop3: detected capacity change from 0 to 512 [ 526.436983][ T28] audit: type=1400 audit(2000000404.552:1194): avc: denied { read } for pid=24104 comm="syz.2.2732" name="msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 526.473995][T24132] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 526.484581][T24132] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e12c, mo2=0002] [ 526.492725][ T28] audit: type=1400 audit(2000000404.552:1195): avc: denied { open } for pid=24104 comm="syz.2.2732" path="/dev/cpu/0/msr" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 526.505801][T24132] System zones: 1-12 [ 526.558100][T24132] EXT4-fs (loop3): orphan cleanup on readonly fs [ 526.591133][T24132] EXT4-fs error (device loop3): ext4_orphan_get:1423: comm syz.3.2743: bad orphan inode 267 [ 526.606045][T24132] loop3: lost filesystem error report for type 5 error -117 [ 526.606202][T24132] EXT4-fs (loop3): Remounting filesystem read-only [ 526.620284][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 526.620309][ C1] EXT4-fs (loop3): initial error at time 2000000404: ext4_orphan_get:1423 [ 526.620331][ C1] EXT4-fs (loop3): last error at time 2000000404: ext4_orphan_get:1423 [ 526.644143][T24132] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 526.665583][T24132] EXT4-fs warning (device loop3): ext4_resize_begin:82: There are errors in the filesystem, so online resizing is not allowed [ 526.691329][T24137] syzkaller0: entered promiscuous mode [ 526.701518][T24137] syzkaller0: entered allmulticast mode [ 526.710234][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 526.846366][T24146] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2748'. [ 526.913094][T24154] loop5: detected capacity change from 0 to 1024 [ 526.923355][T24154] EXT4-fs: Ignoring removed nomblk_io_submit option [ 526.971396][T24154] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e855c01c, mo2=0003] [ 526.987828][T24154] System zones: 0-1, 3-36 [ 527.003820][T24154] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.023536][T24154] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.2751: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 527.024107][ T28] audit: type=1400 audit(2000000405.142:1196): avc: denied { connect } for pid=24153 comm="syz.5.2751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 527.062690][ T28] audit: type=1400 audit(2000000405.142:1197): avc: denied { write } for pid=24153 comm="syz.5.2751" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 527.064154][T24154] EXT4-fs error (device loop5): ext4_iget_extra_inode:5128: inode #15: comm syz.5.2751: corrupted in-inode xattr: ea_inode specified without ea_inode feature enabled [ 527.161273][T24177] loop3: detected capacity change from 0 to 512 [ 527.169326][T24179] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2760'. [ 527.187829][T24177] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 527.200458][T24177] ext4 filesystem being mounted at /570/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 527.212400][ T28] audit: type=1400 audit(2000000405.342:1198): avc: denied { write } for pid=24176 comm="syz.3.2759" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 527.234526][ T28] audit: type=1400 audit(2000000405.342:1199): avc: denied { execute } for pid=24176 comm="syz.3.2759" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 527.257623][ T28] audit: type=1400 audit(2000000405.342:1200): avc: denied { execute_no_trans } for pid=24176 comm="syz.3.2759" path="/570/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 527.305522][ T3295] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.359403][T24183] lo speed is unknown, defaulting to 1000 [ 527.700797][ T5678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.860851][T24407] SELinux: Context /sbin/dhclient is not valid (left unmapped). [ 527.887634][ T28] audit: type=1400 audit(2000000406.012:1201): avc: denied { relabelto } for pid=24406 comm="syz.0.2770" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=3131 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=fifo_file permissive=1 trawcon="/sbin/dhclient" [ 528.004869][ T28] audit: type=1400 audit(2000000406.062:1202): avc: denied { associate } for pid=24406 comm="syz.0.2770" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=3131 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="/sbin/dhclient" [ 528.053839][T24412] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2771'. [ 528.063087][T24412] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2771'. [ 528.072909][T24412] vlan1: entered promiscuous mode [ 528.078072][T24412] vlan1: entered allmulticast mode [ 528.083217][T24412] veth0_vlan: entered allmulticast mode [ 528.103260][ T28] audit: type=1400 audit(2000000406.082:1203): avc: denied { create } for pid=24408 comm="syz.5.2771" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=key permissive=1 [ 528.153157][T24415] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2773'. [ 528.156250][T24420] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 528.171479][T24420] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 528.593901][T24447] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2784'. [ 528.642865][T24450] loop3: detected capacity change from 0 to 512 [ 528.651331][T24450] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent [ 528.779230][T24453] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2786'. [ 528.790271][T24453] netlink: 'syz.0.2786': attribute type 1 has an invalid length. [ 528.811796][T24453] 8021q: adding VLAN 0 to HW filter on device bond1 [ 529.145759][ T3705] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 529.227964][T24564] syzkaller0: entered promiscuous mode [ 529.233741][T24564] syzkaller0: entered allmulticast mode [ 529.539826][T24570] loop1: detected capacity change from 0 to 512 [ 529.558832][T24570] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 529.606693][T24570] xt_hashlimit: size too large, truncated to 1048576 [ 529.950649][T24586] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2798'. [ 529.962695][T24586] netlink: 'syz.5.2798': attribute type 1 has an invalid length. [ 529.971092][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.986790][T24586] 8021q: adding VLAN 0 to HW filter on device bond1 [ 530.047770][ T49] Bluetooth: hci0: Frame reassembly failed (-84) [ 530.108982][T24639] syzkaller0: entered promiscuous mode [ 530.125802][T24639] syzkaller0: entered allmulticast mode [ 530.436288][T24706] lo speed is unknown, defaulting to 1000 [ 530.502112][T24707] lo speed is unknown, defaulting to 1000 [ 531.291823][T24434] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 531.392017][T24833] loop2: detected capacity change from 0 to 512 [ 531.408587][T24833] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.424481][T24837] syzkaller0: entered promiscuous mode [ 531.428555][T24833] ext4 filesystem being mounted at /528/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 531.431510][T24837] syzkaller0: entered allmulticast mode [ 531.463555][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 531.463573][ T28] audit: type=1400 audit(2000000409.582:1206): avc: denied { setattr } for pid=24832 comm="syz.2.2819" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 531.510368][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 531.735134][T24866] loop2: detected capacity change from 0 to 256 [ 532.250484][ T42] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 532.260293][ T3705] Bluetooth: hci0: command 0x1003 tx timeout [ 532.862162][T24986] loop5: detected capacity change from 0 to 1024 [ 532.879750][T24986] EXT4-fs: Ignoring removed orlov option [ 532.898880][T24989] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2839'. [ 532.939251][T24986] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.954931][ T28] audit: type=1400 audit(2000000411.072:1207): avc: denied { write } for pid=24984 comm="syz.5.2838" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 533.020665][ T5678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.050518][T24997] loop1: detected capacity change from 0 to 2048 [ 533.068383][T24997] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.081227][T24997] ext4 filesystem being mounted at /541/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 533.099460][ T28] audit: type=1400 audit(2000000411.222:1208): avc: denied { write } for pid=24996 comm="syz.1.2840" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 533.111236][T25002] loop2: detected capacity change from 0 to 1024 [ 533.161553][T25002] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 533.203967][T25002] EXT4-fs (loop2): Couldn't remount RDWR because of unprocessed orphan inode list. Please umount/remount instead [ 533.256421][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.300426][T25012] syzkaller0: entered promiscuous mode [ 533.312700][T25012] syzkaller0: entered allmulticast mode [ 533.369327][ T28] audit: type=1400 audit(2000000411.492:1209): avc: denied { write } for pid=24996 comm="syz.1.2840" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 533.422999][T24996] cgroup: fork rejected by pids controller in /syz1 [ 533.563231][T25124] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2851'. [ 533.821041][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 533.880058][T25136] lo speed is unknown, defaulting to 1000 [ 533.902442][T25146] loop1: detected capacity change from 0 to 512 [ 533.909094][T25146] EXT4-fs: Ignoring removed i_version option [ 533.915281][T25146] EXT4-fs: Ignoring removed bh option [ 533.931319][T25146] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 533.947271][T25146] ext4 filesystem being mounted at /542/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 533.967829][ T28] audit: type=1400 audit(2000000412.092:1210): avc: denied { write } for pid=25145 comm="syz.1.2857" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 534.151117][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.203581][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.420635][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.439697][T25133] netlink: 60 bytes leftover after parsing attributes in process `syz.5.2855'. [ 534.500824][T25136] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.518392][T25136] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.533281][T25136] bridge_slave_0: entered allmulticast mode [ 534.547509][T25136] bridge_slave_0: entered promiscuous mode [ 534.562825][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.602074][T25136] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.620893][T25136] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.644020][T25136] bridge_slave_1: entered allmulticast mode [ 534.662982][T25136] bridge_slave_1: entered promiscuous mode [ 534.704755][ T28] audit: type=1400 audit(2000000412.822:1211): avc: denied { mounton } for pid=25257 comm="syz.2.2859" path="/proc/2499/task" dev="proc" ino=35897 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 534.727786][T24857] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 534.752567][T25265] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2860'. [ 534.775271][T25136] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 534.791845][T25265] netlink: 'syz.5.2860': attribute type 1 has an invalid length. [ 534.806182][T25136] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 534.838579][T25265] 8021q: adding VLAN 0 to HW filter on device bond2 [ 534.932529][T25136] team0: Port device team_slave_0 added [ 534.994916][T25136] team0: Port device team_slave_1 added [ 535.014941][T25258] loop2: detected capacity change from 0 to 32768 [ 535.097120][T25136] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 535.120960][T25258] loop2: p1 p3 < > [ 535.155523][T25136] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.230752][T25283] loop5: detected capacity change from 0 to 512 [ 535.237497][T25283] EXT4-fs: Ignoring removed i_version option [ 535.243514][T25283] EXT4-fs: Ignoring removed bh option [ 535.265775][T25136] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 535.278260][T25283] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.291407][T25283] ext4 filesystem being mounted at /482/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 535.296249][T25136] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 535.305136][ T28] audit: type=1400 audit(2000000413.422:1212): avc: denied { write } for pid=25281 comm="syz.5.2864" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 535.476673][T25136] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 535.794703][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 535.862653][T25136] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 535.898823][ T28] audit: type=1400 audit(2000000414.012:1213): avc: denied { write } for pid=25273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 535.959784][T25401] loop2: detected capacity change from 0 to 1024 [ 535.980883][ T49] lo: left allmulticast mode [ 535.989895][T25401] EXT4-fs: Ignoring removed orlov option [ 536.022464][ T28] audit: type=1400 audit(2000000414.142:1214): avc: denied { write } for pid=25402 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 536.069633][T25401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.084628][ T4633] udevd[4633]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory [ 536.100841][ T3287] udevd[3287]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory [ 536.141124][ T28] audit: type=1400 audit(2000000414.262:1215): avc: denied { write } for pid=25400 comm="syz.2.2868" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 536.204292][ T49] bond0 (unregistering): (slave geneve2): Releasing active interface [ 536.294541][ T49] bond0 (unregistering): Released all slaves [ 536.314037][ T49] bond1 (unregistering): Released all slaves [ 536.470886][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 537.049454][T25136] hsr_slave_0: entered promiscuous mode [ 537.074652][T25136] hsr_slave_1: entered promiscuous mode [ 537.100718][T25136] debugfs: 'hsr0' already exists in 'hsr' [ 537.119102][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.162584][T25136] Cannot create hsr debugfs directory [ 537.200628][ T49] tipc: Left network mode [ 537.359929][ T28] audit: type=1400 audit(2000000415.482:1216): avc: denied { write } for pid=25419 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 537.389341][ T49] IPVS: stopping master sync thread 5970 ... [ 537.453266][ T49] IPVS: stopping backup sync thread 5628 ... [ 537.458521][ T28] audit: type=1400 audit(2000000415.572:1217): avc: denied { write } for pid=25435 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 537.461965][ T5678] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.503193][T25440] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2871'. [ 537.517203][T25440] netlink: 'syz.2.2871': attribute type 1 has an invalid length. [ 537.587840][T25440] 8021q: adding VLAN 0 to HW filter on device bond1 [ 537.618030][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 537.669995][T25451] syzkaller0: entered promiscuous mode [ 537.675655][T25451] syzkaller0: entered allmulticast mode [ 537.711470][ T49] hsr_slave_0: left promiscuous mode [ 537.719178][ T49] hsr_slave_1: left promiscuous mode [ 537.724810][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.732478][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.740675][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.748786][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.764041][ T49] veth1_macvtap: left promiscuous mode [ 537.770149][ T49] veth0_macvtap: left promiscuous mode [ 537.776095][ T49] veth1_vlan: left promiscuous mode [ 537.849951][ T49] pim6reg (unregistering): left allmulticast mode [ 538.020294][T25559] loop2: detected capacity change from 0 to 512 [ 538.034981][T25559] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem [ 538.049993][T25559] EXT4-fs error (device loop2): ext4_get_journal_inode:5896: comm syz.2.2879: inode #1792: comm syz.2.2879: iget: illegal inode # [ 538.069959][T25559] loop2: lost filesystem error report for type 5 error -117 [ 538.070155][T25559] EXT4-fs (loop2): no journal found [ 538.077605][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 538.077626][ C1] EXT4-fs (loop2): initial error at time 2000000416: ext4_get_journal_inode:5896 [ 538.077654][ C1] EXT4-fs (loop2): last error at time 2000000416: ext4_get_journal_inode:5896 [ 538.274549][T25559] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 538.283260][T25559] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 538.297053][ T28] audit: type=1400 audit(2000000416.422:1218): avc: denied { read } for pid=25562 comm="syz.5.2881" name="file0" dev="tmpfs" ino=2630 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 538.321931][ T28] audit: type=1400 audit(2000000416.442:1219): avc: denied { ioctl } for pid=25562 comm="syz.5.2881" path="/486/file0" dev="tmpfs" ino=2630 ioctlcmd=0x1271 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 538.619496][T25677] syzkaller0: entered promiscuous mode [ 538.634460][T25677] syzkaller0: entered allmulticast mode [ 538.785440][T25680] loop1: detected capacity change from 0 to 512 [ 538.809162][T25680] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 538.849842][T25680] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 538.862889][T25559] loop2: detected capacity change from 0 to 4096 [ 538.872713][T25680] ext4 filesystem being mounted at /551/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 538.873226][T25559] EXT4-fs: test_dummy_encryption option not supported [ 538.894258][ T28] audit: type=1400 audit(2000000417.012:1220): avc: denied { write } for pid=25679 comm="syz.1.2886" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 538.943151][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 538.968237][ T49] IPVS: stop unused estimator thread 0... [ 538.984258][ T28] audit: type=1400 audit(2000000417.102:1221): avc: denied { read } for pid=25693 comm="syz.1.2888" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 539.066610][T25696] syzkaller0: entered promiscuous mode [ 539.073784][T25696] syzkaller0: entered allmulticast mode [ 539.115267][T25700] lo speed is unknown, defaulting to 1000 [ 539.217862][T25702] lo speed is unknown, defaulting to 1000 [ 539.265938][ T28] audit: type=1400 audit(2000000417.382:1222): avc: denied { search } for pid=25558 comm="syz.2.2879" name="/" dev="configfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 539.310093][ T28] audit: type=1400 audit(2000000417.422:1223): avc: denied { search } for pid=25558 comm="syz.2.2879" name="/" dev="configfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 539.359132][ T28] audit: type=1400 audit(2000000417.422:1224): avc: denied { read } for pid=25558 comm="syz.2.2879" name="/" dev="configfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 539.406319][ T28] audit: type=1400 audit(2000000417.422:1225): avc: denied { read open } for pid=25558 comm="syz.2.2879" path="/" dev="configfs" ino=1073 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 539.458806][T25711] syzkaller0: entered promiscuous mode [ 539.464658][T25711] syzkaller0: entered allmulticast mode [ 539.817086][T25717] syzkaller0: entered promiscuous mode [ 539.822974][T25717] syzkaller0: entered allmulticast mode [ 540.116665][T25724] loop1: detected capacity change from 0 to 1024 [ 540.123182][T25414] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 540.124742][T25724] EXT4-fs: Ignoring removed nomblk_io_submit option [ 540.133406][T25136] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 540.149500][T25136] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 540.158713][T25136] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 540.181983][T25724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 540.185954][T25136] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 540.201974][T25136] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 540.233560][T25136] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 540.241661][T25136] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 540.259929][T25136] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 540.287970][T25724] SELinux: Context system_u:object_r:restorecond_exec_t:s0 is not valid (left unmapped). [ 540.317701][T25136] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.383585][T25136] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.398635][ T3446] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.405773][ T3446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.418669][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.432069][ T3446] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.432243][T25755] loop5: detected capacity change from 0 to 128 [ 540.439287][ T3446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.497258][T25755] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 540.513458][T25755] ext4 filesystem being mounted at /493/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 540.554363][T25755] Invalid argument reading file caps for ./file0 [ 540.598796][ T5678] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 540.636604][T25770] syzkaller0: entered promiscuous mode [ 540.643531][T25770] syzkaller0: entered allmulticast mode [ 540.697478][T25773] syzkaller0: entered promiscuous mode [ 540.705574][T25773] syzkaller0: entered allmulticast mode [ 540.725478][T25793] loop3: detected capacity change from 0 to 128 [ 540.745110][T25793] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 540.775023][T25793] FAT-fs (loop3): error, clusters badly computed (0 != 1) [ 540.789126][T25793] FAT-fs (loop3): Filesystem has been set read-only [ 540.803356][T25136] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.817186][T25793] FAT-fs (loop3): error, clusters badly computed (1 != 2) [ 540.838988][T25793] FAT-fs (loop3): error, clusters badly computed (2 != 3) [ 540.862673][T25793] FAT-fs (loop3): error, clusters badly computed (3 != 4) [ 540.887329][T25793] FAT-fs (loop3): error, clusters badly computed (4 != 5) [ 540.912017][T25793] FAT-fs (loop3): error, clusters badly computed (5 != 6) [ 540.932541][T25793] FAT-fs (loop3): error, clusters badly computed (6 != 7) [ 540.946863][T25793] FAT-fs (loop3): error, clusters badly computed (7 != 8) [ 540.969528][T25793] FAT-fs (loop3): error, clusters badly computed (8 != 9) [ 540.989992][T25793] FAT-fs (loop3): error, clusters badly computed (9 != 10) [ 541.018893][T25826] SELinux: failed to load policy [ 541.109876][T25136] veth0_vlan: entered promiscuous mode [ 541.118479][T25136] veth1_vlan: entered promiscuous mode [ 541.134301][T25136] veth0_macvtap: entered promiscuous mode [ 541.142780][T25136] veth1_macvtap: entered promiscuous mode [ 541.163776][T25136] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 541.182450][T25136] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 541.738856][ T4455] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.755172][T25847] netlink: 'syz.1.2918': attribute type 1 has an invalid length. [ 541.763389][ T4455] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.782065][T25847] 8021q: adding VLAN 0 to HW filter on device bond1 [ 542.033887][ T3295] FAT-fs (loop3): Invalid FSINFO signature: 0x41615200, 0x61417272 (sector = 1) [ 542.051345][ T4455] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.060254][ T4455] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.206633][T25881] macsec1: entered promiscuous mode [ 542.226458][T25881] macsec1: entered allmulticast mode [ 542.825891][T25903] xt_CONNSECMARK: invalid mode: 66 [ 543.296543][T25904] loop1: detected capacity change from 0 to 256 [ 543.360188][T25904] FAT-fs (loop1): codepage cp869 not found [ 543.785204][T25914] netlink: 'syz.1.2931': attribute type 1 has an invalid length. [ 543.856727][T25914] 8021q: adding VLAN 0 to HW filter on device bond2 [ 544.075613][T25936] xt_hashlimit: size too large, truncated to 1048576 [ 544.116589][T25909] lo speed is unknown, defaulting to 1000 [ 544.393437][ T6165] syz_tun (unregistering): left allmulticast mode [ 544.600348][ T4455] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.720954][ T4455] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.868278][ T4455] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.997670][ T4455] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 545.004243][T25975] loop2: detected capacity change from 0 to 512 [ 545.017880][T25975] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 545.029496][T25978] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.046165][T25978] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.054992][T25975] EXT4-fs (loop2): 1 truncate cleaned up [ 545.061703][T25975] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 545.080109][ T28] kauditd_printk_skb: 32 callbacks suppressed [ 545.080125][ T28] audit: type=1400 audit(2000000423.202:1258): avc: denied { write } for pid=25972 comm="syz.2.2950" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 545.130267][ T3299] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.176122][T25909] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.185913][T25909] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.193292][T25909] bridge_slave_0: entered allmulticast mode [ 545.199899][T25909] bridge_slave_0: entered promiscuous mode [ 545.208571][T25909] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.216453][T25909] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.224031][T25909] bridge_slave_1: entered allmulticast mode [ 545.230914][T25909] bridge_slave_1: entered promiscuous mode [ 545.250177][ T4455] gretap0: left allmulticast mode [ 545.255772][ T4455] gretap0: left promiscuous mode [ 545.261015][ T4455] bridge0: port 17(gretap0) entered disabled state [ 545.268809][ T4455] team0: left allmulticast mode [ 545.280452][ T4455] team_slave_0: left allmulticast mode [ 545.287178][ T4455] team_slave_1: left allmulticast mode [ 545.293211][ T4455] team0: left promiscuous mode [ 545.298342][ T4455] team_slave_0: left promiscuous mode [ 545.304023][ T4455] team_slave_1: left promiscuous mode [ 545.310110][ T4455] bridge0: port 16(team0) entered disabled state [ 545.317744][ T4455] batadv13: left allmulticast mode [ 545.323099][ T4455] batadv13: left promiscuous mode [ 545.330958][ T4455] bridge0: port 15(batadv13) entered disabled state [ 545.339916][ T4455] batadv12: left allmulticast mode [ 545.345351][ T4455] batadv12: left promiscuous mode [ 545.351365][ T4455] bridge0: port 14(batadv12) entered disabled state [ 545.359201][ T4455] batadv11: left allmulticast mode [ 545.364609][ T4455] batadv11: left promiscuous mode [ 545.370271][ T4455] bridge0: port 13(batadv11) entered disabled state [ 545.378503][ T4455] batadv10: left allmulticast mode [ 545.387206][ T4455] batadv10: left promiscuous mode [ 545.392525][ T4455] bridge0: port 12(batadv10) entered disabled state [ 545.399870][ T4455] batadv9: left allmulticast mode [ 545.404956][ T4455] batadv9: left promiscuous mode [ 545.410204][ T4291] ================================================================== [ 545.418661][ T4291] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 545.425683][ T4291] [ 545.427994][ T4291] read-write to 0xffff888237c2a8e4 of 4 bytes by task 4734 on cpu 0: [ 545.436073][ T4291] wq_worker_running+0x9b/0x120 [ 545.440927][ T4291] schedule_timeout+0xca/0x180 [ 545.445696][ T4291] msleep+0x4f/0x90 [ 545.449499][ T4291] nsim_fib_event+0x3e17/0x4d40 [ 545.454427][ T4291] nsim_fib_event_work+0x13d/0x210 [ 545.459550][ T4291] process_scheduled_works+0x4f0/0x9c0 [ 545.465061][ T4291] worker_thread+0x58a/0x780 [ 545.469755][ T4291] kthread+0x22a/0x280 [ 545.473837][ T4291] ret_from_fork+0x146/0x330 [ 545.478449][ T4291] ret_from_fork_asm+0x1a/0x30 [ 545.483218][ T4291] [ 545.485548][ T4291] read to 0xffff888237c2a8e4 of 4 bytes by task 4291 on cpu 1: [ 545.493195][ T4291] kick_pool+0x49/0x2d0 [ 545.497372][ T4291] __queue_work+0x899/0xaa0 [ 545.501875][ T4291] queue_work_on+0xa9/0x140 [ 545.506416][ T4291] process_srcu+0xa44/0xda0 [ 545.511008][ T4291] process_scheduled_works+0x4f0/0x9c0 [ 545.516475][ T4291] worker_thread+0x58a/0x780 [ 545.521080][ T4291] kthread+0x22a/0x280 [ 545.525495][ T4291] ret_from_fork+0x146/0x330 [ 545.530189][ T4291] ret_from_fork_asm+0x1a/0x30 [ 545.534960][ T4291] [ 545.537792][ T4291] value changed: 0x00000000 -> 0x00000001 [ 545.543497][ T4291] [ 545.545809][ T4291] Reported by Kernel Concurrency Sanitizer on: [ 545.551966][ T4291] CPU: 1 UID: 0 PID: 4291 Comm: kworker/1:14 Tainted: G W syzkaller #0 PREEMPT(full) [ 545.562988][ T4291] Tainted: [W]=WARN [ 545.566777][ T4291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 545.576834][ T4291] Workqueue: rcu_gp process_srcu [ 545.581784][ T4291] ================================================================== [ 545.590854][ T4455] bridge0: port 11(batadv9) entered disabled state [ 545.598602][ T4455] batadv8: left allmulticast mode [ 545.603679][ T4455] batadv8: left promiscuous mode [ 545.608999][ T4455] bridge0: port 10(batadv8) entered disabled state [ 545.616334][ T4455] batadv7: left allmulticast mode [ 545.621492][ T4455] batadv7: left promiscuous mode [ 545.626751][ T4455] bridge0: port 9(batadv7) entered disabled state [ 545.633814][ T4455] batadv6: left allmulticast mode [ 545.638926][ T4455] batadv6: left promiscuous mode [ 545.643952][ T4455] bridge0: port 8(batadv6) entered disabled state [ 545.651252][ T4455] batadv5: left allmulticast mode [ 545.656415][ T4455] batadv5: left promiscuous mode [ 545.661488][ T4455] bridge0: port 7(batadv5) entered disabled state [ 545.669413][ T4455] batadv4: left allmulticast mode [ 545.674601][ T4455] batadv4: left promiscuous mode [ 545.680265][ T4455] bridge0: port 6(batadv4) entered disabled state [ 545.687370][ T4455] batadv3: left allmulticast mode [ 545.692427][ T4455] batadv3: left promiscuous mode [ 545.698296][ T4455] bridge0: port 5(batadv3) entered disabled state [ 545.707577][ T4455] batadv2: left allmulticast mode [ 545.712672][ T4455] batadv2: left promiscuous mode [ 545.718034][ T4455] bridge0: port 4(batadv2) entered disabled state [ 545.725300][ T4455] batadv1: left allmulticast mode [ 545.730521][ T4455] batadv1: left promiscuous mode [ 545.735647][ T4455] bridge0: port 3(batadv1) entered disabled state [ 545.743121][ T4455] bridge_slave_1: left allmulticast mode [ 545.748960][ T4455] bridge_slave_1: left promiscuous mode [ 545.754749][ T4455] bridge0: port 2(bridge_slave_1) entered disabled state [ 545.762862][ T4455] bridge_slave_0: left allmulticast mode [ 545.768597][ T4455] bridge_slave_0: left promiscuous mode [ 545.774455][ T4455] bridge0: port 1(bridge_slave_0) entered disabled state [ 545.823999][ T4455] bond0 (unregistering): (slave geneve2): Releasing active interface [ 545.918110][ T4455] bond0 (unregistering): Released all slaves [ 545.926888][ T4455] bond1 (unregistering): Released all slaves [ 545.949486][T25909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 545.960075][T25909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 545.981246][T25909] team0: Port device team_slave_0 added [ 545.987605][T25909] team0: Port device team_slave_1 added [ 546.001876][T25909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 546.008906][T25909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.035128][T25909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 546.046324][T25909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 546.053366][T25909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 546.079773][T25909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 546.091414][ T4455] IPVS: stopping master sync thread 5924 ... [ 546.097918][ T4455] IPVS: stopping backup sync thread 5906 ... [ 546.114455][T25909] hsr_slave_0: entered promiscuous mode [ 546.120971][T25909] hsr_slave_1: entered promiscuous mode [ 546.150407][ T4455] hsr_slave_0: left promiscuous mode [ 546.156910][ T4455] hsr_slave_1: left promiscuous mode [ 546.162672][ T4455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 546.170209][ T4455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 546.180128][ T4455] veth0_macvtap: left promiscuous mode [ 546.185990][ T4455] veth1_vlan: left promiscuous mode [ 546.191297][ T4455] veth0_vlan: left promiscuous mode [ 546.222670][ T4455] pim6reg (unregistering): left allmulticast mode [ 546.268668][ T4455] team0 (unregistering): Port device team_slave_1 removed [ 546.278778][ T4455] team0 (unregistering): Port device team_slave_0 removed [ 547.889275][T25964] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 547.899377][T25909] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 547.908670][T25909] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 547.917596][T25909] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 547.926693][T25909] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 547.934545][T25909] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 547.944541][T25909] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 547.953174][T25909] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 547.962428][T25909] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 548.000115][T25909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 548.013566][T25909] 8021q: adding VLAN 0 to HW filter on device team0 [ 548.018299][ T28] audit: type=1400 audit(2000000426.142:1259): avc: denied { write } for pid=26096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 548.023594][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.050722][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 548.068331][ T28] audit: type=1400 audit(2000000426.192:1260): avc: denied { write } for pid=26113 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 548.072148][T25909] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 548.101498][T25909] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 548.113640][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.120890][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 548.217214][ T28] audit: type=1400 audit(2000000426.342:1261): avc: denied { write } for pid=26116 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 548.251538][T25909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 548.271917][ T28] audit: type=1400 audit(2000000426.392:1262): avc: denied { write } for pid=26136 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 548.350462][T25909] veth0_vlan: entered promiscuous mode [ 548.359705][T25909] veth1_vlan: entered promiscuous mode [ 548.376481][T25909] veth0_macvtap: entered promiscuous mode [ 548.382364][ T28] audit: type=1400 audit(2000000426.502:1263): avc: denied { write } for pid=26141 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 548.409998][T25909] veth1_macvtap: entered promiscuous mode [ 548.424050][T25909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 548.431516][ T28] audit: type=1400 audit(2000000426.522:1264): avc: denied { write } for pid=26155 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 548.456280][T25909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.470454][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.486738][ T36] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.495579][ T28] audit: type=1400 audit(2000000426.602:1265): avc: denied { write } for pid=26157 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 548.516751][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.527558][ T28] audit: type=1400 audit(2000000426.622:1266): avc: denied { write } for pid=26168 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 548.551515][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.622848][ T28] audit: type=1400 audit(2000000426.742:1267): avc: denied { write } for pid=26170 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1