last executing test programs: 7m21.981121658s ago: executing program 32 (id=333): mq_open(&(0x7f0000000240)='ba\x01adv_slave_1\x00', 0x8c2, 0x30, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 7m20.270588932s ago: executing program 33 (id=358): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f0000000000)="0000000000000002", 0x8) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}], 0x1, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000080)={r2, 0x2, 0x1, "fa"}, 0x9) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000100)={r2, 0x2}, 0x8) 7m13.454069326s ago: executing program 34 (id=471): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r0, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000080)='%-010d \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 6m50.828310789s ago: executing program 35 (id=911): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK={0x8}, @TCA_FLOWER_KEY_CT_MARK_MASK={0x8}]}}]}, 0x44}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6m43.230581937s ago: executing program 36 (id=975): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x480000000000000a, 0x954b, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xb}, 0xbafa, 0xff, 0x98, 0x0, 0x200, 0xfffff271, 0xfffc, 0x0, 0x0, 0x0, 0x23}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r1, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xa, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe65}, 0x23) 6m37.599298645s ago: executing program 37 (id=1015): unshare(0x600) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_setup(0x498f, &(0x7f0000000240)={0x0, 0xf4c8, 0x40, 0x1, 0x3c4}) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 6m11.611603502s ago: executing program 38 (id=1419): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0xffffffffffdffffd}, 0x40, 0x10001, 0x800000, 0x0, 0x20002, 0x2, 0x0, 0x0, 0x0, 0x0, 0xbc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0xa, 0x0, 0x0, 0xffffffffffffffff, 0x4}, 0x98) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0xffff0000, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x0, 0xffff0000}, 0x48) 5m32.006260617s ago: executing program 39 (id=2028): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000002240)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000015c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) 4m59.1801474s ago: executing program 40 (id=2552): ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'veth0_vlan\x00', {0x2}, 0x101}) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x8, 0x94, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3380, 0x1, 0x40024e}, 0x0, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @hyper}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x1f, &(0x7f0000000000)=[0xffffffffffffffff], 0x1) 4m46.971927134s ago: executing program 41 (id=2711): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket(0x2b, 0x1, 0x1) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x5) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a98000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 4m13.08372195s ago: executing program 42 (id=3011): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000000c0)={@random="c5a500429b3a", @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0xe, 0x20, 0x66, 0x0, 0x7, 0x11, 0x0, @empty, @empty=0xe0000001}, {0x4e1f, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x6, 0x100, @void}}}}}}}, 0x0) 4m7.521301065s ago: executing program 43 (id=3270): r0 = perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xcf, 0x3, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0xae31cbdd19173c73, 0x0, 0x5}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000180)=r4, 0x4) sendmsg$unix(r2, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) 4m0.318383981s ago: executing program 44 (id=3397): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xae9, 0x30, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0xe, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x5, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 3m17.566509876s ago: executing program 5 (id=4251): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000780)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(r0) 3m17.566271746s ago: executing program 5 (id=4252): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r1, 0x50) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0xce23, 0x4, @empty, 0xc}, 0x1c) listen(r0, 0x50) 3m17.535325847s ago: executing program 5 (id=4255): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) pipe(&(0x7f0000000080)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) splice(r1, 0x0, r2, 0x0, 0x1100000000f336, 0x0) 3m16.678390874s ago: executing program 5 (id=4276): syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x792, &(0x7f0000020c00)="$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") openat(0xffffffffffffffff, 0x0, 0x80a42, 0x119) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) creat(&(0x7f0000000100)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000540)='./bus\x00', 0x4000, 0x0) preadv2(r0, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1, 0x0, 0x0, 0x1) 3m16.537839498s ago: executing program 5 (id=4277): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0)={0xffffffffffffffff}, 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000080)={0x3, 0x40, 0xfa02, {{0x6000000, 0xfffe, 0x7, @local}, {0xa, 0x0, 0x7ffffffe, @mcast1, 0xa8a9}, r2, 0x2}}, 0x48) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x9}, {0xa, 0x4e23, 0x6, @mcast1, 0x7fffffff}, r1, 0x80d}}, 0x48) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000000)={0x12, 0x10, 0xfa00, {0x0, r1, r0}}, 0x18) close(0x3) 3m16.087574952s ago: executing program 8 (id=4287): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0xa0000004}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000100)={0x2}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000140)={0xa0000000}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'veth1\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x1, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb69, 0xc1, 0x4, 0x1, 0x80000001, 0x5, 0x101, 0x1000, 0x9, 0x3, 0x3, 0x1, 0xfffffffa, 0x0, 0x6, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x762, 0x3, 0xd, 0xe, 0x2b12, 0x100, 0x6, 0x1c00, 0xb, 0x7, 0xbed4, 0x8, 0x8000100, 0x3, 0x0, 0x11000, 0x10000008, 0x5, 0x79b, 0x2, 0x1, 0x7f, 0x4, 0xa, 0x7, 0xf, 0x101, 0xd7, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x2, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x6, 0x9, 0x4, 0x7, 0x4009, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x9, 0x3, 0x0, 0x10001, 0x10000002, 0xffffffff, 0x6, 0x6, 0x9, 0x80000000, 0xfdffffff, 0x2, 0x2, 0x84, 0x100, 0x5, 0x252, 0x81, 0xb, 0x5, 0x20006, 0x5, 0x2, 0xb, 0x2, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x40, 0x8, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x1fc, 0xc5c, 0xffffffff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 3m15.972571646s ago: executing program 8 (id=4290): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x820d}, 0x0, 0x9, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x35, 0xff, 0xd, 0x8, 0x0, 0xff, 0x0, 0x7f, 0x0, 0x4, 0xff, 0x1}, 0xe) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) shutdown(r0, 0x1) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 3m15.710598315s ago: executing program 5 (id=4291): openat$hwrng(0xffffffffffffff9c, 0x0, 0x1213c0, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x20000000) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 3m15.710448195s ago: executing program 8 (id=4292): readv(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000001380)=""/4107, 0x100b}], 0x1) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbb8, &(0x7f0000000c00)="$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") r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0xecb42, 0x83) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, 0x0, 0x0) syz_clone(0x44004000, 0x0, 0x0, 0x0, 0x0, 0x0) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x14, 0x6400, 0x0, 0x3) 3m15.696608695s ago: executing program 45 (id=4291): openat$hwrng(0xffffffffffffff9c, 0x0, 0x1213c0, 0x0) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r1, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000000), 0x4) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000200)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x20000000) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 3m14.311019098s ago: executing program 8 (id=4302): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000100)='./file0/../file0\x00', 0x189) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x80004, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) 3m14.094376225s ago: executing program 8 (id=4305): bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x5, 0x5, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x68, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x48002) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) write$binfmt_aout(r1, &(0x7f0000000380)=ANY=[@ANYBLOB="03070000b5"], 0xc8) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="03040000b500000001008aea0000feff"], 0xc8) dup3(r1, r0, 0x0) 3m13.456613726s ago: executing program 8 (id=4316): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) unshare(0xa000400) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r2) 3m13.406905907s ago: executing program 46 (id=4316): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) unshare(0xa000400) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r2) 1m58.168501413s ago: executing program 0 (id=5721): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x6}, 0x8) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x1000000000000}, 0x0) 1m58.141739554s ago: executing program 0 (id=5723): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r1, &(0x7f0000000400)="cd", 0x1, 0x8010, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xfffffffe}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x6}, 0x8) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x1c}, 0x1, 0x1000000000000}, 0x0) 1m57.891890352s ago: executing program 0 (id=5725): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) perf_event_open(0x0, 0x0, 0x800, 0xffffffffffffffff, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000400)="05804ab38284c7d5a5b66406d704", 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m57.004984719s ago: executing program 0 (id=5716): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09edb44848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) fdatasync(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r1, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 1m56.652089021s ago: executing program 0 (id=5727): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x9, 0x6}, 0x0, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$can_raw(0x1d, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x20022, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}, 0x200, 0x1, 0x3, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) gettid() r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c0000002000010327bd7000ffdbdf250200000800000000f9"], 0x1c}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) 1m55.310399803s ago: executing program 0 (id=5743): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") syz_pidfd_open(0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) r1 = socket$inet(0x2, 0xa, 0x3) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 1m55.288072844s ago: executing program 47 (id=5743): syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000003b40)=ANY=[@ANYRES32=0x0, @ANYRESDEC, @ANYRES16=0x0, @ANYBLOB="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", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$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") syz_pidfd_open(0x0, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x0) r1 = socket$inet(0x2, 0xa, 0x3) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f00000001c0)) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) getdents64(r0, &(0x7f0000000fc0)=""/224, 0xe0) 1m17.25180439s ago: executing program 7 (id=6329): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) r1 = openat$rtc(0xffffffffffffff9c, 0x0, 0x200, 0x0) ioctl$RTC_PIE_ON(r1, 0x7005) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) ppoll(&(0x7f0000001040)=[{r0, 0x12a4}], 0x1, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/protocols\x00') pread64(r2, &(0x7f0000000000)=""/153, 0x99, 0x19a55d1a) 1m17.128739154s ago: executing program 7 (id=6332): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x8010, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_config_ext={0x100000001, 0x101}, 0x0, 0x0, 0x10000, 0x2, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x1) socket$nl_rdma(0x10, 0x3, 0x14) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4260, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x1, @perf_config_ext={0x8, 0x6}, 0x6000, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x5, 0x5, 0x9fd, 0x85, 0x41}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000180), 0x800, r2}, 0x38) 1m16.785123535s ago: executing program 7 (id=6334): setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='task\x00') fchdir(r0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) r1 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000040)='ns\x00') readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) 1m16.557015642s ago: executing program 7 (id=6335): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x8b7840, 0x0) 1m16.462571485s ago: executing program 7 (id=6336): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x60d4, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x725e65a6, 0x0) write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88) 1m16.174594394s ago: executing program 7 (id=6342): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68188, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m16.165100734s ago: executing program 48 (id=6342): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68188, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x2c000010) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 26.687580851s ago: executing program 4 (id=7108): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x3092, @loopback, 0xaa}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) 26.502558386s ago: executing program 4 (id=7109): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000300)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x7ecbc13c, 0xc87b}, 0x0, 0x0, 0x784, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r1, 0x0, 0x6, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xf, 0x5}, 0x100e64, 0xc78}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) read$watch_queue(r0, &(0x7f0000000780)=""/221, 0xfdef) sendmsg$NFNL_MSG_CTHELPER_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000010901"], 0x14}}, 0x0) 26.023659692s ago: executing program 4 (id=7112): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000540)=@gcm_128={{0x304}, "55706e44cacc494f", "24ff0573669961d742cbfb62b94f9592", 'U~\'T', "d5c0017c6ee203ad"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, @perf_bp={0x0, 0x1}, 0x10c0ec, 0x0, 0x0, 0x3, 0x6, 0x2008001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x3) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 25.674592142s ago: executing program 4 (id=7118): syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000240)=ANY=[@ANYRES64=0x0, @ANYRESHEX=0x0, @ANYRES64=0x0], 0x1, 0x2a8, &(0x7f0000000380)="$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") r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x85, 0x20000}, 0x20) 25.555657276s ago: executing program 4 (id=7119): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r2 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@remote, @in=@local, 0x0, 0x0, 0x4e20, 0x0, 0x2}, {0xfffffffffffffffd, 0x1, 0x1, 0x0, 0x0, 0xb}, {0x1ff, 0xffffffffe, 0x4053e5, 0x20}, 0x6, 0x80001, 0x1, 0x0, 0x1, 0x1}, {{@in6=@empty, 0x4d4, 0x32}, 0xa, @in=@local, 0x3502, 0x1, 0x0, 0x0, 0x6, 0xfffffffd}}, 0xe8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, 0x9df}, 0x1c) 25.400233801s ago: executing program 4 (id=7124): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x82002) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x80000011}) r2 = gettid() exit(0x1) getpriority(0x1, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 25.355292052s ago: executing program 49 (id=7124): r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x82002) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)={0x80000011}) r2 = gettid() exit(0x1) getpriority(0x1, r2) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r3}}) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) 2.21336464s ago: executing program 6 (id=7506): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0xe2, 0x0, 0x7fff0000}]}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r2, 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r3, 0x1) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) flock(r4, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 2.018098276s ago: executing program 6 (id=7507): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000004540)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.161380943s ago: executing program 6 (id=7526): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) poll(0x0, 0x0, 0xb8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x1, 0xf, &(0x7f0000000600)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x107a655, 0x0, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 937.93302ms ago: executing program 6 (id=7539): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f00008cc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1bc2, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f9}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x501, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) r1 = socket$inet(0x2, 0x80001, 0x84) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x10}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="10", 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4020845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 937.67381ms ago: executing program 2 (id=7540): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000340)={0x1d, r1, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r0, &(0x7f00000010c0)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f00000004c0)="1ea8424629292b9c17", 0x9}], 0x1}, 0x20048010) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}}, 0x18) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$sock(r2, &(0x7f0000007480)=[{{0x0, 0x0, &(0x7f00000051c0)=[{&(0x7f0000004fc0)="14733f9daa4e98c0c2", 0x9}], 0x1}}], 0x1, 0x0) 882.220052ms ago: executing program 6 (id=7542): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x22, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x2}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x100000000000000) splice(r1, 0x0, r4, 0x0, 0x100035ab, 0x4) 881.995922ms ago: executing program 2 (id=7543): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000001e0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c000180060001"], 0x70}, 0x1, 0x0, 0x0, 0x4451099e661a63b1}, 0x0) 844.965503ms ago: executing program 2 (id=7544): r0 = socket$nl_route(0x10, 0x3, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) dup(0xffffffffffffffff) socket$unix(0x1, 0x3, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x7, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}}}]}, 0x48}}, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x41c, &(0x7f00000003c0)={[{@nobarrier}, {@jqfmt_vfsold}, {@grpid}, {@user_xattr}, {@errors_remount}, {@user_xattr}]}, 0x1, 0x43a, &(0x7f0000000440)="$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") 799.003275ms ago: executing program 6 (id=7545): ioperm(0x7, 0x4, 0x7) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) accept(r1, 0x0, 0x0) 768.714635ms ago: executing program 2 (id=7546): bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=ANY=[], 0x0, 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x830d}, 0x0, 0xa57b, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000140)={0xe, {0x9, 0x1, 0x3}}, 0xc) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14030000370009002cbd70000000000004"], 0x314}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 722.382097ms ago: executing program 2 (id=7548): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000"], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r1}, 0x4) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000640)={r0, 0xffffffffffffffff}, 0x4) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x7, 0x1c, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000cbb60000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000008000000bf0920000000000035090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000020000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000020000b7050000080000001c00000000000000bf9800000000000056080000000000008500000006000000b70000000200000095"], &(0x7f0000000000)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x94) 691.918308ms ago: executing program 2 (id=7551): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000000)={0x1}) fcntl$lock(r0, 0x7, &(0x7f0000001140)={0x1, 0x1, 0xfe5, 0x9}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000140)={0x0, 0x0, 0x76, 0x6031}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 614.23724ms ago: executing program 1 (id=7554): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40b9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) r2 = mq_open(&(0x7f0000001880)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\x1c`\xbd\xe1e\x80\x7f\xd2&l0\xc1b\xac\x8b\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL%Jw\x99y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3\x05\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xc8\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xc7\xa7\x82\xb9V}`\xb7\xfc@\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5m\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v>\x9b\n0\xb2 h\xad5\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\'/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f9\xce\x1eYV\xa2\xc4\x03PV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x9b\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xd1\x06F\xef\xbd\xeb\xf0\'\f\f\x003\xecp\x18\x9e\x1d\xeaH\xdaQ%+\xf4\xae\xab0\b\x17W\xba\xaf4E\xe62\xefm\xdd+\xb2\x1b:\xc0cc\x97\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x97s\x03`\xba\xf1\xdb\x05\xe5C)\x8f\xbchyL1:\xc2\xea\x8a\xfc\tq\xfa\xec&\xc7\xde\xf4\xf2\xb9\xe1\xa1\x80)1\xbe@Bt\xb7\xce\xc9\xee\xa8v\t\xfa,\xa2\x9a\xa3\\\xfbM\xb5\xfd\xa9\xe3\x9f\xf7\x85\x87w\x1d]& 8\xb5\xba\xea\xad\xa9\xd4V\xf1\xe9\xaaT\xc8\xff\xaf\xef\x91\xca\x9c\x80\xbeYd]\xfb\x1a\x96?\xb6\xd7{X\xa1H\xeb\xce\xd7\xb7\xf7\x15\xd6\x88\x91\xef{\xf8K@\xb6ch\x1e\x16\xd5m@\xa8\x91\xa5\xc5@\xa7\x00\xab\xc5\xc8\xc8\x9c\xe3:\xac\x1eG\xa0e\'/\x15G\x8e\xe5\x16\xd5S ]\xf8\xa1\xa46\x9a\xf0d!\xc8\x81S\xbc\x18\xdf\xa0\xfek\xb0(\xf7\xba5\x8e\xe5A\xd5l\xfbp\xcb\xa8\xf0b\x91\xc4\xd3+)Sy\x81\xe3\r%C\x03enM\xf1\xdf\xe3b\xb7\x9b\f\x82\xb1z\xcf^\x06\xcd\xa2\x96\xe3\xd5\xbd@1\xbe\x02\xad\\\x89\xd0\xe0\xa8\x11\xb4B\\\x14\\\xed5\x9c\xd7n\x8d\xec\xb5\xcc\xf8q', 0x42, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x6, 0x0) mq_timedsend(r2, 0x0, 0x0, 0x0, 0x0) close(r2) mq_unlink(&(0x7f0000000000)='eth0\x00') 614.10071ms ago: executing program 9 (id=7555): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x9}}]}}]}, 0x48}}, 0xc840) close(0x3) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1ffec0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a00)=@newtfilter={0x54, 0x2c, 0xd2b, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_SEL={0x24, 0x5, {0xd, 0x7, 0x1, 0x3d3f, 0x0, 0xfff, 0xb709, 0x58f, [{0x0, 0x20008000, 0x4, 0x1}]}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) 613.88598ms ago: executing program 1 (id=7556): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_bp={0x0, 0x2}, 0xa216, 0x6, 0x11000, 0x4, 0x9484, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x92}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x4000, &(0x7f0000000600), 0xfd, 0x571, &(0x7f0000000bc0)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r0, 0x0, 0x119) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x482, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0xb}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r1}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 602.484511ms ago: executing program 1 (id=7557): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x11, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) readv(r2, &(0x7f0000000480)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1) 596.736741ms ago: executing program 9 (id=7558): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x2c, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x0, 0x43a1bd76, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x5, 0x5, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0x0, 0xd0, 0x0, 0x0, 0x40f00, 0x19, '\x00', 0x0, @fallback=0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) gettid() r1 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r1, &(0x7f0000000300)={0x18, 0x2, {0xfffe, @dev={0xac, 0x14, 0x14, 0x30}}}, 0x1e) connect$pptp(r1, &(0x7f0000000080)={0x18, 0x2, {0x0, @private=0xa010102}}, 0x32) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0001, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000340)=0x1) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f00000001c0)=0x4140) syz_open_pts(r2, 0x40000) 542.523653ms ago: executing program 1 (id=7559): syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000040)=ANY=[], 0x1, 0x30e, &(0x7f00000001c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1e1802, 0xd2) syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x204019, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], 0x0, 0x567, &(0x7f0000000200)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write$binfmt_elf64(r1, &(0x7f0000000640)=ANY=[], 0x77c) sendfile(r1, r0, 0x0, 0x3ffff) 542.358723ms ago: executing program 9 (id=7560): socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x64082) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7bedcb5d07081196f37538e486dd6372ce22667f2b00dbf6e97158cf474fec87891f6d76745b686158bbcfe8875afdef00010000000006"], 0x66) 525.811463ms ago: executing program 9 (id=7561): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x8001, @empty, 0xffffff5d}, 0x1c) listen(r0, 0x50) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e23, 0x5, @empty, 0x4}, 0x1c) listen(r1, 0x50) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600034e22590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) 494.719904ms ago: executing program 9 (id=7562): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000500)=@newlink={0x34, 0x10, 0x401, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x3000, 0x41042}, [@IFLA_IFNAME={0x14, 0x3, 'ip_vti0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x8c5}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f0000000000), 0x4) r2 = perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_bp={&(0x7f00000001c0), 0xa}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) read$msr(r2, &(0x7f00000002c0)=""/108, 0x6c) socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_IFNAME={0x14, 0x3, 'bond0\x00'}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}}, 0x0) 422.502566ms ago: executing program 1 (id=7563): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="2800000014002101000000000000000002200000", @ANYRES32=r1, @ANYBLOB="08000400ffffffff08000200e0"], 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001400212100000000000000000200"], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}}, 0x18}}, 0x0) 422.204277ms ago: executing program 9 (id=7564): syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10108c0, &(0x7f0000000840)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRES64, @ANYRES64, @ANYRESHEX, @ANYRESDEC], 0x1, 0x285, &(0x7f0000000940)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8102, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000200)="c788", 0x2) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 323.02052ms ago: executing program 3 (id=7565): r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e23, 0x2, @empty, 0x9d7}}, 0x6, 0x0, 0x0, 0xb3, 0xb3550aa4ba878396, 0x0, 0x1}, 0x9c) 315.47161ms ago: executing program 1 (id=7566): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x181002, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x7}, 0x2, 0x0, 0x10ffe, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018000000c3707bf4000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) write$binfmt_aout(r0, &(0x7f0000001180)=ANY=[], 0xff2e) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x50) syz_clone3(&(0x7f000000dd80)={0x100000, 0x0, 0x0, 0x0, {0x13}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) 222.522413ms ago: executing program 3 (id=7567): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x21140, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mount$bpf(0x200000000000, 0x0, 0x0, 0x989046, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010007000000001f00000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000100075c0000000e0a01020000000000000000010000000900020073797a32000000000900010073797a30"], 0xec}, 0x1, 0x0, 0x0, 0x4004}, 0x0) 205.664013ms ago: executing program 3 (id=7568): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6c, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x5, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x64, 0x6, 0x0, 0x0, 0x0, 0xb, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0x3}, 0xd, 0x0, 0x11000, 0x4, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x8) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 139.593336ms ago: executing program 3 (id=7569): io_uring_setup(0x4ab0, &(0x7f0000000200)={0x0, 0xcb9e, 0x8, 0x0, 0x146}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$tipc(0x1e, 0x1, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(r1, 0x0) r2 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000340)=[{&(0x7f0000000380)="2fee", 0x2}], 0x1, 0x0, 0x0, 0x40010}, 0x0) recvmsg(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/35, 0x23}], 0x1}, 0x10040) close_range(r0, 0xffffffffffffffff, 0x0) 26.411029ms ago: executing program 3 (id=7570): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0x8, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0)=0x12, &(0x7f0000000700)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0xcb}, 0x38) sendmsg$kcm(r1, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x200008c0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x4, &(0x7f0000000080)=[{&(0x7f0000000200)="2e0400001c008102e00f80ecdb4cb9f207c804a00d00000088081afb0a0002000a0ada1b40d80800c500c50083b8", 0xfec9}], 0x1, 0x0, 0x0, 0x5865}, 0x0) 0s ago: executing program 3 (id=7571): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x8) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r1 = openat(r0, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r2 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) tee(r2, r3, 0x3, 0x0) kernel console output (not intermixed with test programs): PVS: stop unused estimator thread 0... [ 374.998502][ T286] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.046975][ T4482] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 375.099148][ T286] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.134365][ T4482] CPU: 0 UID: 0 PID: 4482 Comm: syz-executor Tainted: G W syzkaller #0 PREEMPT(full) [ 375.134424][ T4482] Tainted: [W]=WARN [ 375.134432][ T4482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 375.134446][ T4482] Call Trace: [ 375.134453][ T4482] [ 375.134461][ T4482] __dump_stack+0x1d/0x30 [ 375.134487][ T4482] dump_stack_lvl+0x95/0xd0 [ 375.134530][ T4482] dump_stack+0x15/0x1b [ 375.134551][ T4482] dump_header+0x80/0x240 [ 375.134637][ T4482] oom_kill_process+0x295/0x350 [ 375.134668][ T4482] out_of_memory+0x97d/0xb80 [ 375.134696][ T4482] try_charge_memcg+0x62f/0xa10 [ 375.134748][ T4482] charge_memcg+0x6d/0x120 [ 375.134770][ T4482] __mem_cgroup_charge+0x28/0xb0 [ 375.134936][ T4482] filemap_add_folio+0x110/0x350 [ 375.134965][ T4482] __filemap_get_folio_mpol+0x326/0x680 [ 375.135041][ T4482] filemap_fault+0x462/0xb70 [ 375.135081][ T4482] ? __pfx_filemap_map_pages+0x10/0x10 [ 375.135098][ T4482] handle_mm_fault+0x16cd/0x2e70 [ 375.135166][ T4482] ? __pfx_filemap_fault+0x10/0x10 [ 375.135201][ T4482] do_user_addr_fault+0x62f/0x1050 [ 375.135299][ T4482] ? trace_page_fault_user+0x1f/0xa0 [ 375.135329][ T4482] exc_page_fault+0x62/0xa0 [ 375.135350][ T4482] asm_exc_page_fault+0x26/0x30 [ 375.135368][ T4482] RIP: 0033:0x7f9889fbae74 [ 375.135382][ T4482] Code: 85 62 0a 00 00 48 b8 db 34 b6 d7 82 de 1b 43 48 f7 a4 24 98 00 00 00 48 8b 05 40 a9 ed 00 48 69 8c 24 90 00 00 00 e8 03 00 00 <8b> 78 08 48 8b 44 24 18 48 c1 ea 12 4c 8b 0d 39 a8 ed 00 48 01 d1 [ 375.135420][ T4482] RSP: 002b:00007ffe840defd0 EFLAGS: 00010206 [ 375.135439][ T4482] RAX: 0000001b2cc24000 RBX: 0000000000000aa2 RCX: 000000000005b4f0 [ 375.135467][ T4482] RDX: 000000000e943e73 RSI: 00007ffe840df060 RDI: 0000000000000001 [ 375.135479][ T4482] RBP: 00007ffe840df00c R08: 00000000379d617b R09: 3fffffffffffffff [ 375.135491][ T4482] R10: 4000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 375.135518][ T4482] R13: 00000000000927c0 R14: 000000000005b70d R15: 00007ffe840df060 [ 375.135568][ T4482] [ 375.140194][ T4482] memory: usage 306508kB, limit 307200kB, failcnt 306 [ 375.380472][ T286] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.393805][ T4482] memory+swap: usage 295568kB, limit 9007199254740988kB, failcnt 0 [ 375.404021][ T4482] kmem: usage 194300kB, limit 9007199254740988kB, failcnt 0 [ 375.416256][ T4482] Memory cgroup stats for /syz6: [ 375.416501][ T4482] cache 28069888 [ 375.479331][ T4482] rss 12787712 [ 375.487811][ T286] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.497501][ T4482] shmem 27230208 [ 375.515427][ T4482] mapped_file 40960 [ 375.543300][ T4482] dirty 24576 [ 375.561965][ T4482] writeback 0 [ 375.599026][ T4482] workingset_refault_anon 3721 [ 375.610870][ T4482] workingset_refault_file 2448 [ 375.616367][ T4482] swap 54751232 [ 375.621428][ T4482] swapcached 82415616 [ 375.626242][ T4482] pgpgin 455815 [ 375.629827][ T4482] pgpgout 445785 [ 375.639165][ T4482] pgfault 349981 [ 375.644563][ T4482] pgmajfault 498 [ 375.648320][ T4482] inactive_anon 14708736 [ 375.659440][ T286] bridge_slave_1: left allmulticast mode [ 375.665157][ T286] bridge_slave_1: left promiscuous mode [ 375.671121][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.681125][ T4482] active_anon 25460736 [ 375.687532][ T286] bridge_slave_0: left allmulticast mode [ 375.692469][ T4482] inactive_file 839680 [ 375.701920][ T286] bridge_slave_0: left promiscuous mode [ 375.707851][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.727467][ T4482] active_file 0 [ 375.750112][ T4482] unevictable 0 [ 375.756994][ T4482] hierarchical_memory_limit 314572800 [ 375.784811][ T4482] hierarchical_memsw_limit 9223372036854771712 [ 375.811821][ T4482] total_cache 28069888 [ 375.822035][ T4482] total_rss 12787712 [ 375.825972][ T4482] total_shmem 27230208 [ 375.830043][ T4482] total_mapped_file 40960 [ 375.836644][ T4482] total_dirty 24576 [ 375.840488][ T4482] total_writeback 0 [ 375.844706][ T4482] total_workingset_refault_anon 3721 [ 375.850053][ T4482] total_workingset_refault_file 2448 [ 375.855573][ T4482] total_swap 54751232 [ 375.859589][ T4482] total_swapcached 82415616 [ 375.864398][ T4482] total_pgpgin 455815 [ 375.868412][ T4482] total_pgpgout 445785 [ 375.873319][ T4482] total_pgfault 349981 [ 375.879473][ T4482] total_pgmajfault 498 [ 375.883962][ T4482] total_inactive_anon 14708736 [ 375.888746][ T4482] total_active_anon 25460736 [ 375.896022][ T4482] total_inactive_file 839680 [ 375.902167][ T4482] total_active_file 0 [ 375.906180][ T4482] total_unevictable 0 [ 375.910165][ T4482] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.1110,pid=7306,uid=0 [ 375.926926][ T4482] Memory cgroup out of memory: Killed process 7306 (syz.6.1110) total-vm:96084kB, anon-rss:1408kB, file-rss:20804kB, shmem-rss:0kB, UID:0 pgtables:96kB oom_score_adj:1000 [ 375.973547][ T286] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.995414][ T286] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.023458][ T286] bond0 (unregistering): Released all slaves [ 376.041336][T22735] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5758'. [ 376.423330][ T28] audit: type=1400 audit(1400.506:4755): avc: denied { write } for pid=22757 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.470852][ T286] hsr_slave_0: left promiscuous mode [ 376.490380][ T28] audit: type=1400 audit(1400.566:4756): avc: denied { write } for pid=22769 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 376.512228][ T286] hsr_slave_1: left promiscuous mode [ 376.518252][ T286] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.539409][ T286] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.555987][ T286] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.573204][ T286] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.624614][ T286] veth1_macvtap: left promiscuous mode [ 376.630124][ T286] veth0_macvtap: left promiscuous mode [ 376.654204][ T286] veth1_vlan: left promiscuous mode [ 376.665311][ T286] veth0_vlan: left promiscuous mode [ 376.841891][ T286] team0 (unregistering): Port device team_slave_1 removed [ 376.911743][ T286] team0 (unregistering): Port device team_slave_0 removed [ 377.041503][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 377.054478][T22722] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.072039][T22722] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.079517][T22722] bridge_slave_0: entered allmulticast mode [ 377.094423][T22722] bridge_slave_0: entered promiscuous mode [ 377.114195][T22722] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.127459][T22722] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.135351][T22722] bridge_slave_1: entered allmulticast mode [ 377.142091][T22722] bridge_slave_1: entered promiscuous mode [ 377.182792][T22722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 377.211048][T22722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.247024][T22803] netlink: 'syz.1.5765': attribute type 1 has an invalid length. [ 377.248671][T22722] team0: Port device team_slave_0 added [ 377.268102][T22722] team0: Port device team_slave_1 added [ 377.311370][T22803] 8021q: adding VLAN 0 to HW filter on device bond6 [ 377.356057][ T28] audit: type=1400 audit(1401.436:4757): avc: denied { write } for pid=22799 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.404012][T22809] bond6: (slave veth13): Enslaving as an active interface with a down link [ 377.414593][T22722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.421684][T22722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.464459][ T28] audit: type=1400 audit(1401.546:4758): avc: denied { write } for pid=22819 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.486322][T22722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.498080][T22722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.505236][T22722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.531794][T22722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.571552][T22829] netlink: 408 bytes leftover after parsing attributes in process `syz.3.5770'. [ 377.590989][T22803] bond7: entered allmulticast mode [ 377.597067][T22832] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5771'. [ 377.607218][T22803] 8021q: adding VLAN 0 to HW filter on device bond7 [ 377.616915][T22803] bond6: (slave bond7): Enslaving as an active interface with a down link [ 377.626514][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 377.688935][T22722] hsr_slave_0: entered promiscuous mode [ 377.696451][T22722] hsr_slave_1: entered promiscuous mode [ 377.702761][T22722] debugfs: 'hsr0' already exists in 'hsr' [ 377.708647][T22722] Cannot create hsr debugfs directory [ 377.787984][T22845] netlink: 'syz.9.5776': attribute type 1 has an invalid length. [ 377.830570][T22850] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.5778'. [ 377.890457][ T28] audit: type=1400 audit(1401.966:4759): avc: denied { write } for pid=22841 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.923135][ T28] audit: type=1400 audit(1402.006:4760): avc: denied { write } for pid=22860 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 377.958904][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 378.033218][T22722] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 378.042239][T22722] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 378.049295][ T28] audit: type=1400 audit(1402.126:4761): avc: denied { write } for pid=22863 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.050016][T22722] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 378.082598][T22722] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 378.090480][T22722] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 378.097445][ T28] audit: type=1400 audit(1402.176:4762): avc: denied { write } for pid=22874 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.121537][T22722] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 378.130272][T22722] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 378.140566][T22722] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 378.152124][ T3020] 8021q: adding VLAN 0 to HW filter on device eth17 [ 378.193384][T22722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.207012][T22722] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.218017][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.225167][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.240098][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.247235][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.256440][ T28] audit: type=1400 audit(1402.326:4763): avc: denied { write } for pid=22883 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.283618][ T28] audit: type=1400 audit(1402.336:4764): avc: denied { write } for pid=22894 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.321579][T22722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 378.456763][T22722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.599774][T22722] veth0_vlan: entered promiscuous mode [ 378.608625][T22722] veth1_vlan: entered promiscuous mode [ 378.625508][T22722] veth0_macvtap: entered promiscuous mode [ 378.633911][T22722] veth1_macvtap: entered promiscuous mode [ 378.646126][T22722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.658264][T22722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.669820][ T6718] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.688402][ T6718] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.712400][ T6718] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.725420][ T6718] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.227522][T23025] netlink: 'syz.3.5783': attribute type 1 has an invalid length. [ 379.268315][T23025] 8021q: adding VLAN 0 to HW filter on device bond6 [ 379.321671][T23025] bond6: (slave veth21): Enslaving as an active interface with a down link [ 379.347190][T23025] bond7: entered allmulticast mode [ 379.353499][T23025] 8021q: adding VLAN 0 to HW filter on device bond7 [ 379.362932][T23025] bond6: (slave bond7): Enslaving as an active interface with a down link [ 380.668425][T23155] loop7: detected capacity change from 0 to 128 [ 380.776440][T23156] bio_check_eod: 68 callbacks suppressed [ 380.776458][T23156] syz.7.5801: attempt to access beyond end of device [ 380.776458][T23156] loop7: rw=2049, sector=145, nr_sectors = 16 limit=128 [ 380.817733][T23156] syz.7.5801: attempt to access beyond end of device [ 380.817733][T23156] loop7: rw=2049, sector=169, nr_sectors = 8 limit=128 [ 380.854612][T23156] syz.7.5801: attempt to access beyond end of device [ 380.854612][T23156] loop7: rw=2049, sector=185, nr_sectors = 8 limit=128 [ 380.896039][T23156] syz.7.5801: attempt to access beyond end of device [ 380.896039][T23156] loop7: rw=2049, sector=201, nr_sectors = 8 limit=128 [ 380.947405][T23156] syz.7.5801: attempt to access beyond end of device [ 380.947405][T23156] loop7: rw=2049, sector=217, nr_sectors = 8 limit=128 [ 381.018102][T23156] syz.7.5801: attempt to access beyond end of device [ 381.018102][T23156] loop7: rw=2049, sector=233, nr_sectors = 8 limit=128 [ 381.077415][T23156] syz.7.5801: attempt to access beyond end of device [ 381.077415][T23156] loop7: rw=2049, sector=249, nr_sectors = 8 limit=128 [ 381.125634][T23156] syz.7.5801: attempt to access beyond end of device [ 381.125634][T23156] loop7: rw=2049, sector=265, nr_sectors = 8 limit=128 [ 381.164012][T23156] syz.7.5801: attempt to access beyond end of device [ 381.164012][T23156] loop7: rw=2049, sector=281, nr_sectors = 8 limit=128 [ 381.196003][T23156] syz.7.5801: attempt to access beyond end of device [ 381.196003][T23156] loop7: rw=2049, sector=297, nr_sectors = 8 limit=128 [ 381.723292][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 381.723307][ T28] audit: type=1326 audit(1405.806:4789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23190 comm="syz.6.5818" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988a0ece59 code=0x7ffc0000 [ 381.760904][ T28] audit: type=1326 audit(1405.836:4790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23190 comm="syz.6.5818" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988a0ece59 code=0x7ffc0000 [ 381.787836][ T28] audit: type=1326 audit(1405.836:4791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23190 comm="syz.6.5818" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988a0ece59 code=0x7ffc0000 [ 381.818066][ T28] audit: type=1326 audit(1405.836:4792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23190 comm="syz.6.5818" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=152 compat=0 ip=0x7f988a0ece59 code=0x7ffc0000 [ 381.847178][ T28] audit: type=1326 audit(1405.836:4793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23190 comm="syz.6.5818" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988a0ece59 code=0x7ffc0000 [ 381.861564][T23201] sctp: [Deprecated]: syz.1.5823 (pid 23201) Use of struct sctp_assoc_value in delayed_ack socket option. [ 381.861564][T23201] Use struct sctp_sack_info instead [ 381.877705][ T28] audit: type=1326 audit(1405.836:4794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23190 comm="syz.6.5818" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988a0ece59 code=0x7ffc0000 [ 381.946127][T23207] hsr0: entered promiscuous mode [ 381.958456][T23207] hsr0: left promiscuous mode [ 382.010111][ T28] audit: type=1326 audit(1405.836:4795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23190 comm="syz.6.5818" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f988a0ece59 code=0x7ffc0000 [ 382.083198][ T28] audit: type=1326 audit(1405.836:4796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23190 comm="syz.6.5818" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f988a0ece59 code=0x7ffc0000 [ 382.138811][ T28] audit: type=1326 audit(1405.996:4797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23190 comm="syz.6.5818" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f988a0ece59 code=0x7ffc0000 [ 382.648325][T23257] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5844'. [ 382.680605][T23257] netlink: 'syz.6.5844': attribute type 30 has an invalid length. [ 382.699261][T23259] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5844'. [ 382.723499][T23259] netlink: 'syz.6.5844': attribute type 30 has an invalid length. [ 382.969980][T23282] l2tp_ppp: sess 2/0: no socket in recv [ 384.035094][T23305] loop7: detected capacity change from 0 to 128 [ 385.365640][T23342] rdma_rxe: rxe_newlink: failed to add bond0 [ 385.604918][T23361] netlink: 'syz.3.5879': attribute type 39 has an invalid length. [ 385.647830][T23363] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5890'. [ 386.821535][T23418] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5904'. [ 386.838238][T23418] netlink: 'syz.7.5904': attribute type 30 has an invalid length. [ 386.883701][T23425] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5904'. [ 386.910637][ T54] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.921580][T23425] netlink: 'syz.7.5904': attribute type 30 has an invalid length. [ 386.935003][ T54] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.963291][ T54] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 386.987194][ T54] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.049254][T23438] loop7: detected capacity change from 0 to 512 [ 388.376022][T23476] dummy0: entered allmulticast mode [ 388.419988][T23475] dummy0: left allmulticast mode [ 388.977980][T23504] loop7: detected capacity change from 0 to 128 [ 389.015604][T23504] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 389.065855][T23504] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 389.097746][ T28] audit: type=1400 audit(1413.176:4798): avc: denied { write } for pid=23503 comm="syz.7.5941" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 389.228087][T22722] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 389.360384][ T28] audit: type=1400 audit(1413.436:4799): avc: denied { write } for pid=23521 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.427169][ T28] audit: type=1400 audit(1413.506:4800): avc: denied { write } for pid=23550 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 389.613856][T23557] loop7: detected capacity change from 0 to 1024 [ 390.248341][ T28] audit: type=1400 audit(1414.326:4801): avc: denied { write } for pid=23563 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.295745][ T28] audit: type=1400 audit(1414.366:4802): avc: denied { write } for pid=23574 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.477684][T23585] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5959'. [ 390.556465][ T28] audit: type=1400 audit(1414.636:4803): avc: denied { write } for pid=23583 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.602826][ T28] audit: type=1400 audit(1414.676:4804): avc: denied { write } for pid=23602 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 390.745017][T23592] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.752310][T23592] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.878372][T23592] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.899868][T23592] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.112122][ T6715] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.133468][ T6715] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.176657][ T6715] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.188181][ T6715] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.671996][ T28] audit: type=1400 audit(1415.746:4805): avc: denied { write } for pid=23635 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 391.749812][ T28] audit: type=1400 audit(1415.816:4806): avc: denied { write } for pid=23652 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 392.550274][T23698] dummy0: entered allmulticast mode [ 392.568394][T23697] dummy0: left allmulticast mode [ 392.609808][T23702] netlink: 'syz.3.5995': attribute type 10 has an invalid length. [ 392.622947][T23702] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 392.631782][T23702] bond0: (slave netdevsim2): Enslaving as an active interface with an up link [ 393.899536][T23742] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6010'. [ 393.926511][T23742] netlink: 'syz.9.6010': attribute type 30 has an invalid length. [ 393.967557][ T217] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.976942][T23751] netlink: 8 bytes leftover after parsing attributes in process `syz.9.6010'. [ 394.011888][ T217] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.022352][T23751] netlink: 'syz.9.6010': attribute type 30 has an invalid length. [ 394.033887][ T217] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.060294][ T217] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.555146][T23759] loop7: detected capacity change from 0 to 512 [ 394.592439][T23759] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 394.661777][T23759] EXT4-fs (loop7): failed to open journal device unknown-block(0,0) -6 [ 394.862628][T23767] netlink: 'syz.6.6020': attribute type 4 has an invalid length. [ 394.883316][T23767] netlink: 'syz.6.6020': attribute type 4 has an invalid length. [ 394.948486][T23773] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6025'. [ 395.087756][T23765] loop7: detected capacity change from 0 to 512 [ 395.186950][T23765] EXT4-fs error (device loop7): ext4_orphan_get:1397: inode #15: comm syz.7.6019: iget: bad i_size value: 38620345925642 [ 395.201940][T23765] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 395.208400][T23765] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.6019: couldn't read orphan inode 15 (err -117) [ 395.218099][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 395.218265][ C1] EXT4-fs (loop7): initial error at time 1419: ext4_orphan_get:1397: inode 15 [ 395.218508][ C1] EXT4-fs (loop7): last error at time 1419: ext4_orphan_get:1397: inode 15 [ 395.289982][T23792] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6033'. [ 395.307267][T23792] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6033'. [ 395.396211][T23765] loop7: lost filesystem error report for type 5 error -117 [ 395.413710][T23765] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 395.866963][T22722] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 396.732635][ T7397] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 396.775627][T23856] bridge0: port 1(vlan2) entered blocking state [ 396.795489][T23856] bridge0: port 1(vlan2) entered disabled state [ 396.807694][T23856] vlan2: entered allmulticast mode [ 396.813826][T23856] bridge_slave_0: entered allmulticast mode [ 396.820709][T23856] vlan2: entered promiscuous mode [ 396.827650][T23856] bridge_slave_0: entered promiscuous mode [ 396.854703][T23863] bond3: (slave syz_tun): Removing an active aggregator [ 396.872457][ T4722] net_ratelimit: 3320 callbacks suppressed [ 396.872474][ T4722] bond3: Warning: Found an uninitialized port [ 396.888926][T23863] bond3: (slave syz_tun): Releasing backup interface [ 396.936067][T23863] bond4: (slave dummy0): Releasing active interface [ 397.015931][T23863] bond1: (slave veth1_to_team): Releasing backup interface [ 397.061118][T23863] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 397.112190][ T4651] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 397.130273][ T28] audit: type=1400 audit(1421.206:4807): avc: denied { accept } for pid=23869 comm="syz.6.6061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 397.508932][ T28] audit: type=1400 audit(1421.586:4808): avc: denied { append } for pid=23900 comm="syz.6.6075" name="rt_cache" dev="proc" ino=4026532688 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 398.108128][T23918] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6083'. [ 398.402275][T23930] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6089'. [ 398.477828][ T28] audit: type=1326 audit(1422.556:4809): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23934 comm="syz.1.6091" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdac29ece59 code=0x0 [ 398.549091][T23943] netlink: 'syz.7.6093': attribute type 4 has an invalid length. [ 398.586607][T23943] netlink: 'syz.7.6093': attribute type 4 has an invalid length. [ 398.702178][T23951] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6097'. [ 399.445606][T23978] netlink: 'syz.9.6108': attribute type 4 has an invalid length. [ 399.507335][T23979] netlink: 'syz.9.6108': attribute type 4 has an invalid length. [ 400.323425][T24020] loop7: detected capacity change from 0 to 512 [ 400.365823][T24020] EXT4-fs: Ignoring removed nobh option [ 400.415452][T24020] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 400.459537][ T28] audit: type=1400 audit(1424.536:4810): avc: denied { write } for pid=24019 comm="syz.7.6124" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 400.503213][T24020] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.6124: iget: bad i_size value: 2533274857506816 [ 400.801238][T24020] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 400.891552][ T28] audit: type=1400 audit(1424.966:4811): avc: denied { listen } for pid=24029 comm="syz.6.6129" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 401.186117][ T28] audit: type=1400 audit(1425.266:4812): avc: denied { mounton } for pid=24050 comm="syz.9.6133" path="/file0" dev="ramfs" ino=67530 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 401.236266][T24055] netlink: 'syz.3.6135': attribute type 39 has an invalid length. [ 401.371527][T24067] tipc: Failed to remove unknown binding: 66,1,1/0:3223192603/3223192605 [ 401.468746][T24073] netlink: 16 bytes leftover after parsing attributes in process `syz.9.6144'. [ 401.712430][ T7388] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 402.271959][ T7388] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 402.283097][T24105] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6157'. [ 403.441457][T24151] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6172'. [ 403.869175][T24164] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6176'. [ 403.978740][T24163] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6176'. [ 404.114798][T24174] netlink: 24 bytes leftover after parsing attributes in process `syz.9.6182'. [ 404.203552][T24184] syz_tun: entered allmulticast mode [ 404.230406][T24184] syz_tun: left allmulticast mode [ 404.276271][T24186] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6185'. [ 404.369294][T24202] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6191'. [ 405.266709][T24212] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6202'. [ 405.560192][ T28] audit: type=1400 audit(1429.636:4813): avc: denied { read } for pid=24245 comm="syz.3.6206" path="socket:[68843]" dev="sockfs" ino=68843 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 405.576661][T24244] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6205'. [ 405.659874][T24244] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6205'. [ 405.736359][T24260] netlink: 24 bytes leftover after parsing attributes in process `syz.1.6211'. [ 405.874776][T24272] cgroup: fork rejected by pids controller in /syz7 [ 406.156258][ T217] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.191231][ T217] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.265139][ T217] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.298180][ T217] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.365048][ T217] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.389843][ T217] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.457518][ T217] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 406.495311][ T217] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.674247][ T217] bridge_slave_1: left allmulticast mode [ 406.690751][ T217] bridge_slave_1: left promiscuous mode [ 406.711384][ T217] bridge0: port 2(bridge_slave_1) entered disabled state [ 406.746063][ T217] bridge_slave_0: left allmulticast mode [ 406.755562][ T217] bridge_slave_0: left promiscuous mode [ 406.762205][ T217] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.066252][ T217] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 407.084798][ T217] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.102453][ T217] bond0 (unregistering): Released all slaves [ 407.263223][T24405] bond1: entered allmulticast mode [ 407.283814][T24405] ip6gre1: entered allmulticast mode [ 407.364416][ T28] audit: type=1400 audit(1431.446:4814): avc: denied { write } for pid=24400 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 407.404723][T24405] bond1: left allmulticast mode [ 407.413560][T24405] ip6gre1: left allmulticast mode [ 407.420105][ T28] audit: type=1400 audit(1431.496:4815): avc: denied { write } for pid=24417 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 407.454562][ T217] hsr_slave_0: left promiscuous mode [ 407.461333][ T217] hsr_slave_1: left promiscuous mode [ 407.470041][ T217] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 407.478234][ T217] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.489129][ T217] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 407.497952][ T217] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 407.519565][ T28] audit: type=1326 audit(1431.596:4816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24419 comm="syz.9.6244" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb174face59 code=0x0 [ 407.550185][ T217] veth1_macvtap: left promiscuous mode [ 407.555866][ T217] veth0_macvtap: left promiscuous mode [ 407.561438][ T217] veth1_vlan: left promiscuous mode [ 407.566796][ T217] veth0_vlan: left promiscuous mode [ 407.679307][ T217] team0 (unregistering): Port device team_slave_1 removed [ 407.698247][ T217] team0 (unregistering): Port device team_slave_0 removed [ 407.818506][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 408.043046][ T28] audit: type=1400 audit(1432.126:4817): avc: denied { write } for pid=24447 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 408.075027][ T28] audit: type=1400 audit(1432.156:4818): avc: denied { write } for pid=24460 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 408.145807][T24325] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.161916][T24325] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.175407][T24325] bridge_slave_0: entered allmulticast mode [ 408.204834][T24325] bridge_slave_0: entered promiscuous mode [ 408.234250][T24325] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.265712][T24325] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.290401][T24325] bridge_slave_1: entered allmulticast mode [ 408.306700][T24325] bridge_slave_1: entered promiscuous mode [ 408.330166][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 408.356646][T24474] bond3: entered allmulticast mode [ 408.383539][T24474] vti0: entered allmulticast mode [ 408.428105][T24325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.450637][T24471] bond3: left allmulticast mode [ 408.464739][T24471] vti0: left allmulticast mode [ 408.479396][T24325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.550298][T24325] team0: Port device team_slave_0 added [ 408.567701][T24325] team0: Port device team_slave_1 added [ 408.607620][T24484] bridge0: port 4(gretap0) entered blocking state [ 408.645910][T24484] bridge0: port 4(gretap0) entered disabled state [ 408.669507][T24484] gretap0: entered allmulticast mode [ 408.709182][T24484] gretap0: entered promiscuous mode [ 408.725372][T24484] bridge0: port 4(gretap0) entered blocking state [ 408.732433][T24484] bridge0: port 4(gretap0) entered forwarding state [ 408.765865][T24325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.776629][T24325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.816378][T24325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.844000][T24325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.870671][T24325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 408.924172][T24325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.990244][T24325] hsr_slave_0: entered promiscuous mode [ 409.008813][T24325] hsr_slave_1: entered promiscuous mode [ 409.030276][T24325] debugfs: 'hsr0' already exists in 'hsr' [ 409.030399][ T28] audit: type=1400 audit(1433.106:4819): avc: denied { write } for pid=24492 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.046448][T24325] Cannot create hsr debugfs directory [ 409.113716][ T28] audit: type=1400 audit(1433.186:4820): avc: denied { write } for pid=24512 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.157058][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 409.411537][ T28] audit: type=1400 audit(1433.486:4821): avc: denied { write } for pid=24531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.500537][ T28] audit: type=1400 audit(1433.576:4822): avc: denied { write } for pid=24555 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 409.688008][T24325] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 409.707050][T24325] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 409.722668][T24325] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 409.747239][T24325] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 409.761517][T24325] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 409.780166][T24325] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 409.827505][T24325] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 409.847163][T24325] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 409.939110][T24325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 409.970804][T24325] 8021q: adding VLAN 0 to HW filter on device team0 [ 409.996789][ T4730] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.003920][ T4730] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.026602][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.033742][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.335586][T24630] __nla_validate_parse: 5 callbacks suppressed [ 410.335604][T24630] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6283'. [ 410.393602][T24630] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6283'. [ 410.463749][T24325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.613578][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 410.613592][ T28] audit: type=1400 audit(1434.696:4829): avc: denied { write } for pid=24646 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.677623][ T28] audit: type=1400 audit(1434.756:4830): avc: denied { write } for pid=24668 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.743517][T24674] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 410.762181][T24673] syz_tun: entered allmulticast mode [ 410.779023][T24673] syz_tun: left allmulticast mode [ 410.869476][T24325] veth0_vlan: entered promiscuous mode [ 410.919671][T24325] veth1_vlan: entered promiscuous mode [ 410.977023][T24325] veth0_macvtap: entered promiscuous mode [ 411.003403][T24325] veth1_macvtap: entered promiscuous mode [ 411.041499][T24325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.081352][T24704] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.100005][T24325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.128674][ T217] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.142829][ T217] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.160334][T24704] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.179330][ T217] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.189774][ T217] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.218788][T24704] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.265734][T24704] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 411.363427][ T6715] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.388121][ T6715] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.401383][ T6715] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.418117][ T6715] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 411.433237][T24716] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6302'. [ 412.289188][T24747] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6316'. [ 412.662291][ T28] audit: type=1400 audit(1436.746:4831): avc: denied { write } for pid=24758 comm="syz.7.6320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 412.689695][ T28] audit: type=1400 audit(1436.766:4832): avc: denied { read } for pid=24758 comm="syz.7.6320" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 412.741973][T24766] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6322'. [ 412.783694][T24766] netlink: 24 bytes leftover after parsing attributes in process `syz.6.6322'. [ 413.097657][ T4730] bridge_slave_1: left allmulticast mode [ 413.104925][ T4730] bridge_slave_1: left promiscuous mode [ 413.110835][ T4730] bridge0: port 2(bridge_slave_1) entered disabled state [ 413.119159][ T4730] bridge_slave_0: left allmulticast mode [ 413.125162][ T4730] bridge_slave_0: left promiscuous mode [ 413.130965][ T4730] bridge0: port 1(bridge_slave_0) entered disabled state [ 413.236132][ T4730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 413.246958][ T4730] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 413.258157][ T4730] bond0 (unregistering): Released all slaves [ 413.266748][ T4730] bond1 (unregistering): Released all slaves [ 413.275678][ T7398] syz2: Port: 1 Link DOWN [ 413.403683][ T4730] hsr_slave_0: left promiscuous mode [ 413.409530][ T4730] hsr_slave_1: left promiscuous mode [ 413.415781][ T4730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.423429][ T4730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.431401][ T4730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.440422][ T4730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.455224][ T4730] veth0_to_team: left promiscuous mode [ 413.461394][ T4730] veth1_macvtap: left promiscuous mode [ 413.467253][ T4730] veth0_macvtap: left promiscuous mode [ 413.472919][ T4730] veth1_vlan: left promiscuous mode [ 413.478334][ T4730] veth0_vlan: left promiscuous mode [ 413.570994][ T4730] team0 (unregistering): Port device team_slave_1 removed [ 413.597357][ T4730] team0 (unregistering): Port device team_slave_0 removed [ 413.608166][ T217] smc: removing ib device syz2 [ 413.837742][T24810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6339'. [ 413.874874][T24810] gretap0: entered promiscuous mode [ 413.887950][T24810] macvlan2: entered allmulticast mode [ 413.898859][T24810] gretap0: entered allmulticast mode [ 414.210100][ T4730] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.296824][ T4730] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.366195][ T4730] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.395116][ T28] audit: type=1326 audit(1438.476:4833): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24833 comm="syz.9.6348" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb174face59 code=0x0 [ 414.455665][ T4730] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.554713][ T4730] bridge_slave_1: left allmulticast mode [ 414.570704][ T4730] bridge_slave_1: left promiscuous mode [ 414.576926][ T4730] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.595616][ T4730] bridge_slave_0: left allmulticast mode [ 414.604674][ T4730] bridge_slave_0: left promiscuous mode [ 414.616483][ T4730] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.764876][ T4730] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 414.786048][ T4730] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 414.807948][ T4730] bond0 (unregistering): Released all slaves [ 414.932352][ T4730] hsr_slave_0: left promiscuous mode [ 414.943380][ T4730] hsr_slave_1: left promiscuous mode [ 414.955321][ T4730] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 414.971205][ T4730] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 414.988132][ T4730] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 415.004471][ T4730] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 415.032982][ T4730] veth1_macvtap: left promiscuous mode [ 415.040661][ T4730] veth0_macvtap: left promiscuous mode [ 415.054023][ T4730] veth1_vlan: left promiscuous mode [ 415.065053][ T4730] veth0_vlan: left promiscuous mode [ 415.238875][ T4730] team0 (unregistering): Port device team_slave_1 removed [ 415.255508][ T4730] team0 (unregistering): Port device team_slave_0 removed [ 415.343414][T24820] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.353996][T24820] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.369333][T24820] bridge_slave_0: entered allmulticast mode [ 415.383439][T24820] bridge_slave_0: entered promiscuous mode [ 415.390621][T24820] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.397956][T24820] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.405854][T24820] bridge_slave_1: entered allmulticast mode [ 415.413481][T24820] bridge_slave_1: entered promiscuous mode [ 415.449480][T24820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 415.460613][T24820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 415.482913][T24820] team0: Port device team_slave_0 added [ 415.489904][T24820] team0: Port device team_slave_1 added [ 415.521648][T24820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.535031][T24820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.566244][T24820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.609327][T24820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.629380][T24820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 415.656764][T24820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.686181][T24820] hsr_slave_0: entered promiscuous mode [ 415.695043][T24820] hsr_slave_1: entered promiscuous mode [ 415.700895][ T28] audit: type=1400 audit(1439.776:4834): avc: denied { write } for pid=24917 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.724079][T24820] debugfs: 'hsr0' already exists in 'hsr' [ 415.729864][T24820] Cannot create hsr debugfs directory [ 415.732329][ T28] audit: type=1400 audit(1439.796:4835): avc: denied { write } for pid=24941 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.742714][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 415.810756][T24820] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.821183][T24820] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 415.865827][T24820] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.866468][ T28] audit: type=1400 audit(1439.946:4836): avc: denied { write } for pid=24945 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.876446][T24820] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 415.920707][ T28] audit: type=1400 audit(1439.996:4837): avc: denied { write } for pid=24956 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 415.936509][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 415.966076][T24820] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.976549][T24820] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 416.021308][ T28] audit: type=1400 audit(1440.096:4838): avc: denied { write } for pid=24959 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.045293][ T28] audit: type=1400 audit(1440.096:4839): avc: denied { write } for pid=24970 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.057060][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 416.076285][T24820] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.086651][T24820] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 416.134635][T24820] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 416.143736][T24820] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 416.151416][T24820] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 416.160551][T24820] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 416.168365][T24820] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 416.177698][T24820] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 416.185748][T24820] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 416.194527][T24820] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 416.201597][ T28] audit: type=1400 audit(1440.276:4840): avc: denied { write } for pid=24973 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.226635][ T28] audit: type=1400 audit(1440.276:4841): avc: denied { write } for pid=24984 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 416.248702][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 416.284009][T24820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 416.297499][T24820] 8021q: adding VLAN 0 to HW filter on device team0 [ 416.307360][ T217] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.314544][ T217] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.326344][ T4724] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.333525][ T4724] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.435671][T24820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 416.534513][T24820] veth0_vlan: entered promiscuous mode [ 416.542623][T24820] veth1_vlan: entered promiscuous mode [ 416.557775][T24820] veth0_macvtap: entered promiscuous mode [ 416.565550][T24820] veth1_macvtap: entered promiscuous mode [ 416.576486][T24820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.587899][T24820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.599445][ T4730] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.608502][ T4724] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.617637][ T4724] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.627686][ T4724] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.672877][T25022] netlink: 'syz.1.6359': attribute type 4 has an invalid length. [ 416.690201][T25022] netlink: 'syz.1.6359': attribute type 4 has an invalid length. [ 417.013951][T25062] netlink: 'syz.4.6366': attribute type 4 has an invalid length. [ 417.029635][T25062] netlink: 'syz.4.6366': attribute type 4 has an invalid length. [ 417.515191][ T28] audit: type=1400 audit(1441.586:4842): avc: denied { map } for pid=25082 comm="syz.1.6375" path="socket:[71154]" dev="sockfs" ino=71154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 417.539135][ T28] audit: type=1400 audit(1441.586:4843): avc: denied { read accept } for pid=25082 comm="syz.1.6375" path="socket:[71154]" dev="sockfs" ino=71154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 417.608449][T25091] loop4: detected capacity change from 0 to 2048 [ 417.615791][T25091] journal_path: Lookup failure for './bus' [ 417.641160][T25091] EXT4-fs: error: could not find journal device path [ 419.195278][T25152] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6403'. [ 419.266111][T25156] netlink: 28 bytes leftover after parsing attributes in process `syz.6.6405'. [ 420.210191][T25191] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6421'. [ 420.824551][T25212] bridge0: port 2(gretap0) entered blocking state [ 420.882504][T25212] bridge0: port 2(gretap0) entered disabled state [ 421.129861][T25236] netlink: 64 bytes leftover after parsing attributes in process `syz.3.6441'. [ 421.482303][T25248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6454'. [ 421.493775][T25246] bridge0: port 1(gretap0) entered blocking state [ 421.501107][T25246] bridge0: port 1(gretap0) entered disabled state [ 421.510717][T25246] gretap0: entered allmulticast mode [ 421.542121][T25246] gretap0: entered promiscuous mode [ 421.542479][T25249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6454'. [ 421.570706][T25246] bridge0: port 1(gretap0) entered blocking state [ 421.578285][T25246] bridge0: port 1(gretap0) entered forwarding state [ 421.733108][T25249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6454'. [ 421.761927][T25262] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 421.866319][T25262] team0: Port device netdevsim2 removed [ 421.872716][T25262] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.071893][T25262] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.113274][T25262] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.150586][ T28] kauditd_printk_skb: 14 callbacks suppressed [ 422.150642][ T28] audit: type=1400 audit(1446.226:4858): avc: denied { shutdown } for pid=25286 comm="syz.3.6460" lport=54144 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 422.221906][ T217] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.245267][ T217] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.280833][ T217] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.314889][ T217] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.359968][T25298] netlink: 20 bytes leftover after parsing attributes in process `syz.1.6463'. [ 422.386748][T25298] ip6gre2: entered promiscuous mode [ 422.392152][T25298] ip6gre2: entered allmulticast mode [ 422.403751][T25298] netlink: 'syz.1.6463': attribute type 6 has an invalid length. [ 422.411652][T25298] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6463'. [ 422.736925][T25308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6468'. [ 422.760754][ T4724] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.781180][ T4724] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.806416][ T4724] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 422.838557][ T4724] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.006300][T25327] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.016764][T25327] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.072916][T25327] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.083273][T25327] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.114053][ T28] audit: type=1400 audit(1447.196:4859): avc: denied { create } for pid=25333 comm="syz.6.6486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 423.144948][T25334] netlink: 'syz.6.6486': attribute type 3 has an invalid length. [ 423.162657][T25334] netlink: 'syz.6.6486': attribute type 1 has an invalid length. [ 423.179742][T25327] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.190093][T25327] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.245343][T25327] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 423.255793][T25327] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.326637][ T4724] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.335605][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 423.362618][ T4724] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.383169][ T4724] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.402057][ T4724] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.422458][ T4724] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.460723][ T4724] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.480478][ T4724] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 423.499119][ T4724] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.840053][T25436] __nla_validate_parse: 7 callbacks suppressed [ 424.840069][T25436] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6490'. [ 426.174523][T25470] netlink: 4 bytes leftover after parsing attributes in process `syz.9.6508'. [ 426.742303][T25513] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6525'. [ 426.789154][T25513] geneve2: entered promiscuous mode [ 426.822035][ T4734] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.840884][ T4734] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.858463][ T4734] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.875568][ T4734] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.374709][ T28] audit: type=1400 audit(1451.456:4860): avc: denied { write } for pid=25537 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.447325][ T28] audit: type=1400 audit(1451.526:4861): avc: denied { write } for pid=25554 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 427.741189][T25569] uprobe: syz.9.6541:25569 failed to unregister, leaking uprobe [ 427.808285][T25574] netlink: 'syz.9.6542': attribute type 2 has an invalid length. [ 427.942799][ T28] audit: type=1400 audit(1452.026:4862): avc: denied { write } for pid=25571 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.017393][ T28] audit: type=1400 audit(1452.096:4863): avc: denied { write } for pid=25599 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.229069][ T28] audit: type=1400 audit(1452.306:4864): avc: denied { write } for pid=25606 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.295221][ T28] audit: type=1400 audit(1452.376:4865): avc: denied { write } for pid=25627 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.540684][ T28] audit: type=1400 audit(1452.616:4866): avc: denied { write } for pid=25634 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.612838][T25649] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6556'. [ 428.613245][ T28] audit: type=1400 audit(1452.666:4867): avc: denied { write } for pid=25646 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 428.843677][T25661] ref_ctr increment failed for inode: 0x99b offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff88810006d100 [ 428.868674][T25660] uprobe: syz.9.6561:25660 failed to unregister, leaking uprobe [ 428.934059][T25674] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6562'. [ 429.084885][T25677] xt_hl: Unknown TTL match mode: 255 [ 429.249361][T25631] kexec: Could not allocate control_code_buffer [ 429.288692][T25696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6573'. [ 429.299914][T25696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6573'. [ 429.309743][T25696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6573'. [ 429.319264][T25696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6573'. [ 429.329438][T25696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6573'. [ 429.525511][T25706] ref_ctr increment failed for inode: 0x174f offset: 0x0 ref_ctr_offset: 0x82 of mm: 0xffff8881051557c0 [ 429.537905][T25705] uprobe: syz.1.6577:25705 failed to unregister, leaking uprobe [ 429.567013][T25709] syz_tun: entered allmulticast mode [ 429.586748][T25709] syz_tun (unregistering): left allmulticast mode [ 430.071819][ T28] audit: type=1400 audit(1454.146:4868): avc: denied { accept } for pid=25731 comm="syz.6.6589" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 430.185292][T25736] __nla_validate_parse: 3 callbacks suppressed [ 430.185312][T25736] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6592'. [ 430.206660][T25736] team1: entered promiscuous mode [ 430.213045][T25736] team1: entered allmulticast mode [ 430.227696][T25736] 8021q: adding VLAN 0 to HW filter on device team1 [ 430.253028][T25736] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6592'. [ 430.278669][T25736] team2: entered promiscuous mode [ 430.288685][T25736] team2: entered allmulticast mode [ 430.298896][T25736] 8021q: adding VLAN 0 to HW filter on device team2 [ 431.188929][T25750] syz.9.6598 invoked oom-killer: gfp_mask=0x402dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), order=0, oom_score_adj=0 [ 431.202899][T25750] CPU: 1 UID: 0 PID: 25750 Comm: syz.9.6598 Tainted: G W syzkaller #0 PREEMPT(full) [ 431.202930][T25750] Tainted: [W]=WARN [ 431.202937][T25750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 431.203007][T25750] Call Trace: [ 431.203015][T25750] [ 431.203025][T25750] __dump_stack+0x1d/0x30 [ 431.203051][T25750] dump_stack_lvl+0x95/0xd0 [ 431.203077][T25750] dump_stack+0x15/0x1b [ 431.203096][T25750] dump_header+0x80/0x240 [ 431.203118][T25750] oom_kill_process+0x295/0x350 [ 431.203195][T25750] out_of_memory+0x97d/0xb80 [ 431.203217][T25750] try_charge_memcg+0x62f/0xa10 [ 431.203312][T25750] __memcg_kmem_charge_page+0x1ce/0x3d0 [ 431.203328][T25750] __alloc_frozen_pages_noprof+0x18a/0x350 [ 431.203424][T25750] alloc_pages_mpol+0xb3/0x260 [ 431.203445][T25750] alloc_pages_noprof+0x8f/0x140 [ 431.203460][T25750] __vmalloc_node_range_noprof+0xaed/0x11c0 [ 431.203480][T25750] __kvmalloc_node_noprof+0x3d4/0x640 [ 431.203496][T25750] ? futex_hash_allocate+0x190/0x9a0 [ 431.203573][T25750] ? futex_hash_allocate+0x190/0x9a0 [ 431.203592][T25750] futex_hash_allocate+0x190/0x9a0 [ 431.203611][T25750] ? cap_task_prctl+0x13f/0x6b0 [ 431.203627][T25750] futex_hash_prctl+0xd8/0xf0 [ 431.203707][T25750] __se_sys_prctl+0x4f4/0x1400 [ 431.203746][T25750] __x64_sys_prctl+0x67/0x80 [ 431.203821][T25750] x64_sys_call+0x2533/0x3020 [ 431.203901][T25750] do_syscall_64+0x12c/0x3b0 [ 431.203921][T25750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 431.204007][T25750] RIP: 0033:0x7fb174face59 [ 431.204018][T25750] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 431.204031][T25750] RSP: 002b:00007fb173a07028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 431.204044][T25750] RAX: ffffffffffffffda RBX: 00007fb175225fa0 RCX: 00007fb174face59 [ 431.204053][T25750] RDX: 0000000001000000 RSI: 0000000000000001 RDI: 000000000000004e [ 431.204061][T25750] RBP: 00007fb175042d6f R08: 0000000000000000 R09: 0000000000000000 [ 431.204070][T25750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 431.204123][T25750] R13: 00007fb175226038 R14: 00007fb175225fa0 R15: 00007fff0f94a108 [ 431.204154][T25750] [ 431.204179][T25750] memory: usage 307200kB, limit 307200kB, failcnt 348 [ 431.434614][T25750] memory+swap: usage 307200kB, limit 9007199254740988kB, failcnt 0 [ 431.442822][T25750] kmem: usage 277240kB, limit 9007199254740988kB, failcnt 0 [ 431.450665][T25750] Memory cgroup stats for /syz9: [ 431.451452][T25750] cache 929792 [ 431.478849][T25750] rss 29696000 [ 431.484413][T25750] shmem 139264 [ 431.490907][T25750] mapped_file 790528 [ 431.499424][T25750] dirty 8192 [ 431.507812][T25750] writeback 0 [ 431.515482][T25750] workingset_refault_anon 2770 [ 431.527152][T25750] workingset_refault_file 850 [ 431.533712][T25750] swap 0 [ 431.536704][T25750] swapcached 19378176 [ 431.540786][T25750] pgpgin 298732 [ 431.544526][T25750] pgpgout 291255 [ 431.548237][T25750] pgfault 279496 [ 431.551922][T25750] pgmajfault 284 [ 431.555777][T25750] inactive_anon 327680 [ 431.559907][T25750] active_anon 167936 [ 431.564439][T25750] inactive_file 0 [ 431.568499][T25750] active_file 0 [ 431.572301][T25750] unevictable 30130176 [ 431.576497][T25750] hierarchical_memory_limit 314572800 [ 431.582209][T25750] hierarchical_memsw_limit 9223372036854771712 [ 431.588682][T25750] total_cache 929792 [ 431.609072][T25750] total_rss 29696000 [ 431.618309][T25750] total_shmem 139264 [ 431.628158][T25750] total_mapped_file 790528 [ 431.639080][T25750] total_dirty 8192 [ 431.643354][T25750] total_writeback 0 [ 431.647350][T25750] total_workingset_refault_anon 2770 [ 431.653578][T25750] total_workingset_refault_file 850 [ 431.658948][T25750] total_swap 0 [ 431.662401][T25750] total_swapcached 19378176 [ 431.667000][T25750] total_pgpgin 298732 [ 431.671077][T25750] total_pgpgout 291255 [ 431.675322][T25750] total_pgfault 279497 [ 431.680958][T25750] total_pgmajfault 284 [ 431.694002][T25750] total_inactive_anon 327680 [ 431.698853][T25750] total_active_anon 167936 [ 431.717919][T25750] total_inactive_file 0 [ 431.730319][T25750] total_active_file 0 [ 431.735107][T25750] total_unevictable 30130176 [ 431.740082][T25750] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz9,task_memcg=/syz9,task=syz.9.6598,pid=25748,uid=0 [ 431.760163][T25750] Memory cgroup out of memory: Killed process 25750 (syz.9.6598) total-vm:94300kB, anon-rss:29988kB, file-rss:64240kB, shmem-rss:0kB, UID:0 pgtables:248kB oom_score_adj:0 [ 431.907811][T25670] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 431.917027][T25791] ref_ctr_offset mismatch. inode: 0x1788 offset: 0x0 ref_ctr_offset(old): 0x2000000000c0 ref_ctr_offset(new): 0x1000000008 [ 432.140260][T25799] loop4: detected capacity change from 0 to 256 [ 432.349552][T25804] tipc: Started in network mode [ 432.367001][T25804] tipc: Node identity 4, cluster identity 4711 [ 432.385507][T25804] tipc: Node number set to 4 [ 432.620190][T25823] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6625'. [ 432.646014][T25823] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6625'. [ 432.805598][T25844] netlink: 'syz.3.6634': attribute type 3 has an invalid length. [ 432.987695][T25852] xt_hl: Unknown TTL match mode: 255 [ 433.197494][T25869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6645'. [ 433.227317][T25869] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6645'. [ 434.011402][T25927] sctp: [Deprecated]: syz.6.6665 (pid 25927) Use of int in max_burst socket option. [ 434.011402][T25927] Use struct sctp_assoc_value instead [ 434.144828][T25937] loop4: detected capacity change from 0 to 128 [ 434.156164][T25937] FAT-fs (loop4): bogus number of reserved sectors [ 434.165457][T25937] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 434.175184][T25937] FAT-fs (loop4): Can't find a valid FAT filesystem [ 434.206325][T25937] xt_hl: Unknown TTL match mode: 255 [ 436.406537][ T28] audit: type=1400 audit(1460.486:4869): avc: denied { connect } for pid=26000 comm="syz.9.6694" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 437.484956][ T28] audit: type=1326 audit(1461.566:4870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26050 comm="syz.1.6716" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdac29ece59 code=0x0 [ 438.656120][T26111] netlink: 44 bytes leftover after parsing attributes in process `syz.1.6739'. [ 438.948853][T26126] tipc: Enabling of bearer rejected, failed to enable media [ 439.065983][T26130] netlink: 120 bytes leftover after parsing attributes in process `syz.3.6747'. [ 439.148551][T26136] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6749'. [ 439.171294][T26136] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6749'. [ 439.221402][T26139] loop4: detected capacity change from 0 to 512 [ 439.240731][T26139] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.266279][ T28] audit: type=1400 audit(1463.346:4871): avc: denied { write } for pid=26138 comm="syz.4.6750" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 439.545132][T24820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.579507][ T28] audit: type=1400 audit(1463.656:4872): avc: denied { name_bind } for pid=26146 comm="syz.6.6754" src=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 439.615575][T26151] loop4: detected capacity change from 0 to 512 [ 441.146632][T26205] netlink: 'syz.1.6775': attribute type 2 has an invalid length. [ 441.165126][T26205] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.6775'. [ 441.813541][ T7390] page_pool_release_retry() stalled pool shutdown: id 278, 1 inflight 60 sec [ 441.944450][T26223] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6782'. [ 441.955840][T26217] loop4: detected capacity change from 0 to 512 [ 442.006311][T26217] EXT4-fs error (device loop4): ext4_orphan_get:1397: inode #15: comm syz.4.6776: iget: bad i_size value: 38620345925642 [ 442.037886][T26217] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 442.041807][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 442.057415][ C1] EXT4-fs (loop4): initial error at time 1466: ext4_orphan_get:1397: inode 15 [ 442.066303][ C1] EXT4-fs (loop4): last error at time 1466: ext4_orphan_get:1397: inode 15 [ 442.077985][T26217] EXT4-fs error (device loop4): ext4_orphan_get:1402: comm syz.4.6776: couldn't read orphan inode 15 (err -117) [ 442.099325][T26217] loop4: lost filesystem error report for type 5 error -117 [ 442.146878][T26217] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.186771][ T28] audit: type=1400 audit(1466.266:4873): avc: denied { write } for pid=26216 comm="syz.4.6776" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 442.691320][ T4722] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm kworker/u8:10: bg 0: block 5: invalid block bitmap [ 442.714091][ T28] audit: type=1400 audit(1466.796:4874): avc: denied { watch } for pid=26235 comm="syz.6.6788" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 442.737297][ T4722] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1788 with error 28 [ 442.750234][ T4722] EXT4-fs (loop4): This should not happen!! Data will be lost [ 442.750234][ T4722] [ 442.766689][ T4722] EXT4-fs (loop4): Total free blocks count 0 [ 442.772991][ T4722] EXT4-fs (loop4): Free/Dirty block details [ 442.791156][ T4722] EXT4-fs (loop4): free_blocks=0 [ 442.798598][ T4722] EXT4-fs (loop4): dirty_blocks=1792 [ 442.804167][ T4722] EXT4-fs (loop4): Block reservation details [ 442.810904][ T4722] EXT4-fs (loop4): i_reserved_data_blocks=1792 [ 442.835323][T24820] EXT4-fs warning (device loop4): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 442.859388][T24820] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.009611][T26264] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6798'. [ 443.075180][T26264] ip6gretap0: entered promiscuous mode [ 443.102680][T26264] ip6gretap0: entered allmulticast mode [ 443.476135][ T28] audit: type=1400 audit(1467.556:4875): avc: denied { write } for pid=26292 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 443.529224][ T28] audit: type=1400 audit(1467.606:4876): avc: denied { write } for pid=26304 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.152839][T26369] netlink: 16 bytes leftover after parsing attributes in process `syz.6.6833'. [ 445.287557][T26378] netlink: 2028 bytes leftover after parsing attributes in process `syz.9.6836'. [ 445.321867][T26378] netlink: 20 bytes leftover after parsing attributes in process `syz.9.6836'. [ 445.350087][ T28] audit: type=1326 audit(1725.422:4877): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26379 comm="syz.1.6839" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac29ece59 code=0x7ffc0000 [ 445.417565][ T28] audit: type=1326 audit(1725.422:4878): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26379 comm="syz.1.6839" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac29ece59 code=0x7ffc0000 [ 445.490592][ T28] audit: type=1326 audit(1725.432:4879): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26379 comm="syz.1.6839" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac29ece59 code=0x7ffc0000 [ 445.556495][ T28] audit: type=1326 audit(1725.432:4880): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26379 comm="syz.1.6839" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac29ece59 code=0x7ffc0000 [ 445.597687][ T4651] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 445.623645][T26391] netlink: 'syz.6.6843': attribute type 1 has an invalid length. [ 445.631592][ T28] audit: type=1326 audit(1725.432:4881): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26379 comm="syz.1.6839" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdac29ece59 code=0x7ffc0000 [ 445.658364][ T28] audit: type=1326 audit(1725.452:4882): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26379 comm="syz.1.6839" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7fdac29ece59 code=0x7ffc0000 [ 445.712610][ T4651] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 445.769272][T26391] 8021q: adding VLAN 0 to HW filter on device bond7 [ 445.801696][T26393] bond7: (slave syz_tun): Enslaving as a backup interface with an up link [ 445.825175][T26399] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6844'. [ 446.002541][ T4651] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 446.401541][T26454] netlink: 28 bytes leftover after parsing attributes in process `syz.1.6858'. [ 446.412151][T26454] netlink: 'syz.1.6858': attribute type 7 has an invalid length. [ 446.420346][T26454] netlink: 'syz.1.6858': attribute type 8 has an invalid length. [ 446.428987][T26454] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6858'. [ 446.588327][T26439] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.606014][T26439] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.634158][T26439] bridge_slave_0: entered allmulticast mode [ 446.659795][T26439] bridge_slave_0: entered promiscuous mode [ 446.685088][T26439] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.701694][T26439] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.716237][T26439] bridge_slave_1: entered allmulticast mode [ 446.737015][T26439] bridge_slave_1: entered promiscuous mode [ 446.789878][T26439] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.823317][T26439] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.863453][T26439] team0: Port device team_slave_0 added [ 446.873538][T26439] team0: Port device team_slave_1 added [ 446.914855][T26439] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.922908][T26439] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 446.955940][T26439] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.989099][T26439] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.996301][T26439] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 447.030890][T26477] netlink: 'syz.3.6867': attribute type 1 has an invalid length. [ 447.031010][T26439] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 447.063563][T26477] 8021q: adding VLAN 0 to HW filter on device bond8 [ 447.080619][T26480] 8021q: adding VLAN 0 to HW filter on device bond4 [ 447.096938][T26477] vlan4: entered allmulticast mode [ 447.102320][T26477] bond8: entered allmulticast mode [ 447.115918][T26477] bond8: (slave geneve2): making interface the new active one [ 447.123516][T26477] geneve2: entered allmulticast mode [ 447.130817][T26477] bond8: (slave geneve2): Enslaving as an active interface with an up link [ 447.152226][T26480] bond4: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 447.184009][ T4734] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 447.224887][T26439] hsr_slave_0: entered promiscuous mode [ 447.232554][T26439] hsr_slave_1: entered promiscuous mode [ 447.239490][T26439] debugfs: 'hsr0' already exists in 'hsr' [ 447.245734][T26439] Cannot create hsr debugfs directory [ 447.302180][ T4730] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 447.336720][T26439] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.346894][T26439] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.393690][T26439] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.403652][T26439] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.444119][T26439] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.454188][T26439] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.503595][T26439] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.514163][T26439] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.586107][T26439] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 447.596500][T26439] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 447.605060][T26439] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 447.614137][T26439] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 447.622171][T26439] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 447.631215][T26439] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 447.639597][T26439] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 447.649474][T26439] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 447.720787][T26439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 447.748116][T26439] 8021q: adding VLAN 0 to HW filter on device team0 [ 447.764436][ T4734] bridge0: port 1(bridge_slave_0) entered blocking state [ 447.771561][ T4734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 447.793980][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 447.801273][ T4722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 447.962748][T26514] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.986833][T26514] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.051639][T26514] bond0: (slave netdevsim2): Releasing backup interface [ 448.063969][T26514] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.074625][T26514] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.091709][T26439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.154770][T26514] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.165940][T26514] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.225414][T26514] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 448.236651][T26514] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 448.290394][ T39] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.303778][ T39] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.331581][ T4722] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.340000][ T4722] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.358126][ T4734] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.368222][ T4734] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.385971][T26439] veth0_vlan: entered promiscuous mode [ 448.395656][ T4734] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 448.405051][ T4734] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.417386][T26439] veth1_vlan: entered promiscuous mode [ 448.446054][T26439] veth0_macvtap: entered promiscuous mode [ 448.464231][T26439] veth1_macvtap: entered promiscuous mode [ 448.492637][T26439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.509504][T26439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 448.530467][ T4722] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.544006][ T4722] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.554832][ T4722] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.576810][ T4722] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 448.672275][T26554] netlink: 56 bytes leftover after parsing attributes in process `syz.4.6866'. [ 448.814920][T26554] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.822418][T26554] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.875700][T26567] netlink: 'syz.9.6890': attribute type 1 has an invalid length. [ 448.937257][T26554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.949935][T26554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.024786][T26567] 8021q: adding VLAN 0 to HW filter on device bond5 [ 449.047261][T26570] bond5: (slave vlan4): Opening slave failed [ 449.064685][ T4722] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.076523][ T4722] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.085879][ T4722] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.097001][ T4722] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.227925][T26583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6895'. [ 449.238107][T26583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6895'. [ 449.557389][T26603] netlink: 'syz.4.6905': attribute type 1 has an invalid length. [ 449.612174][T26601] xfrm1: entered allmulticast mode [ 449.625756][T26603] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 450.587438][T26649] geneve3: entered promiscuous mode [ 450.599440][T26649] geneve3: entered allmulticast mode [ 450.737289][T26662] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.783571][T26662] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.834524][T26662] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.894353][T26662] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 450.963650][ T4734] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 450.987796][ T4734] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.004379][ T4734] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.072419][ T4722] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 451.941426][T26696] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 451.998945][T26698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6941'. [ 452.020093][T26698] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6941'. [ 452.186885][T26706] netlink: 'syz.3.6943': attribute type 1 has an invalid length. [ 452.220323][T26706] 8021q: adding VLAN 0 to HW filter on device bond9 [ 452.265302][T26706] bond9: (slave syz_tun): Enslaving as a backup interface with an up link [ 452.341950][T26716] syz_tun: entered allmulticast mode [ 452.374098][T26716] pimreg: entered allmulticast mode [ 452.403194][T26715] syz_tun: left allmulticast mode [ 452.822139][T26733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6956'. [ 452.845221][T26733] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6956'. [ 453.249818][T26748] xfrm1: entered allmulticast mode [ 453.339981][T26750] netlink: 56 bytes leftover after parsing attributes in process `syz.6.6963'. [ 453.481828][T26750] bridge0: port 1(gretap0) entered disabled state [ 454.083900][T26759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6967'. [ 454.100935][T26759] netlink: 28 bytes leftover after parsing attributes in process `syz.3.6967'. [ 454.122271][ T4722] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.147648][ T4722] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.174949][ T4722] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.195564][ T4722] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.204272][ T4722] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.213018][ T4722] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.228734][ T4722] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 454.239622][ T4722] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.534794][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 454.534822][ T28] audit: type=1400 audit(1734.612:4907): avc: denied { write } for pid=26800 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.570478][T26809] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6974'. [ 454.604490][ T28] audit: type=1400 audit(1734.612:4908): avc: denied { write } for pid=26815 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.771185][ T28] audit: type=1400 audit(1734.842:4909): avc: denied { write } for pid=26818 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.826698][ T28] audit: type=1400 audit(1734.902:4910): avc: denied { write } for pid=26835 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 454.913283][T26844] bond6: entered promiscuous mode [ 454.989363][ T28] audit: type=1400 audit(1735.062:4911): avc: denied { mount } for pid=26846 comm="syz.1.6981" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 455.152528][T26856] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 455.715741][T26875] netlink: 'syz.3.6994': attribute type 1 has an invalid length. [ 455.724018][T26877] bond1: entered allmulticast mode [ 455.730551][T26877] ip6gre1: entered allmulticast mode [ 455.755102][T26875] 8021q: adding VLAN 0 to HW filter on device bond10 [ 455.783963][T26877] pimreg: entered allmulticast mode [ 455.803600][T26881] bond10: (slave vlan5): Enslaving as an active interface with a down link [ 455.814940][T26876] bond1: left allmulticast mode [ 455.820033][T26876] ip6gre1: left allmulticast mode [ 457.032312][ T28] audit: type=1326 audit(1737.112:4912): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26916 comm="syz.3.7007" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd774ece59 code=0x7ffc0000 [ 457.092781][ T28] audit: type=1326 audit(1737.142:4913): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26916 comm="syz.3.7007" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd774ece59 code=0x7ffc0000 [ 457.139769][ T28] audit: type=1326 audit(1737.142:4914): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26916 comm="syz.3.7007" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcd774ece59 code=0x7ffc0000 [ 457.186830][ T28] audit: type=1326 audit(1737.142:4915): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26916 comm="syz.3.7007" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcd774ece59 code=0x7ffc0000 [ 457.242396][ T28] audit: type=1326 audit(1737.142:4916): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=26916 comm="syz.3.7007" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7fcd774ece59 code=0x7ffc0000 [ 458.548911][T26978] netlink: 16 bytes leftover after parsing attributes in process `syz.9.7030'. [ 458.689844][T26986] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7034'. [ 458.749025][T26986] bond7: entered promiscuous mode [ 458.765189][T26986] 8021q: adding VLAN 0 to HW filter on device bond7 [ 458.803820][T26986] 8021q: adding VLAN 0 to HW filter on device bond7 [ 458.823697][T26986] bond7: (slave sit3): The slave device specified does not support setting the MAC address [ 458.840200][T26986] bond7: (slave sit3): Error -95 calling set_mac_address [ 459.532517][T26998] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7042'. [ 459.563813][ T28] kauditd_printk_skb: 48 callbacks suppressed [ 459.563827][ T28] audit: type=1326 audit(1995.649:4965): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27005 comm="syz.4.7043" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f2fa414ce59 code=0x7ffc0000 [ 460.179875][T27083] loop4: detected capacity change from 0 to 512 [ 460.205886][T27083] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 460.244856][T27083] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 460.402773][T27093] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7062'. [ 460.736217][ T7399] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0 [ 460.754261][ T7399] hid-generic 0000:0000:0000.000D: hidraw0: HID v0.00 Device [syz1] on syz0 [ 460.776960][T27106] netlink: 'syz.6.7066': attribute type 1 has an invalid length. [ 460.807983][T27106] bond8: (slave vxcan5): The slave device specified does not support setting the MAC address [ 460.818354][T27106] bond8: (slave vxcan5): Setting fail_over_mac to active for active-backup mode [ 460.830415][T27106] bond8: (slave vxcan5): making interface the new active one [ 460.838617][T27106] bond8: (slave vxcan5): Enslaving as an active interface with an up link [ 460.857995][T27106] bond8: (slave vxcan7): The slave device specified does not support setting the MAC address [ 460.869930][T27106] bond8: (slave vxcan7): Enslaving as a backup interface with an up link [ 461.039770][T27116] tunl0: left promiscuous mode [ 461.065308][T27116] geneve1: left promiscuous mode [ 461.071686][T27116] bond3: left promiscuous mode [ 461.080874][T27116] bridge4: left promiscuous mode [ 461.292289][T27116] bond6: left promiscuous mode [ 461.303654][T27052] netdevsim netdevsim9 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.318444][T27052] netdevsim netdevsim9 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.333843][T27052] netdevsim netdevsim9 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.359626][T27052] netdevsim netdevsim9 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 461.370910][T27122] --map-set only usable from mangle table [ 462.276490][T27160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7085'. [ 462.294191][T27160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7085'. [ 462.816856][T27175] netlink: 56 bytes leftover after parsing attributes in process `syz.9.7092'. [ 462.890657][ T28] audit: type=1400 audit(1998.969:4966): avc: denied { execute } for pid=27180 comm="syz.9.7096" path="/file0" dev="ramfs" ino=76506 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 462.947891][T27194] syz_tun: entered allmulticast mode [ 462.959482][T27193] syz_tun: left allmulticast mode [ 463.246404][T27210] netlink: 32 bytes leftover after parsing attributes in process `syz.1.7105'. [ 463.365343][T27215] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7107'. [ 463.465864][T27215] bridge0: port 4(gretap0) entered disabled state [ 463.541463][T27215] veth0_vlan: left promiscuous mode [ 463.704347][ T6709] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.718213][ T6709] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.747769][ T6709] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 463.763085][ T6709] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 464.268749][T27243] netlink: 28 bytes leftover after parsing attributes in process `syz.3.7116'. [ 464.290851][T27243] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7116'. [ 464.473297][T27248] loop4: detected capacity change from 0 to 512 [ 464.483827][T27248] FAT-fs (loop4): Directory bread(block 199916) failed [ 464.490876][T27248] FAT-fs (loop4): Directory bread(block 199917) failed [ 464.498568][T27248] FAT-fs (loop4): Directory bread(block 199918) failed [ 464.505752][T27248] FAT-fs (loop4): Directory bread(block 199919) failed [ 464.512810][T27248] FAT-fs (loop4): Directory bread(block 199920) failed [ 464.519805][T27248] FAT-fs (loop4): Directory bread(block 199921) failed [ 464.526872][T27248] FAT-fs (loop4): Directory bread(block 199922) failed [ 464.534125][T27248] FAT-fs (loop4): Directory bread(block 199923) failed [ 464.579125][T26439] FAT-fs (loop4): Directory bread(block 199916) failed [ 464.593961][T26439] FAT-fs (loop4): Directory bread(block 199917) failed [ 464.653998][T27250] bond0: (slave syz_tun): Releasing backup interface [ 464.723770][T27260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7132'. [ 464.973265][T27047] bridge_slave_1: left allmulticast mode [ 464.984700][T27047] bridge_slave_1: left promiscuous mode [ 464.997688][T27047] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.017463][T27047] bridge_slave_0: left allmulticast mode [ 465.024445][T27047] bridge_slave_0: left promiscuous mode [ 465.035235][T27047] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.054245][T27047] pimreg: left allmulticast mode [ 465.125621][ T28] audit: type=1400 audit(2001.209:4967): avc: denied { write } for pid=27279 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.163038][ T28] audit: type=1400 audit(2001.229:4968): avc: denied { write } for pid=27293 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.196434][T27047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 465.215508][T27047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 465.235869][T27047] bond0 (unregistering): Released all slaves [ 465.253831][ T3020] 8021q: adding VLAN 0 to HW filter on device eth18 [ 465.440458][T27047] hsr_slave_0: left promiscuous mode [ 465.454556][T27047] hsr_slave_1: left promiscuous mode [ 465.466951][T27047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 465.484541][ T28] audit: type=1400 audit(2001.569:4969): avc: denied { write } for pid=27298 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.509470][T27047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 465.539546][ T28] audit: type=1400 audit(2001.619:4970): avc: denied { write } for pid=27309 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.641628][T27047] team0 (unregistering): Port device team_slave_1 removed [ 465.662461][T27047] team0 (unregistering): Port device team_slave_0 removed [ 465.715895][ T3020] 8021q: adding VLAN 0 to HW filter on device eth19 [ 465.753900][T27320] 9pnet: p9_errstr2errno: server reported unknown error 000000000 [ 465.940382][ T28] audit: type=1400 audit(2002.019:4971): avc: denied { write } for pid=27333 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 465.945764][T27268] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.970648][T27268] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.977994][T27268] bridge_slave_0: entered allmulticast mode [ 465.984759][T27268] bridge_slave_0: entered promiscuous mode [ 465.999940][T27268] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.008742][ T28] audit: type=1400 audit(2002.089:4972): avc: denied { write } for pid=27354 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.010110][T27268] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.037812][T27268] bridge_slave_1: entered allmulticast mode [ 466.054483][T27268] bridge_slave_1: entered promiscuous mode [ 466.067113][ T3020] 8021q: adding VLAN 0 to HW filter on device eth20 [ 466.082943][T27268] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.098660][T27268] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.122928][T27268] team0: Port device team_slave_0 added [ 466.130596][T27268] team0: Port device team_slave_1 added [ 466.149342][T27268] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.156390][T27268] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.183304][T27268] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.195196][T27268] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.202396][T27268] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.229123][T27268] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.266898][T27268] hsr_slave_0: entered promiscuous mode [ 466.279960][T27268] hsr_slave_1: entered promiscuous mode [ 466.286817][T27268] debugfs: 'hsr0' already exists in 'hsr' [ 466.294587][T27268] Cannot create hsr debugfs directory [ 466.418781][T27369] netlink: 'syz.3.7143': attribute type 1 has an invalid length. [ 466.471495][ T28] audit: type=1400 audit(2002.549:4973): avc: denied { write } for pid=27358 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.518720][T27369] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 466.530513][T27369] bond11: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 466.544410][T27369] bond11: (slave vxcan3): making interface the new active one [ 466.552823][T27369] bond11: (slave vxcan3): Enslaving as an active interface with an up link [ 466.561504][ T28] audit: type=1400 audit(2002.639:4974): avc: denied { write } for pid=27386 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.628777][T27369] bond11: (slave vxcan5): The slave device specified does not support setting the MAC address [ 466.653956][T27369] bond11: (slave vxcan5): Enslaving as a backup interface with an up link [ 466.667479][ T3020] 8021q: adding VLAN 0 to HW filter on device eth24 [ 466.836118][ T28] audit: type=1400 audit(2002.919:4975): avc: denied { write } for pid=27390 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.890538][ T28] audit: type=1400 audit(2002.969:4976): avc: denied { write } for pid=27408 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 466.969498][T27268] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 466.995700][T27268] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 467.027565][T27268] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 467.064455][T27268] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 467.090995][T27268] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 467.113880][T27268] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 467.129166][T27268] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 467.150918][T27268] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 467.272782][T27268] 8021q: adding VLAN 0 to HW filter on device bond0 [ 467.319322][T27268] 8021q: adding VLAN 0 to HW filter on device team0 [ 467.345885][T27047] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.353030][T27047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 467.389806][ T6711] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.396961][ T6711] bridge0: port 2(bridge_slave_1) entered forwarding state [ 467.409726][T27449] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7156'. [ 467.451927][T27449] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7156'. [ 467.635036][T27470] netlink: 'syz.1.7159': attribute type 1 has an invalid length. [ 467.738877][T27470] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 467.750863][T27470] bond9: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 467.762894][T27470] bond9: (slave vxcan3): making interface the new active one [ 467.789209][T27470] bond9: (slave vxcan3): Enslaving as an active interface with an up link [ 467.824647][T27502] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 467.838366][T27497] bond9: (slave vxcan5): The slave device specified does not support setting the MAC address [ 467.850971][T27497] bond9: (slave vxcan5): Enslaving as a backup interface with an up link [ 467.865440][T27268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 468.005406][T27268] veth0_vlan: entered promiscuous mode [ 468.022971][T27268] veth1_vlan: entered promiscuous mode [ 468.059248][T27268] veth0_macvtap: entered promiscuous mode [ 468.077038][T27268] veth1_macvtap: entered promiscuous mode [ 468.103958][T27268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 468.125467][T27268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 468.149910][T27030] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.165205][T27030] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.191177][T27030] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.221297][T27030] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 468.298469][T27541] loop2: detected capacity change from 0 to 512 [ 469.361245][T27640] loop2: detected capacity change from 0 to 512 [ 469.408146][T27640] EXT4-fs error (device loop2): ext4_orphan_get:1423: comm syz.2.7172: bad orphan inode 13 [ 469.448869][T27640] loop2: lost filesystem error report for type 5 error -117 [ 469.451784][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 469.465557][ C0] EXT4-fs (loop2): initial error at time 2005: ext4_orphan_get:1423 [ 469.470307][T27640] ext4_test_bit(bit=12, block=4) = 1 [ 469.473592][ C0] EXT4-fs (loop2): last error at time 2005: ext4_orphan_get:1423 [ 469.533314][T27640] is_bad_inode(inode)=0 [ 469.580209][T27640] NEXT_ORPHAN(inode)=0 [ 469.593867][T27640] max_ino=32 [ 469.603185][T27640] i_nlink=1 [ 469.612931][T27640] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.719765][T27268] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.890198][T27645] geneve1: left promiscuous mode [ 469.966864][T27645] bond7: left allmulticast mode [ 470.000552][T27645] gretap0: left allmulticast mode [ 470.025408][T27645] macvlan2: left allmulticast mode [ 470.054829][T27645] vlan4: left allmulticast mode [ 470.070873][T27645] bond8: left allmulticast mode [ 470.091820][T27645] geneve2: left allmulticast mode [ 470.120912][T27645] xfrm1: left allmulticast mode [ 470.156212][ T4726] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.190146][ T4726] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.224675][ T4726] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.242957][ T4726] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.263555][ T4726] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.280944][ T4726] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.301561][ T4726] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.330523][ T4726] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.711642][ T7399] team_slave_0: entered promiscuous mode [ 470.717491][ T7399] team_slave_1: entered promiscuous mode [ 470.747377][T27659] geneve2: entered promiscuous mode [ 470.766697][T27659] geneve2: entered allmulticast mode [ 470.831885][ T3377] team_slave_0: left promiscuous mode [ 470.837327][ T3377] team_slave_1: left promiscuous mode [ 470.930892][T27665] IPv6: sit3: Disabled Multicast RS [ 470.952814][T27665] sit3: entered allmulticast mode [ 471.059598][T27671] macvlan2: entered promiscuous mode [ 471.081473][T27671] macvlan2: entered allmulticast mode [ 471.923794][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 471.923809][ T28] audit: type=1400 audit(2008.009:4999): avc: denied { setopt } for pid=27690 comm="syz.2.7192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 472.176554][T27706] netlink: 'syz.6.7197': attribute type 1 has an invalid length. [ 472.245489][T27706] 8021q: adding VLAN 0 to HW filter on device bond9 [ 472.679159][T27718] netlink: 277 bytes leftover after parsing attributes in process `syz.6.7201'. [ 472.744447][T27723] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7203'. [ 473.057763][ T28] audit: type=1400 audit(2009.139:5000): avc: denied { firmware_load } for pid=27733 comm="syz.9.7207" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 473.569056][T27753] netlink: 277 bytes leftover after parsing attributes in process `syz.9.7214'. [ 474.504519][T27807] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7238'. [ 474.521235][T27803] vlan3 (unregistering): left allmulticast mode [ 474.538020][T27803] geneve0 (unregistering): left allmulticast mode [ 474.551658][T27803] vlan3 (unregistering): left promiscuous mode [ 474.558367][T27803] geneve0 (unregistering): left promiscuous mode [ 474.568412][T27803] bridge0: port 3(vlan3) entered disabled state [ 474.581223][T27811] netlink: 12 bytes leftover after parsing attributes in process `syz.9.7238'. [ 475.315297][T27864] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7260'. [ 475.367632][T27870] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7260'. [ 475.384372][T27849] netlink: 277 bytes leftover after parsing attributes in process `syz.1.7253'. [ 475.404989][T27870] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7260'. [ 475.538117][T27882] netlink: 'syz.6.7263': attribute type 10 has an invalid length. [ 475.901286][T27917] netlink: 56 bytes leftover after parsing attributes in process `syz.1.7268'. [ 476.327372][T27943] loop2: detected capacity change from 0 to 512 [ 476.349388][T27943] ext4: block size(32768) > page size(4096) is only supported with CONFIG_TRANSPARENT_HUGEPAGE [ 476.363531][T27943] EXT4-fs (loop2): bad block size 32768 [ 477.795935][ T28] audit: type=1400 audit(2013.879:5001): avc: denied { write } for pid=28027 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.837918][ T28] audit: type=1400 audit(2013.899:5002): avc: denied { write } for pid=28039 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.940232][T28050] __nla_validate_parse: 1 callbacks suppressed [ 477.940248][T28050] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7300'. [ 477.957072][T28050] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7300'. [ 478.064159][T28057] SELinux: failed to load policy [ 478.191173][T28081] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7310'. [ 478.235049][T28081] team1: entered promiscuous mode [ 478.252209][T28081] team1: entered allmulticast mode [ 478.268865][T28081] 8021q: adding VLAN 0 to HW filter on device team1 [ 478.399588][ T28] audit: type=1400 audit(2014.479:5003): avc: denied { write } for pid=28096 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.444614][ T28] audit: type=1400 audit(2014.529:5004): avc: denied { write } for pid=28111 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 480.145905][ T28] audit: type=1400 audit(2016.229:5005): avc: denied { write } for pid=28180 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 480.228177][ T28] audit: type=1400 audit(2016.309:5006): avc: denied { write } for pid=28202 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 480.596500][T28231] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7360'. [ 480.630951][T28231] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.638218][T28231] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.659120][T28231] netlink: 76 bytes leftover after parsing attributes in process `syz.2.7360'. [ 480.671519][T28231] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.678635][T28231] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.686073][T28231] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.693145][T28231] bridge0: port 1(bridge_slave_0) entered forwarding state [ 480.714766][T28231] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7360'. [ 480.746753][T28231] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.752475][ T28] audit: type=1400 audit(2016.829:5007): avc: denied { write } for pid=28222 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 480.753921][T28231] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.823231][ T28] audit: type=1400 audit(2016.889:5008): avc: denied { write } for pid=28248 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 480.980804][T28243] netlink: 277 bytes leftover after parsing attributes in process `syz.3.7362'. [ 481.335695][ T28] audit: type=1400 audit(2017.419:5009): avc: denied { ioctl } for pid=28278 comm="syz.2.7375" path="socket:[80986]" dev="sockfs" ino=80986 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 481.617758][T28297] netlink: 52 bytes leftover after parsing attributes in process `syz.3.7382'. [ 481.626977][T28297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7382'. [ 482.943412][T28364] netlink: 'syz.2.7404': attribute type 4 has an invalid length. [ 483.080202][T28378] tipc: Started in network mode [ 483.101221][T28378] tipc: Node identity 1aaf975493a1, cluster identity 4711 [ 483.132951][T28378] tipc: Enabled bearer , priority 0 [ 483.251640][T28389] syzkaller0: entered promiscuous mode [ 483.268821][T28389] syzkaller0: entered allmulticast mode [ 483.286694][T28389] tipc: Resetting bearer [ 483.971072][T28375] tipc: Resetting bearer [ 484.015195][T28375] tipc: Disabling bearer [ 484.165012][T28462] netlink: 'syz.1.7417': attribute type 5 has an invalid length. [ 484.189191][T28462] netlink: 'syz.1.7417': attribute type 5 has an invalid length. [ 484.667358][T28486] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7428'. [ 484.829135][T28489] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7429'. [ 485.082367][T28497] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7432'. [ 485.807212][T28512] netlink: 'syz.1.7438': attribute type 4 has an invalid length. [ 485.922905][T28531] netlink: 96 bytes leftover after parsing attributes in process `syz.6.7444'. [ 486.020478][T28540] bond10: entered promiscuous mode [ 486.033567][T28540] ip6gre4: entered promiscuous mode [ 486.040403][T28540] ip6gre4: entered allmulticast mode [ 486.046178][T28540] bond10: (slave ip6gre4): The slave device specified does not support setting the MAC address [ 486.057948][T28540] bond10: (slave ip6gre4): Error -95 calling set_mac_address [ 486.861665][T28579] batadv_slave_0: entered promiscuous mode [ 486.880485][T28579] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7462'. [ 486.902812][T28579] batadv_slave_0 (unregistering): left promiscuous mode [ 486.977768][ T28] audit: type=1404 audit(2147486435.053:5010): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 487.028486][ T28] audit: type=1400 audit(2147486435.103:5011): avc: denied { read } for pid=28583 comm="syz.2.7465" dev="nsfs" ino=4026533559 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 487.141596][ T28] audit: type=1400 audit(2147486435.213:5012): avc: denied { create } for pid=28587 comm="syz.6.7466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 487.167271][ T28] audit: type=1400 audit(2147486435.243:5013): avc: denied { prog_load } for pid=28590 comm="syz.9.7467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 487.169382][T28591] netlink: 'syz.1.7469': attribute type 4 has an invalid length. [ 487.186935][ T28] audit: type=1400 audit(2147486435.243:5014): avc: denied { create } for pid=28589 comm="syz.1.7469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 487.214042][T28591] netlink: 'syz.1.7469': attribute type 4 has an invalid length. [ 487.216889][ T28] audit: type=1400 audit(2147486435.243:5015): avc: denied { create } for pid=28589 comm="syz.1.7469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 487.243431][ T28] audit: type=1400 audit(2147486435.243:5016): avc: denied { create } for pid=28589 comm="syz.1.7469" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 487.263368][ T28] audit: type=1400 audit(2147486435.273:5017): avc: denied { create } for pid=28587 comm="syz.6.7466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 487.284745][ T28] audit: type=1400 audit(2147486435.303:5018): avc: denied { allowed } for pid=28590 comm="syz.9.7467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 487.332960][ T28] audit: type=1400 audit(2147486435.303:5019): avc: denied { create } for pid=28590 comm="syz.9.7467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 487.505278][T28626] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7485'. [ 487.525017][T28626] 8021q: adding VLAN 0 to HW filter on device bond10 [ 487.574844][T28626] 8021q: adding VLAN 0 to HW filter on device bond10 [ 487.606272][T28626] bond10: (slave vti0): The slave device specified does not support setting the MAC address [ 487.627867][T28626] bond10: (slave vti0): Error -95 calling set_mac_address [ 487.670420][T28643] netlink: 4 bytes leftover after parsing attributes in process `syz.9.7493'. [ 487.697680][T28638] veth21: entered promiscuous mode [ 487.709855][T28638] bond10: (slave veth21): Error -99 calling set_mac_address [ 487.720242][T28645] netlink: 52 bytes leftover after parsing attributes in process `syz.2.7492'. [ 487.729368][T28645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7492'. [ 487.810906][T28658] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7499'. [ 487.825558][T28658] xfrm2: entered promiscuous mode [ 487.830622][T28658] xfrm2: entered allmulticast mode [ 487.836431][T28660] netem: change failed [ 488.801428][T28706] netlink: 'syz.9.7514': attribute type 1 has an invalid length. [ 488.820726][T28706] bond8: entered promiscuous mode [ 488.826156][T28706] 8021q: adding VLAN 0 to HW filter on device bond8 [ 488.845812][T28706] bond8: (slave bridge7): making interface the new active one [ 488.853470][T28706] bridge7: entered promiscuous mode [ 488.860617][T28706] bond8: (slave bridge7): Enslaving as an active interface with an up link [ 489.221596][T28760] netlink: 'syz.1.7541': attribute type 1 has an invalid length. [ 489.293389][T28760] 8021q: adding VLAN 0 to HW filter on device bond12 [ 489.304502][T28760] bond11: (slave bond12): making interface the new active one [ 489.313119][T28760] bond11: (slave bond12): Enslaving as an active interface with an up link [ 489.337475][T28770] bond11: (slave gretap2): Enslaving as a backup interface with an up link [ 489.350596][T28760] 8021q: adding VLAN 0 to HW filter on device bond11 [ 489.654132][T28809] 8021q: adding VLAN 0 to HW filter on device bond0 [ 489.666324][T28809] team0: Port device bond0 added [ 489.687031][T28811] __nla_validate_parse: 4 callbacks suppressed [ 489.687051][T28811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7563'. [ 490.082379][T28831] netlink: 830 bytes leftover after parsing attributes in process `syz.3.7570'. [ 490.138646][T28816] ================================================================== [ 490.146778][T28816] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 490.155392][T28816] [ 490.157712][T28816] write to 0xffff8881055082e0 of 8 bytes by task 28815 on cpu 1: [ 490.165440][T28816] shmem_file_splice_read+0x40e/0x5a0 [ 490.170854][T28816] splice_direct_to_actor+0x26e/0x670 [ 490.176254][T28816] do_splice_direct+0x119/0x1a0 [ 490.181141][T28816] do_sendfile+0x382/0x650 [ 490.185573][T28816] __x64_sys_sendfile64+0x105/0x150 [ 490.190788][T28816] x64_sys_call+0x2dc4/0x3020 [ 490.195481][T28816] do_syscall_64+0x12c/0x3b0 [ 490.200101][T28816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.206015][T28816] [ 490.208347][T28816] write to 0xffff8881055082e0 of 8 bytes by task 28816 on cpu 0: [ 490.216157][T28816] shmem_file_splice_read+0x40e/0x5a0 [ 490.221558][T28816] splice_direct_to_actor+0x26e/0x670 [ 490.226962][T28816] do_splice_direct+0x119/0x1a0 [ 490.231825][T28816] do_sendfile+0x382/0x650 [ 490.236249][T28816] __x64_sys_sendfile64+0x105/0x150 [ 490.241445][T28816] x64_sys_call+0x2dc4/0x3020 [ 490.246123][T28816] do_syscall_64+0x12c/0x3b0 [ 490.250724][T28816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.256622][T28816] [ 490.258940][T28816] value changed: 0x0000000000004a9b -> 0x0000000000004aa1 [ 490.266036][T28816] [ 490.268353][T28816] Reported by Kernel Concurrency Sanitizer on: [ 490.274501][T28816] CPU: 0 UID: 0 PID: 28816 Comm: syz.9.7564 Tainted: G W syzkaller #0 PREEMPT(full) [ 490.285521][T28816] Tainted: [W]=WARN [ 490.289315][T28816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 490.299365][T28816] ==================================================================