last executing test programs: 24.236540795s ago: executing program 2: r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r1, &(0x7f0000000140), 0x10) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000100)=[{}], 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xe71c}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 24.222352067s ago: executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) chroot(&(0x7f0000000180)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000d80)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1546010001800000240012800b0001006d6163736563000014000280050006001f"], 0x54}}, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x9) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="e06a00bc33dc61c1fb6a58b327cfac9368107bf60c9a17171fbf5e4ea04bf24cce23c2acd14c6417938f941440618dbdcd5504dc193fe3a963fdbf7d04986fbde202bc7b693cee1a092795276b71342c3d700ee3b31e344047", @ANYRES16, @ANYBLOB="010000000000000000000500000004000180"], 0x18}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x20000040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) r2 = syz_io_uring_setup(0x1114, &(0x7f0000000400), &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0}) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) 24.085253618s ago: executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x10e, 0x9, 0x0, 0x20000000) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8052, &(0x7f0000000000), 0x7, 0x4c6, &(0x7f0000000100)="$eJzs3EFsFFUfAPD/bFtaoHzsx8eHgqiLaGw0tlBQOJgYjCYeNDHiQY9NWwhSqKE1EUJkSQweDYl349GrB6/qzXgy8YpHE0NCDBfA05jZnW23292l3W670v5+ybLvzbzZN2/fvDdv3mMbwJZVyv5JIoYj4lZE7I6IQmOCUvXt/t2rkw/uXp2Mcpqe/ivJDot7WTyX5O8788hIIaLwebK4o87c5SvnJ2Zmpi/l8bH5Cx+PzV2+8tK5CxNnp89OXxw/efL4saMnXhl/efWFapJfVq57Bz6bPbj/rQ9vvjPZX9s+lL/Xl6NbSlFqdioVz3U7sx7bVRdO+tulfG39T4YVy67/rLoGKu1/d/RF28oDNpE0TdPB1rvLaaPry7YAj6wken0GQG/UbvTZ82/t1WwgsG19hh89d+dU9QEoK/f9/BXxdGVjbR5koOH5tptKEfFB+e+vs1es0zwEAEC9H0/VRoIN479ixL66dP/J11CKEfHfiNgTEf+LiL0R8f+opn0sIh5v+Py+iEjb5F9qiC8f/xRur62E7WXjv1fzta3F8V/Ur4IV+/LYrojagHn6SP6djMTA4JlzM9NH2+Tx0xu/fdlqX/34L3tl+dfGgvl53O5vmKCbmpif6LjADe5cjzjQ31j+pD8iWVgJSCJif0QcWMXnFuvC51749uBCZGBpuoeXvyJtuo7WhaWK9JuI56v1X44l9b+YY9J+fXJsKGamj4xlV8GRpnn88uuNd1vl/9Dyf/9H4yFvnvjhdN6y1i6r/x1113/U1m8Xy19MIpKF9dq51edx4/cvWj7TdHr9b0ver4Rrz6WfTszPXzoasS15e/n28cVja/HsPcrV8o8cbt7+9+THZN/EExGRXcRPRsRTUX1CLEV67VBEPBMRh9uU/+fXn/2o8/Kvr6z8U037vyX1v7he3yqQlKupm+zqO3/o1oMWncfK6v94JTSSb2ne/yVLuog2Z7oksNbvDwAAAB4FhYgYrptLGo5CYXS0Oge0N3YUZmbn5l88M/vJxanqbwSKMVCozXRV54MHktr8Z7EuPt4QP5bPG3/Vt70SH52cnZnqacmBnZU2nxRGF/qCavvP/NmdKWbg38xPfmDrelj733dzg04E2HDu/7B11bX/coskZf9TBjanldz/zQXC5tSs/V/r4Bjg0ZJqy7Clrab96ytgc+mP9xbChZ6eCbDR3NNhS1rRj+Q7DqSDzXcNxfLEMdT+A/uis9PY3iSvngSykVVPct/eyVG1v6bQMk0UVveBg9GdOj2z9q/l7L6uX/xpvj7W7Rr8bkPaabNA+35jfHj9+iQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBu+icAAP//KPXcbw==") socket$kcm(0x10, 0x0, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./file5\x00', 0x61c0, 0x700) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file5\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0x401870cc, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0xf6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @dev}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, 0x0, 0x0, 0x4, 0x0, 0x0, 0x200280}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000001a0000002000018008000100", @ANYRES32=r2, @ANYBLOB="140002"], 0x34}}, 0x0) syz_io_uring_setup(0x7abb, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000180)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/4, 0x4}], 0x27}) io_uring_enter(0xffffffffffffffff, 0x567, 0x0, 0x0, 0x0, 0x0) 24.000746701s ago: executing program 2: r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f00000002c0)='\x00\x00\x00\x00', 0x4}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x26e1, 0x0) write$tun(r1, &(0x7f0000000480)={@void, @val={0x7, 0x1, 0x0, 0xbbc1, 0x6, 0x4}, @ipv4=@udp={{0x15, 0x4, 0x2, 0x3, 0x133, 0x68, 0x0, 0x3, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x12}, @multicast1, {[@ssrr={0x89, 0x13, 0x57, [@loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1]}, @timestamp_prespec={0x44, 0x2c, 0x45, 0x3, 0x6, [{@multicast2, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@loopback, 0x1}, {@empty, 0x8001}, {@broadcast, 0x7ff}]}]}}, {0x4e24, 0x4e24, 0xdf, 0x0, @gue={{0x1, 0x0, 0x1, 0x81, 0x100, @void}, "ab576516de71c21ba7f0b146bb27b3e7741ae8c3cb394761a379a50ae723621e4a3d6b78f7be53682d172570fc7db92554bbd7459a2fe27133245d58e8b34e7effa306fe300cae8763ec77b91e699262ae2b4e2a37a54e13c001af5680ab5b7a3b4a0d77e1962eeca98316e0edb2518e21d7d8b16890fac18aedba8c15a599a0e62e233a9204bde2320ca8f8d4f9210683fde4b9da44ca99fd586c663522489153ff5b86cbed56fa247aec39e886fd8e391911636f236dda1445e9c811585f49b4e46cca626cc4e84327486f5c3c32ec0fc523"}}}}, 0x13d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) close(0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in=@multicast2, @in6=@private1}, {@in, 0x0, 0x6c}, @in6=@private0}, 0x0, 0xbc63}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0x104}}, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$tipc(0x1e, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x0, 0x0, 0x0, 0x401}, 0x48) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r4, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x10, "0062ba7d82000000000000000000f7ffffff00"}) syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='flush,nocase,discard,dots,fmask=00000000000000000000177,dots,nodots,nodots,dots,\x00'], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") openat$incfs(0xffffffffffffff9c, &(0x7f0000000100)='.log\x00', 0x8440, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000240)={'syztnl2\x00', &(0x7f0000000300)={'ip6gre0\x00', 0x0, 0x4, 0x40, 0x0, 0x9, 0x68, @remote, @ipv4={'\x00', '\xff\xff', @empty}, 0x20, 0x40, 0x7, 0x5}}) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f0000000400)={0x0, 0x0, 0x7f, 0xad9, @vifc_lcl_ifindex=r5, @loopback}, 0x10) r6 = syz_open_pts(r4, 0x0) r7 = dup3(r6, r4, 0x0) readv(r7, &(0x7f0000000440)=[{&(0x7f00000024c0)=""/4082, 0xff2}], 0x1) r8 = syz_open_dev$loop(&(0x7f0000000200), 0x4, 0x0) r9 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x602, 0x0) writev(r9, &(0x7f0000000440)=[{&(0x7f0000000040)="93d90400000300", 0x7}, {&(0x7f0000000140)="13", 0x1}], 0x2) ioctl$BLKPG(r8, 0x1269, &(0x7f00000000c0)={0x1, 0x0, 0x98, &(0x7f0000000140)={0x0, 0x200000000, 0x40007}}) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0xb2321, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) 23.146819682s ago: executing program 2: socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) chroot(&(0x7f0000000180)='./file0\x00') r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000d80)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1546010001800000240012800b0001006d6163736563000014000280050006001f"], 0x54}}, 0x0) umount2(&(0x7f0000000280)='./file0\x00', 0x9) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="e06a00bc33dc61c1fb6a58b327cfac9368107bf60c9a17171fbf5e4ea04bf24cce23c2acd14c6417938f941440618dbdcd5504dc193fe3a963fdbf7d04986fbde202bc7b693cee1a092795276b71342c3d700ee3b31e344047", @ANYRES16, @ANYBLOB="010000000000000000000500000004000180"], 0x18}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x20000040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) r2 = syz_io_uring_setup(0x1114, &(0x7f0000000400), &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0}) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) 22.975902378s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0xd6, 0x9, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r1, &(0x7f0000001300), 0x0}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={r0, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x1, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0], 0x0, 0x4d, &(0x7f0000000580)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000005c0), &(0x7f0000000600), 0x8, 0x40, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) ptrace(0x10, 0x1) r4 = inotify_init1(0x0) fcntl$setown(r4, 0x8, 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0xfffffd66, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101804bc9555e1affd5020000000900010001797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000000009000300737975320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000070a0101"], 0x20}}, 0x0) fcntl$getownex(r4, 0x10, &(0x7f0000000380)={0x0, 0x0}) ptrace$getenv(0x3, r6, 0xd8, &(0x7f0000000000)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.dequeue\x00', 0x26e1, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000007c0)={0x1, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x1a, 0x1f, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9d}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x1}, @map_fd={0x18, 0x4, 0x1, 0x0, r2}, @map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffff7fff}, @exit], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='GPL\x00', 0xff, 0x7d, &(0x7f0000000180)=""/125, 0x40f00, 0x13, '\x00', r3, 0x24, r7, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r8, 0xffffffffffffffff, 0x1, &(0x7f00000008c0), &(0x7f0000000900)=[{0x2, 0x1, 0x1, 0x2}], 0x10, 0x3}, 0x90) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000050000000000000000000000009500003a1afb8937"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x90) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000004e000100877d1c655b436e4e42b5"], 0x1c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000140)='kmem_cache_free\x00', r9}, 0x10) r11 = openat$autofs(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.sched_load_balance\x00', 0x2, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r11, 0xc018937e, &(0x7f0000000240)={{0x1, 0x1, 0x5f, 0xffffffffffffffff, {0x2}}, './file0\x00'}) 17.956348867s ago: executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000080)='\x9dF\xd8\b\xb3~u\xa5\"\xdc\xfdq\xf6c\r;\xfcO\x8c=\x81\xb1\x8aSpA\xd4\x98\x85D\x89>N\x8ar\x17O\x0fKR\xe2{mn\xcc\xbf2\xc0\xa7\x14\xd0\xd4\xfe/\x9e\xee\xe7\xdbE\xe9\t\x83\xdeNX\xec\xe66\x1b\x97\xe7\xe6\x97\xf9\xb3\xf6\x00\x00\xb5$\xee\x84\x1cn,B\xd5?\xe5E:+Zm\x1d\xb4\xb8', 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x9, 0x0, 0x0, @link_id}, 0x20) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000000200)={{0x0, 0x1, 0x9, 0x2, 0x4}, 0x1, 0x41ee}) connect(r3, &(0x7f0000000180)=@generic={0x16, "8ccee64c767922df1c7c4dd723233039a3e00a6cf71943c3b2a1a6ad347fa11d52ddf902590d8a5efb67382a32379c476b8a496e75e3c70d05e032f33ae488df6b5e1d3e40296187368e0a18fdb1ccd5241b9166078291cd7595dad757ba8af5cc41acb28793da92533d9ee6a76f19b2ddf2bbf696c950900817c7752b75"}, 0x80) splice(r2, 0x0, r1, &(0x7f0000000140)=0x8f00000000000000, 0x4, 0x0) sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{&(0x7f0000000480)={0xa, 0x4e20, 0x0, @local}, 0x1c, 0x0}}], 0x1, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) r6 = gettid() r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) read(r7, &(0x7f0000000440)=""/247, 0x26) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x840000088}, 0x0) r8 = getpid() sched_setscheduler(r8, 0x2, &(0x7f0000000200)=0x4) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r7, 0x4040534e, &(0x7f0000000080)={0x1, @time}) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r7, 0xc0105303, &(0x7f0000000100)={{}, {0xbf}}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0xc08c5335, &(0x7f0000000180)) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r10, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) r11 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r11) getsockname$packet(r11, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$packet(r9, &(0x7f0000000400)={0x10, 0x0, r12, 0x1, 0x0, 0x6, @local}, 0x14) close(r9) tkill(r6, 0x7) setreuid(0x0, r5) quotactl$Q_GETFMT(0xffffffff80000402, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, r5, &(0x7f0000000100)) 17.728455793s ago: executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) migrate_pages(0x0, 0x184, 0x0, &(0x7f0000000680)=0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@ifindex, 0xffffffffffffffff, 0x35, 0x0, 0x0, @link_id}, 0x20) r4 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, r2}, 0x14) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r6 = gettid() tkill(r6, 0x7) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x5, 0x0, 0xfc, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, @perf_bp={0x0}, 0x2100, 0x8000000000000000, 0x8, 0x8}, r6, 0x3, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4c, 0x0) 17.691523868s ago: executing program 4: getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) r1 = dup(r0) ioctl$TIOCL_SETSEL(r1, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x0, 0x0, 0x0, 0x100}}) 17.674323801s ago: executing program 4: socket$inet6_sctp(0xa, 0x5, 0x84) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x2000000, 0x0, 0x1, 0x0, &(0x7f0000000000)) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), &(0x7f0000000200)=@v2, 0x14, 0x0) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], 0x0, 0x2) 17.626500688s ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000002000000b5"], &(0x7f00000000c0)='syzkaller\x00', 0xaa7}, 0x90) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'geneve0\x00'}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}, @IFLA_XFRM_LINK={0x8, 0x1, 0x3}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) 17.608025201s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0x2000031c, &(0x7f0000000200)=ANY=[@ANYRESDEC=0x0], 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = perf_event_open(&(0x7f0000000240)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000020000000058000b4824ca945f64009400ff0325010e", 0x2f}], 0x1) ptrace(0x10, 0x1) r1 = inotify_init1(0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = syz_open_dev$sg(&(0x7f0000000040), 0x0, 0x2) ioctl$SCSI_IOCTL_SEND_COMMAND(r3, 0x5380, 0x0) fcntl$setown(r1, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000380)) ptrace$getenv(0xd, 0x0, 0x0, &(0x7f0000000000)) iopl(0x3) prctl$PR_SET_SECCOMP(0x35, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfffffffffffffe2a) getsockopt(r2, 0x1ff, 0x2, &(0x7f0000000700)=""/65, &(0x7f0000000780)=0x41) getgroups(0x0, 0x0) fsmount(0xffffffffffffffff, 0x1, 0x1) request_key(&(0x7f0000000040)='user\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000300)='\xad.+\x00', 0xfffffffffffffffc) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f00000007c0)) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_read_part_table(0x5ec, &(0x7f0000000e00)="$eJzs0z9oW0ccB/CTbVltMmTJlMVJhwxtl4SMFSUNkpKQgFDsJXRoICGEaFIgoFBRQ1JINCREQ8iYJRi0+A8dLGvwZGODZ2M8uBg8eGmxKRgMxa/IPreqqSltTXHg84HT6X73fe93N7zAB60n/JwkH3f+JZm/TiR/Xn7UvRhq5vLXzhYvlwZDSO0mP/t+8IcQwpe726k4uqzELu/fnWi/2Lyabi7f2jrfP1PvifvDcZwcaQ111pmQ7B/gl5GuU3M8jGZnTz19Vim8rGYfLBVqa88XF26ObeRKrRv1xvj19JW7MTcX5744PwrV8CR5GO6EciiHe6FyRP3fNlcv7JwpNCfvf7Gdb7+avhhzxYMP9v/Lhn/T//G517cbtdTwxOk3l6pT86X13r1c+ZCvCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA42U0O3vq6bNK4WU1+2CpUFt7vrhwc2wjV2rdqDfGr6ev3I25ud3fgdAX149CNTwJD8OdUA6pcC9UOsXvDr791yQ5pG9/V/+Brvrb5uqFnTOF5uT9zHa+/Wr6YqwX9wMD//3O3Q7e//G517cbta8+nzj95lJ1ar603vvHeXuPtjUAAAAAAAAAAAAAAAAAAAD8Lpe/drZ4uTQYQip8HfrCpz9929OpJ5m9/VTMfRLnlVh//+5E+8Xm1XRz+dbW+W9m6j/G+nAcJ0daQ//7ZfjHfgsAAP//GLCWog==") r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="240000007600090700000000000000120702000027f74a2b96e8347191dd42496a9a301bf6a74813016c3da069c9134b7968daf636298dd8598b76c072cdb5b579f8964d9f52630788914b1563e770dea7c08f68699c1019f499b57d618fc377952a19d33fa056a3d342856681c2234fd41e3ca290231eadb7be559ef621ae51549d045e0d354b3d6c1fe114c7cadc2c3aa13fc358f0244410c46551de73dd11cde4fd771c78622833e17e9136d0c7ec13119fbbc7a242a157eafd", @ANYRES32=0x0, @ANYBLOB="0c000d800800030000000000"], 0x24}, 0x1, 0x5502000000000000}, 0x40090) openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) fstat(r2, &(0x7f0000000180)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) 8.251187695s ago: executing program 3: epoll_create1(0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE2(0xffffffffffffffff, 0xe, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_read_part_table(0x103c, &(0x7f0000001040)="$eJzszjEOQUEYhdE7iEwlswRqq/i1apVNWILEWjQ2p1BLRK+W95Jz6pubL8zS8X15JdftLrdaJD1pPUmN3A/7bEZy/s5qmWet00ay+vFyevy/HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACm5xMAAP//1hgIrg==") mount$9p_tcp(0x0, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580), 0x0, &(0x7f0000002880)=ANY=[@ANYBLOB]) 8.125680505s ago: executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x27, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x20}, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000002380)='./file0\x00', 0x800000, &(0x7f0000000280)=ANY=[@ANYBLOB="7362736563746f723d3078303830303030303030303030303030322c696f636861727365743d69736f383835392d35227362736563746f723d3078303030303030303030303030303030322c73657373696f6e3d3078303030303030303030303030303034652c6d6f64653d3078303030303030303030303030303030312c6e6f636b2c636865636b3d7374726963742c6d6f64653d3078303030303030303030303030303130312c6e6f726f636b2c2c6357f88c18a00e590311a8cb4f72e5786143c5098495f43ad671040000"], 0x0, 0x9a9, &(0x7f0000001900)="$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") mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket(0x11, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) epoll_create1(0x0) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) bind$packet(r3, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @dev}, 0x14) setsockopt$packet_rx_ring(r3, 0x107, 0xd, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_getaddr={0x20, 0x16, 0x1, 0x0, 0x0, {}, [@IFA_TARGET_NETNSID={0x8}]}, 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'gre0\x00'}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) r6 = dup(r0) sendmsg$key(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0218000003000000000000000000000001001800"], 0x18}}, 0x0) 8.070543433s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=@ipv4_newaddr={0x38, 0x14, 0x1, 0x70bd29, 0x25dfdbff, {0x2, 0x40, 0x1f, 0xfd, r1}, [@IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_ADDRESS={0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010102}, @IFA_RT_PRIORITY={0x8, 0x9, 0xffff0001}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0xa29548ab0bafe58e) r2 = socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)=ANY=[@ANYBLOB="a800000000010104000000000000000002000000240001801400018008000100e000000108000200ac1e01010c00028005000100000000002400028014000180080001000000000208000200ac1e00010c0002800500010000000000440010801500033f00000006088003400000002b080003400000000808000240000000400800014000000000fb0001400000000708000140000044f10800034000000003080007"], 0xa8}}, 0x0) mremap(&(0x7f0000b08000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f00001e4000/0x2000)=nil) remap_file_pages(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r2, &(0x7f00000000c0)="3f030e00f0e812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) 8.052333666s ago: executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) migrate_pages(0x0, 0x184, 0x0, &(0x7f0000000680)=0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000180)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/ptype\x00') preadv(r4, &(0x7f0000000000)=[{&(0x7f0000000480)=""/187, 0xbb}], 0x1, 0x4c, 0x0) 8.009656213s ago: executing program 3: r0 = eventfd(0x0) r1 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, &(0x7f0000000100)=0x0) r4 = syz_io_uring_setup(0x1868, &(0x7f00000003c0)={0x0, 0x0, 0x8, 0x2}, &(0x7f0000000040), &(0x7f0000000300)) syz_io_uring_submit(r2, r3, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r1, 0x184c, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x804000, &(0x7f0000000200), 0x3, 0x4ae, &(0x7f0000000a00)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f00000002c0)=0x20) statx(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0xffff4a9c0080ffff, &(0x7f0000000240)) r6 = syz_io_uring_setup(0x4169, &(0x7f0000000200)={0x0, 0x0, 0x10100}, &(0x7f0000000480), &(0x7f0000000000)=0x0) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f00000005c0)) io_uring_enter(r4, 0x2711, 0x43d0, 0x4, &(0x7f00000000c0)={[0x7]}, 0x8) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000180)={0x42}, 0x10) sendmsg$tipc(r9, &(0x7f0000000540)={&(0x7f0000000200)=@name={0x1e, 0x3}, 0x10, 0x0}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r9, 0x8983, &(0x7f0000000180)={0x8, 'wlan0\x00', {'dvmrp0\x00'}, 0x800}) syz_io_uring_submit(r8, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xfffffffffffffe54}) io_uring_enter(r6, 0x48e9, 0x0, 0x0, 0x0, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000001100)="02965d1f5ec3de3d", 0x8}], 0x1) 7.974718548s ago: executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SG_IO(r0, 0x2285, &(0x7f00000015c0)={0x53, 0x0, 0x0, 0x0, @scatter={0x0, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) open(0x0, 0x0, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@init_itable}, {@resuid}, {@stripe}]}, 0x3, 0x445, &(0x7f0000000b00)="$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") openat$sndtimer(0xffffffffffffff9c, 0x0, 0x280200) chdir(&(0x7f00000001c0)='./file0\x00') r1 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r1, 0x0, 0x0) 1.384716378s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="f37b273471a6"}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = memfd_secret(0x0) fcntl$setlease(r3, 0x400, 0x1) fremovexattr(r3, &(0x7f0000000400)=@known='system.posix_acl_access\x00') write$cgroup_devices(r2, &(0x7f0000000e80)=ANY=[@ANYBLOB="1e0308004d8c71ef2885634a8270e7113c00000000000000000000000000ac14140182c3343edcd82557dafa577d9b20e48984", @ANYRESOCT], 0xffdd) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @empty}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0x16, 0x0, &(0x7f0000000480)) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18010000000000d00000000080000000850000006d00000095"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000280)='netlink_extack\x00', r5}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r6 = epoll_create1(0x0) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r7, &(0x7f0000000140)) mount$bind(0x0, &(0x7f0000000480)='./file0/../file0\x00', 0x0, 0x86422, 0x0) epoll_pwait2(r6, &(0x7f0000000380)=[{}], 0x1, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_BEACON(r8, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000540)={0x5d0, r9, 0x3d53d6d1ed9228ab, 0x0, 0x0, {{}, {@void, @val={0xc}}}, [@NL80211_ATTR_BEACON_HEAD={0x4e, 0xe, {{{0x0, 0x3}, {}, @device_a, @device_b, @from_mac=@device_b}, 0x0, @random, 0x0, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @val={0x4, 0x6}, @val={0x6, 0x2}, @void, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @void, @void, @val={0x76, 0x6}}}, @NL80211_ATTR_FTM_RESPONDER={0x4}, @NL80211_ATTR_BEACON_HEAD={0x348, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x1}, {0x6}, @broadcast, @device_a, @initial, {0x4, 0x2}}, 0x8, @default, 0x8282, @void, @void, @val={0x3, 0x1, 0xb7}, @void, @val={0x6, 0x2, 0x2}, @void, @val={0x25, 0x3, {0x0, 0xa, 0x8}}, @val={0x2a, 0x1}, @void, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x1, 0x1, 0x0, 0x0, 0x2, 0x58}}, @void, [{0xdd, 0x7e, "e1fdf8305b52e3c5a696b4140ceba62b8851546e83b200580d95dd0fb93bce2d98ae4d89523dda9f5c799392991d287e1cf3620282ca4bca08139526a2386447dc103fed1b2d8dfb4d88627dd3f5d84e3be72728ea27443e5af2da719fbce146d532611bf62641222f392e1149f6455f6224bf16ed9e530ea858b4729fd5"}, {0xdd, 0xb5, "1051260dba2f60d2afd71819a85b823bb0d0169bc7719ade2ee3485b49e423ab399985f1e70bbd75ff0002b360186d047700cbaf384df9c1092a5c61dca5ecbca021de8726d7887c84854f78d70b989e38a5c0d7ad9717a968b0cccaf291c4b65bf56aa3bcf2bd2fb9e07b43e1fe0d6fbee10015b4d360954227de446a4908f890c14b96bfb1c6e86e022e00184322184af4ff49be099d1fff05596c63b0f1b8db7fb974a52714ed878d3db48d0bd981e711c5133b"}, {0xdd, 0xa7, "153ec3f82b41d90c5b930e1675538c8340dfc230fb57b0266922f258585eaefa8473430200a60cd9c32796499f6c03e872814ea3259060537d08bb2cd697421163b8882afe947bfede47b10fa25b296e3aaa808d2cc84ce43a1945750e52f9e1f1b09fcb6d8f4e20ba60fdbc687111dccadac90093a5534a1ff6bda3327cd4c48d50ae040090a74a83061f1bf41dec20734973ebd0d67128d60bb6fca555ae9f882e570599f772"}, {0xdd, 0x99, "1c63b4230d4eaa3b691beac119ffdc76d45d55419467a4451a6a9af22d7ac2091894d99f097700bd95f29fc196062ffa84472055dc8c07a5653de5ab755b56b342d7241a22788a123fc74795a165bfcacd00a4feeb0f88b4347f228569ad4597ee44f3edbeb4f46889423bddd6113f5c9a4d9a761f3219ea3294fa4739ae1e997e453b1e0444ae997f2ea82b2f5d2d31ab494af77999c6813b"}, {0xdd, 0x63, "290fa1065bf80675f4bca5f552a6537cb16f61e0ca7b5a6c643d04614db9f173a45d24283573030aa081436f8395a4bcca3547e24b2500a6cb03b63b7a86e1d97b85ab3aece4e454ac0ef29e9aa54a5ff2cc0999f3bd6f03c645d5e6e848ae323c817a"}, {0xdd, 0x1e, "2b05285d76a047ff611c3222b8422ee3d44e023c32f397b2000d6c529961"}]}}, @NL80211_ATTR_BEACON_HEAD={0x214, 0xe, {{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x40}, @broadcast, @device_b, @from_mac, {0x6}}, 0x7, @default, 0x904, @void, @void, @void, @val={0x4, 0x6, {0x0, 0x31, 0x9, 0x5}}, @void, @val={0x5, 0x3e, {0x6, 0x5d, 0x23, "df9ae30adde7a651705ee501260336c8964cd41120661a97281d5c0afb68ee7de82c890c036ff63fcfe6f0a51dc7914810a29a0d8017808dd1b104"}}, @void, @void, @void, @val={0x2d, 0x1a, {0x2000, 0x0, 0x7, 0x0, {0xdcb, 0x7f, 0x0, 0xb, 0x0, 0x0, 0x1, 0x3, 0x1}, 0x300, 0x0, 0x4}}, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0xfd, 0x6d, 0x22, 0x6}}, [{0xdd, 0x4a, "2700cd485a90695db733bb6675401d793f137c8a6ec69272c6f3720b27732e86c2cc88c9d2eb0a6f9208acabb732a7d9854320cb84bd71c54cb5224a056157d213b0dbee66339a84d0f6"}, {0xdd, 0x7a, "38e5f607577052c8168acf4d7880ffa3d4abe84a4f5c6d6eb65b83594d00f91aa80faa0d84e6d2517285ab295bbe3ec9699dbc91b6ee1909904f5c8c904950b9a7fe5cbcacd6f6b2bf74b51baf6a0ec3bf082776e10b9d55bfc18f51f34051cefeea5f6d386fe30a0519221d15ec35bfb1dd3703027ed677613d"}, {0xdd, 0xae, "b5593b9fd033753264a62b8991aa107159e583cfcedbfe3e21e9e1079082d505d3d903c6353be9eee44cc9e37fbcf559fef65b149f5718b23514c9bb445df721858a30515c4f352c292abefbd769bed366de1fb76f014e8d15b8bc615e4472d360c4a489dbebefd5831c3179e486f29aff512645ebf8bb58a4336de1dce45cd932597213e202f1bc823cffbd50d7cd4f40fb79cdc3d565431afb7a1ef2bd2858c47e5acc4235dcab7d015d72ae71"}]}}]}, 0x5d0}}, 0x0) 1.069779256s ago: executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$FIONREAD(r0, 0x541b, &(0x7f00000002c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x130}}, 0x0) 1.043978731s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c000000100001"], 0x3c}}, 0x0) getpeername$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310300000000000000000800000008000300", @ANYRES32=r2, @ANYBLOB="08000600", @ANYRES32=r4], 0x24}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r5 = socket$qrtr(0x2a, 0x2, 0x0) getsockopt$sock_buf(r5, 0x1, 0x47, 0x0, &(0x7f0000000180)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xad}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r6, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001f00)}}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, &(0x7f0000000140)={0x0, 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r7) r9 = socket$tipc(0x1e, 0x5, 0x0) fdatasync(r9) sendmsg$NLBL_MGMT_C_ADDDEF(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="58010000", @ANYRES16=r8, @ANYBLOB="0100000000000000000002000000080002000500000008000700e000000208000800ac1434002c010100"], 0x158}}, 0x0) 1.025503633s ago: executing program 1: r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000100)="1400000025004f7fb3e4bf80a000080000000000", 0x14) 1.009181196s ago: executing program 1: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x0, &(0x7f0000000200)=0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0x2c, r2, 0xe39, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}]}]}, 0x2c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000540)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_DELOBJ={0x44, 0x14, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELCHAIN={0xa8, 0x5, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_CHAIN_COUNTERS={0x7c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xfff}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x8001}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x81}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x78, 0x16, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_HOOK={0x38, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp0\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}], {0x14}}, 0x18c}, 0x1, 0x0, 0x0, 0x4024842}, 0x104) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00'}) r6 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000200)) r7 = perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7020000f3ffffb0150000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_SET_BPF(r7, 0x40042408, r9) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) 462.986419ms ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000bc0)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000002000000b5"], &(0x7f00000000c0)='syzkaller\x00', 0xaa7}, 0x90) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'geneve0\x00'}) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000001afc180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b703000000090000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) 403.077709ms ago: executing program 0: socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) creat(0x0, 0x0) mkdir(&(0x7f0000002200)='./file0\x00', 0x0) chroot(&(0x7f0000000180)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000d80)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1546010001800000240012800b0001006d6163736563000014000280050006001f"], 0x54}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) sendmsg$L2TP_CMD_SESSION_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="e06a00bc33dc61c1fb6a58b327cfac9368107bf60c9a17171fbf5e4ea04bf24cce23c2acd14c6417938f941440618dbdcd5504dc193fe3a963fdbf7d04986fbde202bc7b693cee1a092795276b71342c3d700ee3b31e344047", @ANYRES16, @ANYBLOB="010000000000000000000500000004000180"], 0x18}}, 0x0) sendmsg$L2TP_CMD_SESSION_MODIFY(0xffffffffffffffff, 0x0, 0x20000040) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) r2 = syz_io_uring_setup(0x1114, &(0x7f0000000400), &(0x7f0000000300)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x0, 0x0, 0x7, 0x0, 0x0}) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) 173.233624ms ago: executing program 0: perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x25, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000001c80)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000000000105000000000000000000000001000085000000000000000001"], 0x0, 0x42}, 0x20) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000010000100000000007c3f0f287e00450a2c345c000000000000000a20000000000a01040000000000000000000000000900010073797a300000000020000000030a010200000000000000000100ffff0900010073797a300000000000060a01040000b862cdab28f9d80ecd48000000000000010000001d0000000000000078000480740001800b00010065787f68647200006400029608000140e2ffff0b08000540000000000800054000000000080001400000000c08000340ffffffff0800034000000000080001400000000d08000640000000020800010000000e00000080400000002205000200890000000900010473797a3000000000140000001100010000000000000000000000000a000000"], 0x108}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x23, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_GET(r3, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8914, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)}) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000700)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) close(r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)={0x3c, 0x0, 0xc11, 0x0, 0x0, {0x5}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x10, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc, 0x3, 0x0, 0x1, [{0x4}, {0x4, 0x2}]}]}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000380), r4) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfffffd9d) sendfile(r1, 0xffffffffffffffff, 0x0, 0x8000002b) 153.714827ms ago: executing program 0: socket$inet_udplite(0x2, 0x2, 0x88) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) close(r0) socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000040), 0x10) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x802c550a, &(0x7f0000000000)=ANY=[@ANYBLOB="02000201100081006000000002000020d3"]) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x9003000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x2, 0x3, 0x1e0, 0x90, 0x178, 0x178, 0x90, 0x178, 0x148, 0x230, 0x230, 0x148, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x90}, @unspec=@NOTRACK={0x20}}, {{@ip={@empty, @remote, 0xffffff00, 0xffffff00, 'veth0_to_bridge\x00', 'macvlan1\x00', {0x731e43dc5ba928e9}, {}, 0x7f, 0x2, 0x11}, 0x0, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x240) 51.835103ms ago: executing program 0: perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r0, 0x4008240b, &(0x7f0000000040)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000300)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@journal_dev={'journal_dev', 0x3d, 0x7ffc}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@usrquota}, {@nombcache}, {@stripe={'stripe', 0x3d, 0x8}}, {@usrjquota}]}, 0x3, 0x462, &(0x7f00000004c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) unlinkat(r1, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='attr/fscreate\x00') writev(r3, &(0x7f0000000580)=[{&(0x7f0000000440)="8e", 0x1}], 0x1) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e0, &(0x7f0000000c40)="a4d16240337c841f630959479caef5dbc07e8f37dc824e22740e08084dc4b884626efb04848bed21d72d3c4f6433bc66c68fea9b802198ca95a0bf66c72bbe01d89ea5d5ac560669fb4a919a6f045d50fb34b99705c2935629d82a267eec67e1e7b15c453b5041d754bbbc655be65fec202906aa026e93036b9628f9e4fb5e1d80602e") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000640)=ANY=[@ANYRESDEC=r3, @ANYRESHEX, @ANYRES64=r2], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @broadcast}, 0x10) r4 = syz_io_uring_setup(0x353, &(0x7f00000000c0), 0x0, &(0x7f0000ffb000)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0x19, 0x20000000, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fremovexattr(r5, &(0x7f00000005c0)=ANY=[@ANYBLOB]) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, r6, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x89f0, 0x0) socket$packet(0x11, 0x0, 0x300) bind$packet(0xffffffffffffffff, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) socket(0x11, 0x800000003, 0x0) socket(0x6, 0x3, 0x2000002) 39.343105ms ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioperm(0x0, 0x4, 0x2) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x1a) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x3c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe0}}, 0x0) 0s ago: executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1f, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x2, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) kernel console output (not intermixed with test programs): sabled state [ 326.720392][T17675] loop4: detected capacity change from 0 to 8192 [ 326.729879][T17677] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17677 comm=syz-executor.3 [ 326.826385][ T40] bridge0 (unregistering): left promiscuous mode [ 326.866018][T17684] loop3: detected capacity change from 0 to 8192 [ 326.896461][T17684] loop3: p1 p4 [ 326.900142][T17684] loop3: p1 size 8388608 extends beyond EOD, truncated [ 326.907595][T17684] loop3: p4 start 4278190080 is beyond EOD, truncated [ 326.928694][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.938813][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.948866][ T40] bond0 (unregistering): Released all slaves [ 326.957746][ T40] bond1 (unregistering): Released all slaves [ 326.986069][T17693] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 327.030305][T17703] usb usb8: usbfs: process 17703 (syz-executor.3) did not claim interface 2 before use [ 327.051008][T17705] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 327.059195][T17705] netlink: 16098 bytes leftover after parsing attributes in process `syz-executor.2'. [ 327.071761][ T40] hsr_slave_0: left promiscuous mode [ 327.080660][ T40] hsr_slave_1: left promiscuous mode [ 327.089515][ T29] audit: type=1400 audit(1717258639.018:33148): avc: denied { create } for pid=17708 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 327.110684][ T29] audit: type=1400 audit(1717258639.048:33149): avc: denied { bind } for pid=17708 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 327.110707][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.130427][ T29] audit: type=1400 audit(1717258639.048:33150): avc: denied { write } for pid=17708 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 327.138056][T17707] loop3: detected capacity change from 0 to 8192 [ 327.157701][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.172927][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.180413][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.190477][ T40] veth1_macvtap: left promiscuous mode [ 327.196019][ T40] veth0_macvtap: left promiscuous mode [ 327.198365][T17711] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=17711 comm=syz-executor.2 [ 327.201586][ T40] veth1_vlan: left promiscuous mode [ 327.219568][ T40] veth0_vlan: left promiscuous mode [ 327.330826][ T40] team0 (unregistering): Port device team_slave_1 removed [ 327.341599][ T40] team0 (unregistering): Port device team_slave_0 removed [ 327.380949][T17722] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 327.436394][T17728] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 327.444580][T17728] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 327.458706][T17731] loop2: detected capacity change from 0 to 512 [ 327.500009][T17731] autofs4:pid:17731:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(2.1), cmd(0xc0189374) [ 327.513577][T17731] autofs4:pid:17731:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 327.588709][T17600] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 327.604912][T17600] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 327.625177][T17600] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 327.635210][T17600] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 327.644995][T17751] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=10520 sclass=netlink_route_socket pid=17751 comm=syz-executor.3 [ 327.673303][T17751] loop3: detected capacity change from 0 to 512 [ 327.708162][T17751] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.721412][T17755] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 327.723472][T17751] ext4 filesystem being mounted at /root/syzkaller-testdir3756584083/syzkaller.HEiiKI/22/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.729631][T17755] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 327.758380][T17757] loop4: detected capacity change from 0 to 512 [ 327.774440][T17757] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 327.785090][T17600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.795521][T17757] EXT4-fs (loop4): 1 truncate cleaned up [ 327.801732][T17757] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 327.802095][T17751] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz-executor.3: corrupted inode contents [ 327.828629][T17751] EXT4-fs error (device loop3): ext4_dirty_inode:5935: inode #2: comm syz-executor.3: mark_inode_dirty error [ 327.837748][T17600] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.848308][T17751] EXT4-fs error (device loop3): ext4_do_update_inode:5075: inode #2: comm syz-executor.3: corrupted inode contents [ 327.850159][T17757] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.872090][T17751] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz-executor.3: mark_inode_dirty error [ 327.894553][ T29] audit: type=1400 audit(1717258639.818:33151): avc: denied { execute_no_trans } for pid=17750 comm="syz-executor.3" path="/root/syzkaller-testdir3756584083/syzkaller.HEiiKI/22/file0/file0" dev="loop3" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 327.933673][T17384] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.934459][T17772] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 327.949871][T17772] IPv6: NLM_F_CREATE should be set when creating new route [ 327.957913][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.964952][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.983685][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.990765][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.114456][T17600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.187940][T17801] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 328.189325][T17600] veth0_vlan: entered promiscuous mode [ 328.196119][T17801] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 328.206133][T17600] veth1_vlan: entered promiscuous mode [ 328.243937][T17600] veth0_macvtap: entered promiscuous mode [ 328.252057][T17600] veth1_macvtap: entered promiscuous mode [ 328.265878][T17600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.276542][T17600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.286416][T17600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.296877][T17600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.299213][ T29] audit: type=1400 audit(1717258640.228:33152): avc: denied { mount } for pid=17813 comm="syz-executor.4" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 328.307010][T17600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.336279][ T29] audit: type=1400 audit(1717258640.268:33153): avc: denied { write } for pid=17813 comm="syz-executor.4" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 328.339769][T17600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.361636][ T29] audit: type=1400 audit(1717258640.268:33154): avc: denied { add_name } for pid=17813 comm="syz-executor.4" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 328.371498][T17600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.392601][ T29] audit: type=1400 audit(1717258640.268:33155): avc: denied { associate } for pid=17813 comm="syz-executor.4" name="file1" scontext=root:object_r:unlabeled_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 328.403031][T17600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.435247][T17600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.445688][T17600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.449292][ T29] audit: type=1400 audit(1717258640.378:33156): avc: denied { unmount } for pid=17490 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 328.455513][T17600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.486751][T17600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.499167][T17600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.507370][T17600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.517848][T17600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.527727][T17600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.538400][T17600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.548222][T17600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.558768][T17600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.568637][T17600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.579136][T17600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.588938][T17600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.599407][T17600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.609530][T17600] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.619951][T17600] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.630836][T17600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.639660][T17815] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 328.650923][T17600] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.659705][T17600] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.668531][T17600] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.677257][T17600] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.761562][T17835] loop0: detected capacity change from 0 to 2048 [ 328.769135][T17835] EXT4-fs: dax option not supported [ 328.801511][T17843] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 328.815402][T17835] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 329.547936][T17853] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 329.556240][T17853] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 329.713490][T17862] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 329.797330][T17873] loop0: detected capacity change from 0 to 2048 [ 329.804985][T17873] EXT4-fs: dax option not supported [ 330.693406][T17913] vhci_hcd: default hub control req: 0200 v9ab9 i0000 l0 [ 330.700489][T17912] vhci_hcd: default hub control req: 0200 v9ab9 i0000 l0 [ 330.742043][T17921] __nla_validate_parse: 2 callbacks suppressed [ 330.742053][T17921] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 330.818703][T17926] SELinux: Context system_u:object_r:gpg_exec_t:s0 is not valid (left unmapped). [ 330.821691][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 330.821705][ T29] audit: type=1400 audit(1717258642.748:33160): avc: denied { relabelfrom } for pid=17925 comm="syz-executor.4" name="SCO" dev="sockfs" ino=76229 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 330.861767][ T29] audit: type=1400 audit(1717258642.758:33161): avc: denied { relabelto } for pid=17925 comm="syz-executor.4" name="SCO" dev="sockfs" ino=76229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=bluetooth_socket permissive=1 trawcon="system_u:object_r:gpg_exec_t:s0" [ 331.070977][ T29] audit: type=1400 audit(1717258642.998:33162): avc: denied { ioctl } for pid=17936 comm="syz-executor.0" path="socket:[75774]" dev="sockfs" ino=75774 ioctlcmd=0xf50b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 331.108920][ T29] audit: type=1400 audit(1717258643.038:33163): avc: denied { getopt } for pid=17936 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 331.282301][ T29] audit: type=1326 audit(1717258643.208:33164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17945 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc2967dee9 code=0x0 [ 331.605201][T17952] loop3: detected capacity change from 0 to 8192 [ 331.647086][T17952] loop3: p1 p4 [ 331.650731][T17952] loop3: p1 size 8388608 extends beyond EOD, truncated [ 331.658888][T17952] loop3: p4 start 4278190080 is beyond EOD, truncated [ 331.693741][T17956] SELinux: security_context_str_to_sid (^wh/) failed with errno=-22 [ 331.702801][T17956] SELinux: security_context_str_to_sid (cpuset) failed with errno=-22 [ 331.712432][T17956] loop4: detected capacity change from 0 to 256 [ 331.885806][T17970] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 331.894039][T17970] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 331.918234][T17972] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 332.049039][T17980] loop0: detected capacity change from 0 to 512 [ 332.109995][T17982] loop4: detected capacity change from 0 to 8192 [ 332.146433][T17982] loop4: p1 p4 [ 332.150111][T17982] loop4: p1 size 8388608 extends beyond EOD, truncated [ 332.158759][T17982] loop4: p4 start 4278190080 is beyond EOD, truncated [ 332.200927][T17991] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 332.209267][T17991] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 332.292215][T17997] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 332.628440][T18003] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.3'. [ 332.637897][T18003] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 332.652259][T18003] hsr0: entered promiscuous mode [ 332.660071][T18003] hsr0: left promiscuous mode [ 332.905943][T18007] loop2: detected capacity change from 0 to 1024 [ 332.913312][T18007] EXT4-fs: Ignoring removed nobh option [ 332.919119][T18007] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 332.930247][T18007] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 332.956365][T17519] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.039431][T18020] loop2: detected capacity change from 0 to 128 [ 333.047417][T18020] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 333.057032][T18020] EXT4-fs (loop2): group descriptors corrupted! [ 333.063608][T18017] loop3: detected capacity change from 0 to 8192 [ 333.098530][T18017] loop3: p1 p4 [ 333.102027][T18017] loop3: p1 size 8388608 extends beyond EOD, truncated [ 333.109633][T18017] loop3: p4 start 4278190080 is beyond EOD, truncated [ 333.146304][T18032] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 333.155772][T18032] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 333.248421][T18049] vlan0: entered promiscuous mode [ 333.253500][T18049] vlan0: entered allmulticast mode [ 333.273563][T18049] veth0_vlan: entered allmulticast mode [ 333.285356][T18049] team0: Port device vlan0 added [ 333.306166][ T29] audit: type=1400 audit(1717258645.228:33165): avc: denied { accept } for pid=18055 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 333.337840][T18059] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 333.366515][T18061] loop2: detected capacity change from 0 to 512 [ 333.367583][T18059] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 333.389144][T18061] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.393815][T18056] loop0: detected capacity change from 0 to 8192 [ 333.401664][T18061] ext4 filesystem being mounted at /root/syzkaller-testdir3567562686/syzkaller.fprOns/45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 333.446659][T18056] loop0: p1 p4 [ 333.450254][T18056] loop0: p1 size 8388608 extends beyond EOD, truncated [ 333.458975][T18056] loop0: p4 start 4278190080 is beyond EOD, truncated [ 333.540432][ T29] audit: type=1400 audit(1717258645.468:33166): avc: denied { accept } for pid=18065 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 333.561287][T18066] loop0: detected capacity change from 0 to 512 [ 333.662730][T18070] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 333.714514][T18072] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 333.767355][T18074] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 333.819310][T18076] loop0: detected capacity change from 0 to 128 [ 333.829527][T18076] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 333.841995][T18076] ext4 filesystem being mounted at /root/syzkaller-testdir192609359/syzkaller.8z9K00/26/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 333.900315][T17600] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 334.025663][T18079] loop0: detected capacity change from 0 to 8192 [ 334.076423][T18079] loop0: p1 p2 p3 [ 334.116442][T18081] ip6_tunnel: non-ECT from fe80:0040:0000:0000:0000:0000:0000:00aa with DS=0xe [ 334.119541][T18083] tipc: MTU too low for tipc bearer [ 334.133005][ T29] audit: type=1400 audit(1717258646.068:33167): avc: denied { mounton } for pid=18078 comm="syz-executor.0" path="/dev/loop0p1" dev="devtmpfs" ino=756 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 334.133222][T18079] 9pnet_fd: p9_fd_create_tcp (18079): problem connecting socket to 127.0.0.1 [ 334.188692][ T29] audit: type=1400 audit(1717258646.118:33168): avc: denied { write } for pid=18084 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 334.210368][T18085] loop4: detected capacity change from 0 to 256 [ 334.228295][T18085] FAT-fs (loop4): Directory bread(block 1285) failed [ 334.267632][T17519] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.267704][T18087] loop3: detected capacity change from 0 to 2048 [ 334.284293][T18087] EXT4-fs: dax option not supported [ 334.293969][T18085] loop4: detected capacity change from 0 to 128 [ 334.302248][T18085] ext2: Unknown parameter 'uid>00000000000000000000' [ 334.351161][T18093] loop2: detected capacity change from 0 to 512 [ 334.384960][T18100] loop3: detected capacity change from 0 to 128 [ 334.400952][T18100] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 334.451015][ T3118] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 334.559674][T18117] loop0: detected capacity change from 0 to 8192 [ 334.572500][T18119] loop4: detected capacity change from 0 to 8192 [ 334.586594][T18117] loop0: p1 p2 p3 [ 334.596072][T18117] 9pnet_fd: p9_fd_create_tcp (18117): problem connecting socket to 127.0.0.1 [ 334.606524][T18119] loop4: p1 p2 p3 [ 334.628924][T18119] 9pnet_fd: p9_fd_create_tcp (18119): problem connecting socket to 127.0.0.1 [ 334.745195][T18139] loop0: detected capacity change from 0 to 2048 [ 334.754332][T18139] EXT4-fs: dax option not supported [ 334.815508][T18148] loop4: detected capacity change from 0 to 8192 [ 334.824119][T18148] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 334.929557][T18158] loop4: detected capacity change from 0 to 512 [ 335.021666][ T29] audit: type=1400 audit(1717258646.948:33169): avc: denied { append } for pid=18160 comm="syz-executor.4" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 335.455165][T18179] loop2: detected capacity change from 0 to 2048 [ 335.462812][T18179] EXT4-fs: dax option not supported [ 335.539310][T18182] loop3: detected capacity change from 0 to 8192 [ 335.548838][T18182] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 335.773282][T18214] __nla_validate_parse: 6 callbacks suppressed [ 335.773296][T18214] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 335.868422][T18218] loop2: detected capacity change from 0 to 8192 [ 335.879712][T18218] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 336.150970][T18248] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 336.159222][T18248] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 336.166954][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 336.166967][ T29] audit: type=1400 audit(1717258648.098:33171): avc: denied { shutdown } for pid=18239 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 336.211774][T18254] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 336.235359][T18254] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 336.333426][T18261] loop4: detected capacity change from 0 to 8192 [ 336.345084][ T29] audit: type=1400 audit(1717258648.268:33172): avc: denied { read } for pid=18262 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 336.356994][T18261] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 336.517816][T18276] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 336.526048][T18276] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 336.646333][ T29] audit: type=1400 audit(1717258648.568:33173): avc: denied { bind } for pid=18287 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 337.046448][T18324] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 337.110736][T18331] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.3'. [ 337.276982][T18346] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 337.299591][T18346] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 337.470100][T18361] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 337.481620][T18362] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 337.489755][T18362] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 337.500268][T18362] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 337.539644][T18366] nfs4: Unknown parameter 'fscontexti' [ 337.593622][T18369] IPVS: set_ctl: invalid protocol: 137 172.30.1.1:20004 [ 338.161559][T18420] team0 (unregistering): Port device team_slave_0 removed [ 338.189401][T18420] team0 (unregistering): Port device team_slave_1 removed [ 338.216253][T18422] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 338.458279][T18441] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 338.539549][ T40] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.660478][ T40] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.675844][T18449] loop4: detected capacity change from 0 to 512 [ 338.688481][T18449] EXT4-fs error (device loop4): mb_free_blocks:1948: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt. [ 338.716400][T18449] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 1 (level 1) [ 338.734413][ T40] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.745140][T18449] EXT4-fs (loop4): 1 truncate cleaned up [ 338.754754][T18449] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 338.811358][ T40] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.833772][T17490] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.900908][ T40] bridge_slave_1: left allmulticast mode [ 338.906615][ T40] bridge_slave_1: left promiscuous mode [ 338.912407][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.920365][ T40] bridge_slave_0: left allmulticast mode [ 338.926013][ T40] bridge_slave_0: left promiscuous mode [ 338.931743][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.088788][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.101404][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.111919][ T40] bond0 (unregistering): Released all slaves [ 339.121341][T18464] sch_fq: defrate 0 ignored. [ 339.148150][T18467] loop4: detected capacity change from 0 to 512 [ 339.169625][T18467] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 339.190294][T18467] ext4 filesystem being mounted at /root/syzkaller-testdir4254637804/syzkaller.Ie4cIu/98/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.217744][T18451] chnl_net:caif_netlink_parms(): no params data found [ 339.245542][ T40] hsr_slave_0: left promiscuous mode [ 339.253139][ T40] hsr_slave_1: left promiscuous mode [ 339.265015][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.272532][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.281292][T18467] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz-executor.4: corrupted inode contents [ 339.300429][T18467] EXT4-fs error (device loop4): ext4_dirty_inode:5935: inode #2: comm syz-executor.4: mark_inode_dirty error [ 339.312526][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.317886][T18467] EXT4-fs error (device loop4): ext4_do_update_inode:5075: inode #2: comm syz-executor.4: corrupted inode contents [ 339.319927][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.346575][T18467] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #2: comm syz-executor.4: mark_inode_dirty error [ 339.368188][ T40] veth1_macvtap: left promiscuous mode [ 339.373667][ T40] veth0_macvtap: left promiscuous mode [ 339.379316][ T40] veth1_vlan: left promiscuous mode [ 339.384590][ T40] veth0_vlan: left promiscuous mode [ 339.407880][T18467] EXT4-fs warning (device loop4): ext4_empty_dir:3097: inode #18: comm syz-executor.4: directory missing '.' [ 339.445351][T17490] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.614099][T18451] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.621242][T18451] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.634455][T18451] bridge_slave_0: entered allmulticast mode [ 339.648524][T18451] bridge_slave_0: entered promiscuous mode [ 339.660988][T18451] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.668133][T18451] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.675292][T18451] bridge_slave_1: entered allmulticast mode [ 339.693123][T18451] bridge_slave_1: entered promiscuous mode [ 339.738982][T18451] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.764548][T18451] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.796699][T18451] team0: Port device team_slave_0 added [ 339.803285][T18451] team0: Port device team_slave_1 added [ 339.829943][T18451] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.836988][T18451] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.862956][T18451] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.878939][T18451] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.885957][T18451] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.911892][T18451] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 339.951153][T18451] hsr_slave_0: entered promiscuous mode [ 339.958413][T18451] hsr_slave_1: entered promiscuous mode [ 339.969477][T18451] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 339.982042][T18451] Cannot create hsr debugfs directory [ 340.234412][T18451] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 340.249534][T18451] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 340.263381][T18451] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 340.280330][T18451] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 340.355269][T18451] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.388083][T18451] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.405508][ T3194] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.412624][ T3194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.447148][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.454245][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.543946][T18451] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.616809][ T29] audit: type=1326 audit(1717258652.548:33174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18524 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2967dee9 code=0x7ffc0000 [ 340.640950][ T29] audit: type=1326 audit(1717258652.548:33175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18524 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2967dee9 code=0x7ffc0000 [ 340.677964][ T29] audit: type=1326 audit(1717258652.598:33176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18524 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc2967dee9 code=0x7ffc0000 [ 340.678141][T18451] veth0_vlan: entered promiscuous mode [ 340.702121][ T29] audit: type=1326 audit(1717258652.598:33177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18524 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2967dee9 code=0x7ffc0000 [ 340.731582][ T29] audit: type=1326 audit(1717258652.598:33178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18524 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2967dee9 code=0x7ffc0000 [ 340.744113][T18451] veth1_vlan: entered promiscuous mode [ 340.755778][ T29] audit: type=1326 audit(1717258652.598:33179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18524 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdc2967dee9 code=0x7ffc0000 [ 340.785971][ T29] audit: type=1326 audit(1717258652.598:33180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18524 comm="syz-executor.0" exe="/root/syz-executor.0" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc2967dee9 code=0x7ffc0000 [ 340.806173][T18451] veth0_macvtap: entered promiscuous mode [ 340.828475][T18451] veth1_macvtap: entered promiscuous mode [ 340.850024][T18451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.860509][T18451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.870355][T18451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.880783][T18451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.890603][T18451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.901059][T18451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.910909][T18451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.921405][T18451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.931406][T18451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.941935][T18451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.951892][T18451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.962311][T18451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.973381][T18451] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.987961][T18451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.998424][T18451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.008315][T18451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.018753][T18451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.028607][T18451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.039103][T18451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.049005][T18451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.059477][T18451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.069329][T18451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.079759][T18451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.089808][T18451] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.100294][T18451] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.112082][T18451] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.120975][T18451] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.129781][T18451] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.138519][T18451] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.147275][T18451] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.196256][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 341.196269][ T29] audit: type=1326 audit(1717258653.118:33248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18534 comm="syz-executor.4" exe="/root/syz-executor.4" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f319b237ee9 code=0x0 [ 341.235365][T18533] syzkaller0: entered promiscuous mode [ 341.241095][T18533] syzkaller0: entered allmulticast mode [ 341.263248][T18533] syzkaller0: create flow: hash 3116611366 index 1 [ 341.272930][T18532] syzkaller0: delete flow: hash 3116611366 index 1 [ 341.514462][T18566] __nla_validate_parse: 10 callbacks suppressed [ 341.514477][T18566] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 342.057907][T18582] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.4'. [ 342.111188][T18584] syzkaller0: entered promiscuous mode [ 342.116850][T18584] syzkaller0: entered allmulticast mode [ 342.127874][T18584] syzkaller0: create flow: hash 3116611366 index 1 [ 342.156514][T18583] syzkaller0: delete flow: hash 3116611366 index 1 [ 342.275388][T18586] syzkaller0: entered promiscuous mode [ 342.281022][T18586] syzkaller0: entered allmulticast mode [ 342.311002][T18586] syzkaller0: create flow: hash 3116611366 index 1 [ 342.319733][T18585] syzkaller0: delete flow: hash 3116611366 index 1 [ 342.434379][T18590] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 342.468688][T18596] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 342.581685][T18613] loop4: detected capacity change from 0 to 512 [ 342.661444][T18616] syzkaller0: entered promiscuous mode [ 342.666999][T18616] syzkaller0: entered allmulticast mode [ 342.689953][T18616] syzkaller0: create flow: hash 3116611366 index 1 [ 342.743806][T18621] syzkaller0: entered promiscuous mode [ 342.749336][T18621] syzkaller0: entered allmulticast mode [ 342.766414][T18615] syzkaller0: delete flow: hash 3116611366 index 1 [ 342.800332][T18621] syzkaller0: create flow: hash 3116611366 index 1 [ 342.808911][T18620] syzkaller0: delete flow: hash 3116611366 index 1 [ 342.929404][T18633] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 342.960338][ T29] audit: type=1400 audit(1717258654.888:33249): avc: denied { setattr } for pid=18636 comm="syz-executor.0" name="vcs2" dev="devtmpfs" ino=681 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 342.983660][ T29] audit: type=1400 audit(1717258654.888:33250): avc: denied { getopt } for pid=18636 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 343.114617][T18652] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 343.124034][T18652] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 343.238570][T18654] syzkaller0: entered promiscuous mode [ 343.244069][T18654] syzkaller0: entered allmulticast mode [ 343.313395][T18657] syzkaller0: entered promiscuous mode [ 343.318928][T18657] syzkaller0: entered allmulticast mode [ 343.359913][T18653] syzkaller0: delete flow: hash 3116611366 index 1 [ 343.360009][T18657] syzkaller0: create flow: hash 3116611366 index 1 [ 343.398153][T18656] syzkaller0: delete flow: hash 3116611366 index 1 [ 343.527858][ T6715] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.653685][ T6715] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.666728][T18671] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 343.701987][T18671] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 343.715006][T18685] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 343.738650][ T6715] bond0: (slave netdevsim1): Releasing backup interface [ 343.748765][ T6715] netdevsim netdevsim1 netdevsim1 (unregistering): left promiscuous mode [ 343.770013][ T6715] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.820657][ T6715] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.925609][T18696] syzkaller0: entered promiscuous mode [ 343.931167][T18696] syzkaller0: entered allmulticast mode [ 343.960216][T18696] syzkaller0: create flow: hash 3116611366 index 1 [ 343.989553][T18694] syzkaller0: delete flow: hash 3116611366 index 1 [ 344.031768][ T6715] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.251266][ T6715] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.261411][ T6715] bond_slave_0: left promiscuous mode [ 344.268837][ T6715] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.279271][ T6715] bond_slave_1: left promiscuous mode [ 344.286162][ T6715] bond0 (unregistering): Released all slaves [ 344.322303][T18681] chnl_net:caif_netlink_parms(): no params data found [ 344.333547][ T6715] tipc: Left network mode [ 344.371426][T18681] bridge0: port 1(bridge_slave_0) entered blocking state [ 344.378601][T18681] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.390929][T18681] bridge_slave_0: entered allmulticast mode [ 344.406121][T18681] bridge_slave_0: entered promiscuous mode [ 344.413302][T18681] bridge0: port 2(bridge_slave_1) entered blocking state [ 344.420411][T18681] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.427673][T18681] bridge_slave_1: entered allmulticast mode [ 344.434340][T18681] bridge_slave_1: entered promiscuous mode [ 344.449097][ T6715] hsr_slave_0: left promiscuous mode [ 344.455034][ T6715] hsr_slave_1: left promiscuous mode [ 344.460926][ T6715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 344.468454][ T6715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 344.476553][ T6715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 344.483953][ T6715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 344.497818][ T6715] veth1_macvtap: left promiscuous mode [ 344.503315][ T6715] veth0_macvtap: left promiscuous mode [ 344.508901][ T6715] veth1_vlan: left promiscuous mode [ 344.684972][ T6715] team0 (unregistering): Port device team_slave_1 removed [ 344.701611][ T6715] team0 (unregistering): Port device team_slave_0 removed [ 344.802704][T18716] geneve1: entered promiscuous mode [ 344.810609][T18717] syz_tun: entered promiscuous mode [ 344.822896][T18717] syz_tun: left promiscuous mode [ 344.827908][T18717] geneve1: left promiscuous mode [ 344.834669][T18681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 344.849147][T18681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 344.880773][T18681] team0: Port device team_slave_0 added [ 344.892060][T18681] team0: Port device team_slave_1 added [ 344.920652][T18681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 344.927743][T18681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.953648][T18681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 344.965225][T18681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 344.972221][T18681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 344.998153][T18681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.024644][T18681] hsr_slave_0: entered promiscuous mode [ 345.031953][T18681] hsr_slave_1: entered promiscuous mode [ 345.038104][T18681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 345.045671][T18681] Cannot create hsr debugfs directory [ 345.257558][T18731] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 345.317458][T18681] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 345.329316][T18681] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 345.342615][T18681] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 345.352829][T18681] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 345.384068][T18681] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.391209][T18681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.398646][T18681] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.405715][T18681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.414853][ T3194] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.423009][ T3194] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.460248][T18681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.472036][T18681] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.481483][ T3194] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.488566][ T3194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.520623][T18681] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 345.531045][T18681] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 345.544853][ T3194] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.551983][ T3194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.615600][T18681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 345.691921][T18681] veth0_vlan: entered promiscuous mode [ 345.700194][T18681] veth1_vlan: entered promiscuous mode [ 345.719341][T18681] veth0_macvtap: entered promiscuous mode [ 345.728606][T18681] veth1_macvtap: entered promiscuous mode [ 345.739848][T18681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.750410][T18681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.760346][T18681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.770834][T18681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.780764][T18681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.791248][T18681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.801101][T18681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.811660][T18681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.821564][T18681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.832081][T18681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.841899][T18681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.852346][T18681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.864038][T18681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.875094][T18681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.885645][T18681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.895604][T18681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.906272][T18681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.916230][T18681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.926844][T18681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.936659][T18681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.947174][T18681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.957014][T18681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.967454][T18681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.977277][T18681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.987715][T18681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.000671][T18681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 346.012682][T18681] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.021553][T18681] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.030267][T18681] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.039075][T18681] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 346.789640][T18792] __nla_validate_parse: 8 callbacks suppressed [ 346.789655][T18792] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 346.906613][T18799] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 346.918907][T18799] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 347.079453][T18801] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=18801 comm=syz-executor.0 [ 347.198526][ T29] audit: type=1400 audit(1717258659.128:33251): avc: denied { connect } for pid=18806 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 347.221194][T18809] vlan0: entered promiscuous mode [ 347.226269][T18809] vlan0: entered allmulticast mode [ 347.238418][T18809] veth0_vlan: entered allmulticast mode [ 347.245547][T18809] team0: Port device vlan0 added [ 347.314220][T18824] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 347.419319][T18833] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 347.722373][T18853] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 347.755239][ T29] audit: type=1326 audit(1717258659.678:33252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18855 comm="syz-executor.0" exe="/root/syz-executor.0" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc2967dee9 code=0x0 [ 347.781190][T18866] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 347.789326][T18866] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 347.835705][T18874] macvlan0: entered promiscuous mode [ 347.842310][T18874] ipvlan0: entered promiscuous mode [ 347.848134][T18874] ipvlan0: left promiscuous mode [ 347.853482][T18874] macvlan0: left promiscuous mode [ 348.071197][T18883] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 348.579863][T18898] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 348.910321][ T29] audit: type=1326 audit(1717258660.838:33253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18921 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fefce03fee9 code=0x0 [ 348.958280][T18927] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 348.966551][T18927] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 349.038036][T18929] vhci_hcd: default hub control req: 0016 v0055 i0000 l0 [ 349.143528][T18939] syzkaller0: entered promiscuous mode [ 349.149203][T18939] syzkaller0: entered allmulticast mode [ 349.174495][T18939] syzkaller0: create flow: hash 3116611366 index 1 [ 349.197715][T18938] syzkaller0: delete flow: hash 3116611366 index 1 [ 349.289119][T18943] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 349.298455][T18943] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 349.384036][T18949] syzkaller0: entered promiscuous mode [ 349.389648][T18949] syzkaller0: entered allmulticast mode [ 349.414375][T18949] syzkaller0: create flow: hash 3116611366 index 1 [ 349.436555][T18948] syzkaller0: delete flow: hash 3116611366 index 1 [ 349.714354][T18967] syz_tun: entered promiscuous mode [ 349.727490][T18967] syz_tun: left promiscuous mode [ 349.778597][T18978] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 349.787960][T18978] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 349.889386][T18980] syzkaller0: entered promiscuous mode [ 349.894880][T18980] syzkaller0: entered allmulticast mode [ 349.923601][T18980] syzkaller0: create flow: hash 3116611366 index 1 [ 349.947397][T18979] syzkaller0: delete flow: hash 3116611366 index 1 [ 350.365915][ T29] audit: type=1326 audit(1717258662.288:33254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18989 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fefce03fee9 code=0x0 [ 351.334096][T19010] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 351.342747][T19011] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_batadv, syncid = 0, id = 0 [ 351.405637][T19012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=39 sclass=netlink_route_socket pid=19012 comm=syz-executor.3 [ 351.418846][T19012] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=130 sclass=netlink_route_socket pid=19012 comm=syz-executor.3 [ 351.771223][T19018] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 352.090970][ T29] audit: type=1326 audit(1717258664.018:33255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19024 comm="syz-executor.1" exe="/root/syz-executor.1" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7381394ee9 code=0x0 [ 353.029546][T19053] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 353.149562][T19058] __nla_validate_parse: 2 callbacks suppressed [ 353.149579][T19058] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 353.231259][ T29] audit: type=1400 audit(1717258665.158:33256): avc: denied { setopt } for pid=19064 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 353.282838][T19068] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 353.292184][T19068] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 353.302162][T19069] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 353.336991][T19071] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 353.707399][T19101] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 353.719753][T19100] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 353.729125][T19100] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 353.758040][T19103] autofs4:pid:19103:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.5), cmd(0xc0189374) [ 353.771204][T19103] autofs4:pid:19103:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189374) [ 354.782101][T19128] batadv0: entered promiscuous mode [ 355.028458][T19145] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 355.037804][T19145] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 355.127122][ T29] audit: type=1400 audit(1717258667.058:33257): avc: denied { accept } for pid=19148 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 355.602052][T19182] block device autoloading is deprecated and will be removed. [ 356.114587][T19227] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 356.121850][T19227] IPv6: NLM_F_CREATE should be set when creating new route [ 356.129118][T19227] IPv6: NLM_F_CREATE should be set when creating new route [ 356.986022][T19284] syzkaller1: entered promiscuous mode [ 356.991715][T19284] syzkaller1: entered allmulticast mode [ 358.323676][T19331] __nla_validate_parse: 11 callbacks suppressed [ 358.323761][T19331] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 358.339445][T19331] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 358.576072][T19341] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 358.660066][ T6715] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.682244][ T29] audit: type=1400 audit(1717258670.608:33258): avc: denied { remount } for pid=19351 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 358.744112][ T6715] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.791906][T19334] chnl_net:caif_netlink_parms(): no params data found [ 358.822378][ T6715] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.909704][ T6715] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.924213][T19334] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.931389][T19334] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.940417][T19334] bridge_slave_0: entered allmulticast mode [ 358.946907][T19334] bridge_slave_0: entered promiscuous mode [ 358.954410][T19334] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.961556][T19334] bridge0: port 2(bridge_slave_1) entered disabled state [ 358.975636][T19334] bridge_slave_1: entered allmulticast mode [ 358.989900][T19334] bridge_slave_1: entered promiscuous mode [ 359.028558][T19334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.039289][ T6715] bridge_slave_1: left allmulticast mode [ 359.044929][ T6715] bridge_slave_1: left promiscuous mode [ 359.050774][ T6715] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.062567][ T6715] bridge_slave_0: left allmulticast mode [ 359.068276][ T6715] bridge_slave_0: left promiscuous mode [ 359.073989][ T6715] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.179589][ T6715] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 359.192733][ T6715] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 359.203148][ T6715] bond0 (unregistering): Released all slaves [ 359.213773][T19334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.241220][T19334] team0: Port device team_slave_0 added [ 359.255920][T19334] team0: Port device team_slave_1 added [ 359.273191][T19334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.280192][T19334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.306115][T19334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.318819][T19334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 359.325763][T19334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.352241][T19334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 359.368503][ T6715] hsr_slave_0: left promiscuous mode [ 359.374179][ T6715] hsr_slave_1: left promiscuous mode [ 359.380020][ T6715] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.387620][ T6715] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 359.395225][ T6715] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 359.402709][ T6715] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 359.413495][ T6715] veth1_macvtap: left promiscuous mode [ 359.419055][ T6715] veth0_macvtap: left promiscuous mode [ 359.424556][ T6715] veth1_vlan: left promiscuous mode [ 359.429834][ T6715] veth0_vlan: left promiscuous mode [ 359.499744][ T29] audit: type=1400 audit(1717258671.428:33259): avc: denied { ioctl } for pid=19377 comm="syz-executor.3" path="/dev/loop0" dev="devtmpfs" ino=767 ioctlcmd=0x1267 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 359.578373][ T6715] team0 (unregistering): Port device team_slave_1 removed [ 359.590639][ T6715] team0 (unregistering): Port device team_slave_0 removed [ 359.618712][T19383] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 359.632595][T19383] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 359.660191][T19334] hsr_slave_0: entered promiscuous mode [ 359.666235][T19334] hsr_slave_1: entered promiscuous mode [ 359.672158][T19334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 359.679726][T19334] Cannot create hsr debugfs directory [ 359.685150][T19382] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 359.772604][T19386] syzkaller0: entered promiscuous mode [ 359.778145][T19386] syzkaller0: entered allmulticast mode [ 359.797870][T19386] syzkaller0: create flow: hash 3116611366 index 1 [ 359.826702][T19385] syzkaller0: delete flow: hash 3116611366 index 1 [ 360.045252][T19334] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 360.055194][T19334] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 360.064744][T19334] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 360.073771][T19334] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 360.132109][T19334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.153588][T19334] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.163053][ T970] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.170218][ T970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.190238][ T970] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.197411][ T970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.215718][T19334] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 360.226171][T19334] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 360.290880][T19334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.342330][T19431] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 360.350869][T19431] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 360.368087][T19431] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 360.387640][T19334] veth0_vlan: entered promiscuous mode [ 360.396136][T19334] veth1_vlan: entered promiscuous mode [ 360.421937][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 360.427066][T19334] veth0_macvtap: entered promiscuous mode [ 360.439716][ T29] audit: type=1400 audit(1717258672.368:33260): avc: denied { watch } for pid=19434 comm="syz-executor.3" path="/root/syzkaller-testdir3361004623/syzkaller.ufAGu8/135/file0" dev="ramfs" ino=82855 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 360.468521][T19334] veth1_macvtap: entered promiscuous mode [ 360.479810][T19334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.490269][T19334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.500168][T19334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.510610][T19334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.520454][T19334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.530907][T19334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.540740][T19334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.551191][T19334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.561094][T19334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.571658][T19334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.581536][T19334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 360.591970][T19334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.603111][T19334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 360.613917][T19334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.624387][T19334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.634206][T19334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.644653][T19334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.654484][T19334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.665086][T19334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.674900][T19334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.685427][T19334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.695276][T19334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.705856][T19334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.715708][T19334] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 360.726137][T19334] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 360.738364][T19334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 360.748084][T19334] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.756894][T19334] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.765633][T19334] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.774477][T19334] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 360.934905][T19441] syzkaller0: entered promiscuous mode [ 360.940539][T19441] syzkaller0: entered allmulticast mode [ 360.953307][T19441] syzkaller0: create flow: hash 3116611366 index 1 [ 360.978032][T19440] syzkaller0: delete flow: hash 3116611366 index 1 [ 361.577461][T19461] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 361.586911][T19461] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 361.851937][T19409] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.932379][T19409] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.009777][T19409] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.065096][T19469] chnl_net:caif_netlink_parms(): no params data found [ 362.076283][T19409] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.112189][T19469] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.119332][T19469] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.126577][T19469] bridge_slave_0: entered allmulticast mode [ 362.133044][T19469] bridge_slave_0: entered promiscuous mode [ 362.139973][T19469] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.147073][T19469] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.154192][T19469] bridge_slave_1: entered allmulticast mode [ 362.160608][T19469] bridge_slave_1: entered promiscuous mode [ 362.179396][T19469] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.190107][T19469] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.209893][T19469] team0: Port device team_slave_0 added [ 362.217344][T19469] team0: Port device team_slave_1 added [ 362.239723][T19469] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.246700][T19469] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.272659][T19469] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.286906][T19469] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.293855][T19469] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.319750][T19469] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.330694][T19409] bridge_slave_1: left allmulticast mode [ 362.336394][T19409] bridge_slave_1: left promiscuous mode [ 362.342099][T19409] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.349736][T19409] bridge_slave_0: left allmulticast mode [ 362.355401][T19409] bridge_slave_0: left promiscuous mode [ 362.361059][T19409] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.459000][T19409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.469137][T19409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.479050][T19409] bond0 (unregistering): Released all slaves [ 362.504415][T19469] hsr_slave_0: entered promiscuous mode [ 362.510486][T19469] hsr_slave_1: entered promiscuous mode [ 362.516474][T19469] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.524012][T19469] Cannot create hsr debugfs directory [ 362.601632][T19409] hsr_slave_0: left promiscuous mode [ 362.609964][T19409] hsr_slave_1: left promiscuous mode [ 362.615774][T19409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.623208][T19409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.631234][T19409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.638717][T19409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.648279][T19409] veth1_macvtap: left promiscuous mode [ 362.653750][T19409] veth0_macvtap: left promiscuous mode [ 362.659391][T19409] veth1_vlan: left promiscuous mode [ 362.664616][T19409] veth0_vlan: left allmulticast mode [ 362.670028][T19409] veth0_vlan: left promiscuous mode [ 362.735124][T19409] team0 (unregistering): Port device vlan0 removed [ 362.758372][T19409] team0 (unregistering): Port device team_slave_1 removed [ 362.768841][T19409] team0 (unregistering): Port device team_slave_0 removed [ 362.805817][T19489] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 362.929903][T19469] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 362.939011][T19469] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 362.947824][T19469] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 362.956008][T19469] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 362.988242][T19469] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.999809][T19469] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.009382][ T4743] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.016504][ T4743] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.028002][ T3182] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.035065][ T3182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.054971][T19469] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 363.065411][T19469] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 363.119042][T19469] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.147772][T19409] bridge_slave_1: left allmulticast mode [ 363.153440][T19409] bridge_slave_1: left promiscuous mode [ 363.159086][T19409] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.167631][T19409] bridge_slave_0: left allmulticast mode [ 363.173362][T19409] bridge_slave_0: left promiscuous mode [ 363.179087][T19409] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.228149][T19409] bridge0 (unregistering): left allmulticast mode [ 363.250654][T19409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.260996][T19409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.271185][T19409] bond0 (unregistering): Released all slaves [ 363.299801][T19469] veth0_vlan: entered promiscuous mode [ 363.307834][T19469] veth1_vlan: entered promiscuous mode [ 363.321513][T19469] veth0_macvtap: entered promiscuous mode [ 363.329471][T19469] veth1_macvtap: entered promiscuous mode [ 363.339648][T19469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.350143][T19469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.359998][T19469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.370427][T19469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.380258][T19469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.390668][T19469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.400465][T19469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.410994][T19469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.420865][T19469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.431261][T19469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.441059][T19469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 363.451483][T19469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.462221][T19469] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 363.473403][T19469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.484037][T19469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.493964][T19469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.504376][T19469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.514192][T19469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.524600][T19469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.534396][T19469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.544809][T19469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.554654][T19469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.565093][T19469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.574913][T19469] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 363.585324][T19469] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 363.595973][T19469] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.604669][T19409] hsr_slave_0: left promiscuous mode [ 363.610524][T19409] hsr_slave_1: left promiscuous mode [ 363.616279][T19409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.623688][T19409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.631253][T19409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.638717][T19409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.647634][T19409] veth1_macvtap: left promiscuous mode [ 363.653173][T19409] veth0_macvtap: left promiscuous mode [ 363.658697][T19409] veth1_vlan: left promiscuous mode [ 363.663897][T19409] veth0_vlan: left promiscuous mode [ 363.742349][T19409] team0 (unregistering): Port device team_slave_1 removed [ 363.752138][T19409] team0 (unregistering): Port device team_slave_0 removed [ 363.789040][T19469] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.797778][T19469] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.806667][T19469] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.815416][T19469] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.825362][T19506] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 363.885517][T19513] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 363.894987][T19513] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 364.020063][ T29] audit: type=1400 audit(1717258675.948:33261): avc: denied { map } for pid=19519 comm="syz-executor.2" path="/dev/usbmon0" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 364.040509][T19522] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 364.072469][T19522] tipc: Trying to set illegal importance in message [ 364.119985][ T29] audit: type=1400 audit(1717258676.048:33262): avc: denied { setattr } for pid=19527 comm="syz-executor.3" name="timer" dev="devtmpfs" ino=229 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 364.170846][T19532] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 364.190743][T19534] sctp: [Deprecated]: syz-executor.2 (pid 19534) Use of struct sctp_assoc_value in delayed_ack socket option. [ 364.190743][T19534] Use struct sctp_sack_info instead [ 364.280172][T19540] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 364.289567][T19540] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 364.748680][T19572] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 364.758152][T19572] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 364.894772][T19575] atomic_op ffff88811d45e128 conn xmit_atomic 0000000000000000 [ 364.971775][T19587] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 365.101200][ T29] audit: type=1400 audit(1717258677.028:33263): avc: denied { execute_no_trans } for pid=19600 comm="syz-executor.1" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=1578 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 365.131397][ T29] audit: type=1400 audit(1717258677.028:33264): avc: denied { lock } for pid=19600 comm="syz-executor.1" path="/dev/sg0" dev="devtmpfs" ino=113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 365.174186][T19609] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 365.491335][T19633] futex_wake_op: syz-executor.1 tries to shift op by 32; fix this program [ 365.768620][T19647] hub 6-0:1.0: USB hub found [ 365.773362][T19647] hub 6-0:1.0: 8 ports detected [ 366.074506][T19415] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.160963][T19415] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.200615][T19415] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.270842][T19415] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.302373][T19649] chnl_net:caif_netlink_parms(): no params data found [ 366.336948][T19649] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.344128][T19649] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.351357][T19649] bridge_slave_0: entered allmulticast mode [ 366.359227][T19649] bridge_slave_0: entered promiscuous mode [ 366.372274][T19649] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.379497][T19649] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.387109][T19649] bridge_slave_1: entered allmulticast mode [ 366.393629][T19649] bridge_slave_1: entered promiscuous mode [ 366.418316][T19649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.430997][T19415] bridge_slave_1: left allmulticast mode [ 366.436807][T19415] bridge_slave_1: left promiscuous mode [ 366.442555][T19415] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.455123][T19415] bridge_slave_0: left allmulticast mode [ 366.460849][T19415] bridge_slave_0: left promiscuous mode [ 366.466560][T19415] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.600076][T19415] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.610973][T19415] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.621536][T19415] bond0 (unregistering): Released all slaves [ 366.631100][T19649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.652656][T19649] team0: Port device team_slave_0 added [ 366.659376][T19649] team0: Port device team_slave_1 added [ 366.674465][T19649] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.681515][T19649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.707500][T19649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.718700][T19649] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.725652][T19649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.751564][T19649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.776540][T19649] hsr_slave_0: entered promiscuous mode [ 366.782670][T19649] hsr_slave_1: entered promiscuous mode [ 366.788715][T19649] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.796274][T19649] Cannot create hsr debugfs directory [ 366.796640][T19415] IPVS: stopping master sync thread 19011 ... [ 366.810050][T19415] hsr_slave_0: left promiscuous mode [ 366.815828][T19415] hsr_slave_1: left promiscuous mode [ 366.821563][T19415] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.828973][T19415] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.837287][T19415] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 366.844654][T19415] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 366.853455][T19415] veth1_macvtap: left promiscuous mode [ 366.858972][T19415] veth0_macvtap: left promiscuous mode [ 366.864478][T19415] veth1_vlan: left promiscuous mode [ 366.869703][T19415] veth0_vlan: left promiscuous mode [ 366.948301][T19415] team0 (unregistering): Port device team_slave_1 removed [ 366.959121][T19415] team0 (unregistering): Port device team_slave_0 removed [ 367.308901][T19649] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 367.317611][T19649] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 367.326106][T19649] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 367.334732][T19649] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 367.365995][T19649] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.378201][T19649] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.387455][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.394504][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.405692][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.412868][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 367.468672][T19649] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 367.525595][T19649] veth0_vlan: entered promiscuous mode [ 367.533648][T19649] veth1_vlan: entered promiscuous mode [ 367.548468][T19649] veth0_macvtap: entered promiscuous mode [ 367.555398][T19649] veth1_macvtap: entered promiscuous mode [ 367.565414][T19649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.575855][T19649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.585768][T19649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.596216][T19649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.606060][T19649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.616500][T19649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.626354][T19649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.636783][T19649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.646598][T19649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.657078][T19649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.668110][T19649] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.678917][T19649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.689493][T19649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.699368][T19649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.709889][T19649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.719719][T19649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.730149][T19649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.740025][T19649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.750429][T19649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.760239][T19649] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.770684][T19649] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.781601][T19649] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.791316][T19649] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.800119][T19649] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.808943][T19649] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.817701][T19649] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.829022][T19707] __nla_validate_parse: 8 callbacks suppressed [ 368.829068][T19707] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 369.081488][T19718] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 369.090892][T19718] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 369.331652][T19409] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.410528][T19409] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.470678][T19409] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.500000][T19409] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.559425][T19724] chnl_net:caif_netlink_parms(): no params data found [ 369.572835][T19409] bridge_slave_1: left allmulticast mode [ 369.578526][T19409] bridge_slave_1: left promiscuous mode [ 369.584141][T19409] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.591640][T19409] bridge_slave_0: left allmulticast mode [ 369.597399][T19409] bridge_slave_0: left promiscuous mode [ 369.603030][T19409] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.718579][T19409] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.729087][T19409] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.739153][T19409] bond0 (unregistering): Released all slaves [ 369.748237][T19409] ։ (unregistering): Released all slaves [ 369.779744][T19752] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 369.794119][T19724] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.801364][T19724] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.810161][T19724] bridge_slave_0: entered allmulticast mode [ 369.817011][T19724] bridge_slave_0: entered promiscuous mode [ 369.827023][T19724] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.834050][T19724] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.841267][T19724] bridge_slave_1: entered allmulticast mode [ 369.847604][T19724] bridge_slave_1: entered promiscuous mode [ 369.866045][T19724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 369.878003][T19409] hsr_slave_0: left promiscuous mode [ 369.883702][T19409] hsr_slave_1: left promiscuous mode [ 369.891116][T19409] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.892537][T19756] sctp: [Deprecated]: syz-executor.1 (pid 19756) Use of struct sctp_assoc_value in delayed_ack socket option. [ 369.892537][T19756] Use struct sctp_sack_info instead [ 369.898623][T19409] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.923237][T19409] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.930712][T19409] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.939964][T19409] veth1_macvtap: left promiscuous mode [ 369.945511][T19409] veth0_macvtap: left promiscuous mode [ 369.951030][T19409] veth1_vlan: left promiscuous mode [ 369.956298][T19409] veth0_vlan: left promiscuous mode [ 370.034690][T19409] team0 (unregistering): Port device team_slave_1 removed [ 370.044414][T19409] team0 (unregistering): Port device team_slave_0 removed [ 370.081284][T19724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.090495][T19759] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 370.100111][T19762] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 370.109516][T19762] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 370.146388][T19724] team0: Port device team_slave_0 added [ 370.153183][T19724] team0: Port device team_slave_1 added [ 370.171955][T19724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.178959][T19724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.204860][T19724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.218879][T19724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 370.225864][T19724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 370.251806][T19724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 370.310281][T19724] hsr_slave_0: entered promiscuous mode [ 370.316887][T19724] hsr_slave_1: entered promiscuous mode [ 370.322732][T19724] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 370.330301][T19724] Cannot create hsr debugfs directory [ 370.579572][T19724] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 370.588366][T19724] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 370.597116][T19724] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 370.605920][T19724] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 370.649526][T19724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 370.668633][T19724] 8021q: adding VLAN 0 to HW filter on device team0 [ 370.687384][ T3194] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.694534][ T3194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 370.705387][ T3194] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.712567][ T3194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 370.735877][T19724] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 370.746397][T19724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 370.802344][T19724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 370.942147][T19724] veth0_vlan: entered promiscuous mode [ 370.954100][T19724] veth1_vlan: entered promiscuous mode [ 370.969141][T19724] veth0_macvtap: entered promiscuous mode [ 370.976477][T19724] veth1_macvtap: entered promiscuous mode [ 370.990711][T19724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.001275][T19724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.011112][T19724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.021537][T19724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.031371][T19724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.041852][T19724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.051672][T19724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.062146][T19724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.071971][T19724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 371.082380][T19724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.094746][T19724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 371.107461][T19724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.117927][T19724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.127772][T19724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.138191][T19724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.148042][T19724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.158460][T19724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.168322][T19724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.178735][T19724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.188575][T19724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 371.199006][T19724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 371.212809][T19724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 371.222504][T19724] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.231262][T19724] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.239967][T19724] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.248760][T19724] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 371.381838][T19842] loop4: detected capacity change from 0 to 256 [ 371.434446][T19845] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 371.543034][T19856] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 371.928511][T19877] loop4: detected capacity change from 0 to 2048 [ 371.968551][T19877] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 372.232385][T19887] hub 6-0:1.0: USB hub found [ 372.246349][T19887] hub 6-0:1.0: 8 ports detected [ 372.347387][T19891] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 372.927027][T19924] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 372.991505][T19929] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 373.003456][T19929] team0: Device veth1_macvtap failed to register rx_handler [ 373.589236][T19949] team1: Mode changed to "random" [ 373.808083][ T29] audit: type=1400 audit(1717258685.738:33265): avc: denied { connect } for pid=19964 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 374.182886][T19980] __nla_validate_parse: 2 callbacks suppressed [ 374.182902][T19980] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 374.227930][T19985] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 374.694952][T19995] chnl_net:caif_netlink_parms(): no params data found [ 374.731036][T19995] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.738200][T19995] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.745449][T19995] bridge_slave_0: entered allmulticast mode [ 374.751931][T19995] bridge_slave_0: entered promiscuous mode [ 374.758886][T19995] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.765939][T19995] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.773182][T19995] bridge_slave_1: entered allmulticast mode [ 374.779697][T19995] bridge_slave_1: entered promiscuous mode [ 374.799257][T19414] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.812389][T19995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.823046][T19995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.883467][T19995] team0: Port device team_slave_0 added [ 374.890283][T19995] team0: Port device team_slave_1 added [ 374.909441][T19995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.916505][T19995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.942525][T19995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.960032][T19414] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.979240][T19995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.981951][T20015] usb usb1: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 374.986218][T19995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.019557][T19995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.045531][T19995] hsr_slave_0: entered promiscuous mode [ 375.051610][T19995] hsr_slave_1: entered promiscuous mode [ 375.057907][T19995] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.065512][T19995] Cannot create hsr debugfs directory [ 375.074759][T19414] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.125789][T19414] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.189925][T20010] chnl_net:caif_netlink_parms(): no params data found [ 375.244800][T20010] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.251914][T20010] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.259181][T20010] bridge_slave_0: entered allmulticast mode [ 375.265457][T20010] bridge_slave_0: entered promiscuous mode [ 375.272492][T19414] bridge_slave_1: left allmulticast mode [ 375.278286][T19414] bridge_slave_1: left promiscuous mode [ 375.283952][T19414] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.291819][T19414] bridge_slave_0: left allmulticast mode [ 375.297510][T19414] bridge_slave_0: left promiscuous mode [ 375.303182][T19414] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.410027][T19414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 375.431010][T19414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 375.441350][T19414] bond0 (unregistering): Released all slaves [ 375.450597][T20032] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 375.459925][T20032] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 375.471032][T20010] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.478198][T20010] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.485478][T20010] bridge_slave_1: entered allmulticast mode [ 375.492615][T20010] bridge_slave_1: entered promiscuous mode [ 375.511272][T20010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.521906][T20010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.544340][T20010] team0: Port device team_slave_0 added [ 375.552180][T19414] hsr_slave_0: left promiscuous mode [ 375.558058][T19414] hsr_slave_1: left promiscuous mode [ 375.563707][T19414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 375.571264][T19414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 375.578846][T19414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 375.586357][T19414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 375.595055][T19414] veth0_macvtap: left promiscuous mode [ 375.600727][T19414] veth1_vlan: left promiscuous mode [ 375.605970][T19414] veth0_vlan: left promiscuous mode [ 375.678711][T19414] team0 (unregistering): Port device team_slave_1 removed [ 375.688887][T19414] team0 (unregistering): Port device team_slave_0 removed [ 375.723553][T20037] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 375.730824][T20037] IPv6: NLM_F_CREATE should be set when creating new route [ 375.739005][T20010] team0: Port device team_slave_1 added [ 375.758652][T20010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.765710][T20010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.791688][T20010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.803028][T20010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.810000][T20010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.836028][T20010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.847399][T20039] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 375.875010][T20010] hsr_slave_0: entered promiscuous mode [ 375.881062][T20010] hsr_slave_1: entered promiscuous mode [ 375.887009][T20010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.894572][T20010] Cannot create hsr debugfs directory [ 375.960078][T20047] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 375.981833][T20010] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.992958][T19995] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 376.001769][T19995] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 376.010227][T19995] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 376.018870][T19995] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 376.111330][T20010] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.151227][T20051] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 376.156874][T19995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.170236][ T29] audit: type=1400 audit(1717258688.098:33266): avc: denied { read } for pid=20050 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 376.173159][T19995] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.197180][T20051] xt_TCPMSS: Only works on TCP SYN packets [ 376.207103][T20010] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.220559][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.227622][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.249698][T20010] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.261962][ T3179] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.269021][ T3179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.316890][T19995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.344033][T19414] bridge_slave_1: left allmulticast mode [ 376.349813][T19414] bridge_slave_1: left promiscuous mode [ 376.355539][T19414] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.363232][T19414] bridge_slave_0: left allmulticast mode [ 376.369159][T19414] bridge_slave_0: left promiscuous mode [ 376.374793][T19414] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.518838][T19414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.529512][T19414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.539677][T19414] bond0 (unregistering): Released all slaves [ 376.557897][T20010] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 376.566343][T20010] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 376.574614][T20010] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 376.583621][T20010] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 376.615390][T19995] veth0_vlan: entered promiscuous mode [ 376.625296][T19995] veth1_vlan: entered promiscuous mode [ 376.633051][T19414] hsr_slave_0: left promiscuous mode [ 376.638864][T19414] hsr_slave_1: left promiscuous mode [ 376.644493][T19414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 376.652048][T19414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 376.659639][T19414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 376.667110][T19414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 376.675824][T19414] veth1_macvtap: left promiscuous mode [ 376.681319][T19414] veth0_macvtap: left promiscuous mode [ 376.686928][T19414] veth1_vlan: left promiscuous mode [ 376.692196][T19414] veth0_vlan: left allmulticast mode [ 376.697564][T19414] veth0_vlan: left promiscuous mode [ 376.752371][T19414] team0 (unregistering): Port device vlan0 removed [ 376.775725][T19414] team0 (unregistering): Port device team_slave_1 removed [ 376.785751][T19414] team0 (unregistering): Port device team_slave_0 removed [ 376.828628][T20010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.842261][T20010] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.853048][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.860206][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.871286][T19995] veth0_macvtap: entered promiscuous mode [ 376.880395][ T3174] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.887510][ T3174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.898512][T19995] veth1_macvtap: entered promiscuous mode [ 376.910175][T20010] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 376.920581][T20010] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 376.945822][T19995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.956381][T19995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.966175][T19995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.976886][T19995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.986708][T19995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.997164][T19995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.006984][T19995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.017425][T19995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.028073][T19995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.037489][T19995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.048288][T19995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.058102][T19995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.068502][T19995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.078405][T19995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.088895][T19995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.098749][T19995] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.109186][T19995] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.119979][T19995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.131175][T19995] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.140088][T19995] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.148972][T19995] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.157763][T19995] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.168173][T20067] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 377.184265][T20010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.370472][T20086] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 377.389269][T20010] veth0_vlan: entered promiscuous mode [ 377.395673][T20089] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 377.403800][T20089] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.1'. [ 377.420842][T20010] veth1_vlan: entered promiscuous mode [ 377.438155][T20010] veth0_macvtap: entered promiscuous mode [ 377.448382][T20010] veth1_macvtap: entered promiscuous mode [ 377.460378][T20010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.470926][T20010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.480792][T20010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.491496][T20010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.501457][T20010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.511997][T20010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.521829][T20010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.532382][T20010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.542216][T20010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.552722][T20010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.565714][T20010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.577121][T20010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.587621][T20010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.597434][T20010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.607863][T20010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.617735][T20010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.628172][T20010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.638024][T20010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.648462][T20010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.658336][T20010] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.668789][T20010] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.679439][T20010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.697328][T20010] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.706058][T20010] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.714911][T20010] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.723890][T20010] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.772574][T20108] bridge0: entered promiscuous mode [ 377.779290][T20108] macsec1: entered promiscuous mode [ 377.784598][T20108] macsec1: entered allmulticast mode [ 377.789910][T20108] bridge0: entered allmulticast mode [ 377.796972][T20108] bridge0: port 3(macsec1) entered blocking state [ 377.803743][T20108] bridge0: port 3(macsec1) entered disabled state [ 377.811249][T20108] bridge0: left allmulticast mode [ 377.816495][T20108] bridge0: left promiscuous mode [ 378.111869][T20121] loop0: detected capacity change from 0 to 1024 [ 378.120157][T20121] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (47082!=20869) [ 378.132024][T20121] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 378.143905][T20121] JBD2: no valid journal superblock found [ 378.149668][T20121] EXT4-fs (loop0): Could not load journal inode [ 378.551862][T20134] loop0: detected capacity change from 0 to 1024 [ 378.587586][T20134] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (47082!=20869) [ 378.597395][T20134] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 378.612890][T20134] JBD2: no valid journal superblock found [ 378.618693][T20134] EXT4-fs (loop0): Could not load journal inode [ 378.715164][T20139] tmpfs: Bad value for 'mpol' [ 378.730225][ T29] audit: type=1400 audit(1717258690.658:33267): avc: denied { map } for pid=20136 comm="syz-executor.0" path="/dev/tty1" dev="devtmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 378.753953][ T29] audit: type=1400 audit(1717258690.658:33268): avc: denied { execute } for pid=20136 comm="syz-executor.0" path="/dev/tty1" dev="devtmpfs" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 378.987862][ T29] audit: type=1326 audit(1717258690.918:33269): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20146 comm="syz-executor.3" exe="/root/syz-executor.3" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f12f3f27ee9 code=0x0 [ 379.068995][T20152] loop0: detected capacity change from 0 to 8192 [ 379.097705][T20152] loop0: p1 p2 p3 [ 379.305191][T20171] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.312385][T20171] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.320924][T20171] bridge0: entered promiscuous mode [ 379.338151][T20173] __nla_validate_parse: 5 callbacks suppressed [ 379.338168][T20173] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 379.515079][T20186] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 379.621727][T20195] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 379.630032][T20195] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 379.638505][T20192] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 379.871964][T20206] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 380.208197][T20222] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 380.230432][T20224] loop0: detected capacity change from 0 to 128 [ 380.238953][T20224] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 380.251313][T20224] ext4 filesystem being mounted at /root/syzkaller-testdir365742431/syzkaller.2ng4lq/12/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 380.292152][T20224] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 380.308158][T20010] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 380.413834][T20235] loop0: detected capacity change from 0 to 2048 [ 380.421203][T20235] EXT4-fs: dax option not supported [ 380.470030][T20235] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 381.061332][T20273] tap0: tun_chr_ioctl cmd 1074812118 [ 381.079517][ T29] audit: type=1400 audit(1717258693.008:33270): avc: denied { write } for pid=20274 comm="syz-executor.1" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 381.315520][T20289] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.322816][T20289] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.330393][T20289] bridge0: entered promiscuous mode [ 382.356424][T20320] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6416 sclass=netlink_route_socket pid=20320 comm=syz-executor.1 [ 382.386349][T20320] veth0_vlan: entered allmulticast mode [ 382.404866][T20320] veth0_vlan: left promiscuous mode [ 382.411132][T20320] veth0_vlan: entered promiscuous mode [ 382.854250][T20324] loop0: detected capacity change from 0 to 1764 [ 382.862667][T20324] iso9660: Bad value for 'sbsector' [ 383.003174][T20328] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 383.011541][T20328] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 383.168162][T20336] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 383.830892][T20350] loop0: detected capacity change from 0 to 1764 [ 383.838620][T20350] iso9660: Bad value for 'sbsector' [ 383.932685][T20352] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 383.985126][T20356] loop0: detected capacity change from 0 to 2048 [ 383.992680][T20356] EXT4-fs: dax option not supported [ 384.030976][T20356] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 384.081785][T20361] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=20361 comm=syz-executor.0 [ 384.128384][T20363] syzkaller0: entered promiscuous mode [ 384.134041][T20363] syzkaller0: entered allmulticast mode [ 384.211012][T20364] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 384.708667][T20378] hub 6-0:1.0: USB hub found [ 384.713400][T20378] hub 6-0:1.0: 8 ports detected [ 385.134315][T20386] loop0: detected capacity change from 0 to 1764 [ 385.157209][T20386] iso9660: Bad value for 'sbsector' [ 385.311053][T20388] loop0: detected capacity change from 0 to 2048 [ 385.337212][T20388] EXT4-fs: dax option not supported [ 385.401228][T20392] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 385.413163][T20388] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 385.582052][T20405] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 385.641312][T20410] syzkaller0: entered promiscuous mode [ 385.646976][T20410] syzkaller0: entered allmulticast mode [ 385.831130][T20410] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 385.942479][T20415] hub 6-0:1.0: USB hub found [ 385.948165][T20415] hub 6-0:1.0: 8 ports detected [ 386.404586][T20429] hub 6-0:1.0: USB hub found [ 386.423760][T20429] hub 6-0:1.0: 8 ports detected [ 387.136323][T20440] hub 6-0:1.0: USB hub found [ 387.141243][T20440] hub 6-0:1.0: 8 ports detected [ 387.301216][T20448] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 387.440690][T20448] bridge0: left promiscuous mode [ 387.610568][T20448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 387.663479][T20448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.728775][T20448] veth0_vlan: left allmulticast mode [ 387.789986][T20448] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.799013][T20448] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.807933][T20448] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.816944][T20448] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.169449][T20467] syzkaller0: entered promiscuous mode [ 388.175010][T20467] syzkaller0: entered allmulticast mode [ 388.200015][T20469] bridge0: entered promiscuous mode [ 388.280149][T20473] usb usb9: usbfs: process 20473 (syz-executor.1) did not claim interface 0 before use [ 388.290464][T20473] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 388.309072][T20474] EXT4-fs (sda1): re-mounted 5941fea2-f5fa-4b4e-b5ef-9af118b27b95 r/w. Quota mode: none. [ 388.792161][T20498] hub 6-0:1.0: USB hub found [ 388.798043][T20498] hub 6-0:1.0: 8 ports detected [ 389.389896][T20507] usb usb9: usbfs: process 20507 (syz-executor.0) did not claim interface 0 before use [ 389.410706][T20507] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 389.485480][T20510] loop0: detected capacity change from 0 to 512 [ 389.495782][T20510] EXT4-fs error (device loop0): __ext4_iget:4906: inode #15: block 1803188595: comm syz-executor.0: invalid block [ 389.518334][T20510] EXT4-fs error (device loop0): ext4_orphan_get:1399: comm syz-executor.0: couldn't read orphan inode 15 (err -117) [ 389.531047][T20510] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 389.544935][T20510] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 234881024 (level 0) [ 389.561525][T20510] SELinux: Context is not valid (left unmapped). [ 389.569305][T20510] EXT4-fs error (device loop0): ext4_lookup:1858: inode #2: comm syz-executor.0: deleted inode referenced: 15 [ 389.569401][ T29] ================================================================== [ 389.583530][T20510] EXT4-fs error (device loop0): ext4_find_dest_de:2111: inode #2: block 13: comm syz-executor.0: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0 [ 389.589021][ T29] BUG: KCSAN: data-race in data_alloc / prb_reserve [ 389.615288][ T29] [ 389.617604][ T29] write to 0xffffffff8607f068 of 8 bytes by task 20510 on cpu 1: [ 389.625314][ T29] data_alloc+0x291/0x2c0 [ 389.629648][ T29] prb_reserve+0x85e/0xb60 2024/06/01 16:18:21 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 389.634073][ T29] vprintk_store+0x53f/0x810 [ 389.638662][ T29] vprintk_emit+0x10c/0x5e0 [ 389.643166][ T29] vprintk_default+0x26/0x30 [ 389.647756][ T29] vprintk+0x75/0x80 [ 389.651657][ T29] _printk+0x7a/0xa0 [ 389.655554][ T29] __ext4_error_inode+0x2da/0x400 [ 389.660579][ T29] ext4_lookup+0x248/0x390 [ 389.664995][ T29] path_openat+0xc85/0x1da0 [ 389.669494][ T29] do_filp_open+0xf7/0x200 [ 389.673913][ T29] do_sys_openat2+0xab/0x120 [ 389.678508][ T29] __x64_sys_openat+0xf3/0x120 [ 389.683276][ T29] x64_sys_call+0x1057/0x2d70 [ 389.687962][ T29] do_syscall_64+0xc9/0x1c0 [ 389.692472][ T29] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.698365][ T29] [ 389.700691][ T29] read to 0xffffffff8607f068 of 8 bytes by task 29 on cpu 0: [ 389.708054][ T29] prb_reserve+0x235/0xb60 [ 389.712478][ T29] vprintk_store+0x53f/0x810 [ 389.717066][ T29] vprintk_emit+0x10c/0x5e0 [ 389.721568][ T29] vprintk_default+0x26/0x30 [ 389.726156][ T29] vprintk+0x75/0x80 [ 389.730045][ T29] _printk+0x7a/0xa0 [ 389.733936][ T29] kauditd_hold_skb+0x1a1/0x1b0 [ 389.738791][ T29] kauditd_send_queue+0x288/0x2e0 [ 389.743818][ T29] kauditd_thread+0x42a/0x650 [ 389.748512][ T29] kthread+0x1d1/0x210 [ 389.752576][ T29] ret_from_fork+0x4b/0x60 [ 389.756980][ T29] ret_from_fork_asm+0x1a/0x30 [ 389.761732][ T29] [ 389.764053][ T29] value changed: 0x0000000000023920 -> 0x00000000000da2f8 [ 389.771141][ T29] [ 389.773447][ T29] Reported by Kernel Concurrency Sanitizer on: [ 389.779606][ T29] CPU: 0 PID: 29 Comm: kauditd Tainted: G W 6.10.0-rc1-syzkaller-00267-gcc8ed4d0a848 #0 [ 389.790698][ T29] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 389.800738][ T29] ================================================================== [ 389.569284][ T29] audit: type=1400 audit(1717258701.505:33271): avc: denied { create } for pid=20508 comm="syz-executor.0" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=8E [ 389.836333][ T29] audit: type=1400 audit(1717258701.578:33272): avc: denied { write } for pid=3069 comm="syz-fuzzer" path="pipe:[565]" dev="pipefs" ino=565 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1