last executing test programs: 6m47.244583672s ago: executing program 2 (id=345): openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x241, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1) 6m46.778436147s ago: executing program 2 (id=346): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x5, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) syz_open_procfs$namespace(0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syz_tun\x00'}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 6m46.50295747s ago: executing program 2 (id=350): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, 0x0, 0x804d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x9b}, [@ldst={0x6}]}, 0x0, 0x5}, 0x94) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) socket$netlink(0x10, 0x3, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43, 0x0, 0x3}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000002100df4d000000000000000002000000000000000800000008000d0309"], 0x24}}, 0x0) fsetxattr$trusted_overlay_origin(r0, &(0x7f0000000080), &(0x7f0000000100), 0x2, 0x2) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) 6m45.59485555s ago: executing program 2 (id=352): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x19f, &(0x7f0000000380)={[{@sysvgroups}, {@noblock_validity}, {@nobarrier}, {@debug}, {@oldalloc}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x6}}, {@grpid}]}, 0x80, 0x54f, &(0x7f0000000480)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc2}}) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1}, 0x6e) listen(0xffffffffffffffff, 0xfff) syz_mount_image$ext4(&(0x7f0000000900)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000000c0), 0x1, 0x5a3, &(0x7f00000002c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1000001) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r1) wait4(r1, 0x0, 0x40000000, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xffffd000) 6m44.687505399s ago: executing program 2 (id=375): r0 = socket$igmp6(0xa, 0x3, 0x2) sendmmsg$inet6(r0, &(0x7f0000005500)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x5}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e22, 0x3, @loopback, 0x4}, 0x1c, 0x0}}], 0x2, 0x50) 6m43.818270349s ago: executing program 2 (id=382): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') 6m43.74479471s ago: executing program 32 (id=382): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x3a09007, 0x0) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000240)='./file0\x00') 5m10.846422331s ago: executing program 4 (id=1658): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @none, 0x7ff}, 0xe) 5m10.846119831s ago: executing program 4 (id=1659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x10040, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f00000000c0)='ip6_vti0\x00', 0x10) connect$inet(r3, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r3, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0}}], 0x68000, 0xe000) 5m9.96379507s ago: executing program 4 (id=1675): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x0, 0x0, 0x4a0f0000}, 0x0) r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0x58, &(0x7f0000000400)}, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000640)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x4, 0x954b, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x190, 0x1ef7}, 0x11efa, 0x3, 0x98, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x20}, r1, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0x5, &(0x7f00000005c0)=ANY=[@ANYBLOB], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x8, 0xfffff000, 0x2, 0x48020, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0xf}, 0x50) socket$packet(0x11, 0x3, 0x300) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@deltaction={0x44, 0x18, 0x1, 0x70bdac, 0x25dfdbfc, {0xa}, [@TCA_ACT_TAB={0x30, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x44010}, 0x20040844) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x3, &(0x7f0000000040)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[], 0x33fe0) 5m9.733638932s ago: executing program 4 (id=1681): syz_mount_image$ext4(&(0x7f0000000740)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x0, &(0x7f0000000000)={[{@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x1, 0x787, &(0x7f0000001000)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x4) fsetxattr$trusted_overlay_opaque(r0, &(0x7f0000000040), &(0x7f0000000080), 0x2, 0x1) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f00000000c0)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f00000007c0)="$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") close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r6 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000100)=ANY=[@ANYBLOB="02"], 0x48, 0xffffffffffffffff) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0xc0506617, &(0x7f0000000700)={@id={0x2, 0x0, @a}, 0x0, r6}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x84000) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) 5m8.802222743s ago: executing program 4 (id=1696): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x10, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000008f000000000000000100000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x5}, 0x94) r2 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket(0x10, 0x80002, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f0000000000)=r4, 0x4) sendmsg$nl_route_sched(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r0) r5 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000), 0x4) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r6, &(0x7f0000000180)={0x0, 0x7b64, &(0x7f0000000280)=[{&(0x7f0000000100)="5c00000012006bab9e3fe3d8fd8978f45225d9ee000000007ea60860160af36504000100080ec000000002009ee517c356a7b0251e61e659ad3af435cf01c937e786a6d0bdd7fcf50e4509c5cc68b7ed9c232d786c35fe0000000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$inet(r5, &(0x7f00000002c0)={&(0x7f0000000000)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000180)="84", 0x1}], 0x1}, 0x8040) close(r5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)={0x8c, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASK={0x3c, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x89}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x2a}}, {0x14, 0x4, @mcast1}}}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x86}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x24000801}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0xe0}}, 0x0) 5m7.414046138s ago: executing program 4 (id=1705): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x87ff, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000800)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6", @ANYRES8, @ANYRESHEX, @ANYBLOB="148e60bd068b8c773994f3f2f1fcaf8bbd96c3027d71cd352bbb8be847ce127a5b28c62ec6acbcdab8fc1dd31f5ca129fa829d6782ba47b6b74d28b4f71adc3d92296f7a12832bbf0e8d936493c51477750b2302042c3247cdb93cc3cf74d49ef57349ebe30f72560bc523a41696982e70bd2524", @ANYRESHEX], 0x4, 0x56f, &(0x7f0000000b00)="$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") 5m7.363097739s ago: executing program 33 (id=1705): mknod$loop(&(0x7f0000000140)='./file0\x00', 0x87ff, 0x0) syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000540)='./file0\x00', 0x1204018, &(0x7f0000000800)=ANY=[@ANYBLOB="6f76657272696465726f636b7065726d2c6e6f636f6d70726573732c686964652c73657373696f6e3d3078303030303030303030303030303032312c756e686964652c696f636861727365743d63703433372c6f76657272696465726f636b7065726d2c626c6f636b3d3078303030303030303030303030303430302c005fb50aab29cf1d32d24be5ab2a6506aa524c8f1cd5781842ee1c86bee627767fee958f25bb6db8e631262ed8a59d337d730b6698271aeb8c31c1902a7e236e5dd878e6c1352c0c799d8e80d7346f8d2870acebe617c694bbb925d3ab4fb01784c564c03d88c81d2f84f58e8c6ba18548f09fa6", @ANYRES8, @ANYRESHEX, @ANYBLOB="148e60bd068b8c773994f3f2f1fcaf8bbd96c3027d71cd352bbb8be847ce127a5b28c62ec6acbcdab8fc1dd31f5ca129fa829d6782ba47b6b74d28b4f71adc3d92296f7a12832bbf0e8d936493c51477750b2302042c3247cdb93cc3cf74d49ef57349ebe30f72560bc523a41696982e70bd2524", @ANYRESHEX], 0x4, 0x56f, &(0x7f0000000b00)="$eJzs3V1v08gawPHHpYUoR6qODkcIVQWGco5UpBKcBIIirnycSTqQ2JHtoPaKU9EUVaRwRDnSthfLcsPuSrsfgtv9EPuN0N7vXrCynfQtb6zSNgj9f1E7E3vsecaNZurWHgsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABDLrdh23pK68Vpraji3EviNw7fdrfsWyO1jyYh6Raz4SzIZuZouuvrPw9VX4m9L//02fbcomTjJyP7frvz94eXZmd72IwI+F7t7+y82Op3262kHcnZ+/3Rp+Mqa9kzom4ZT08qEviqXSvbd1Wqoqqauw/Uw0g3lBtqJ/EAtu7dVvlwuKp1b91tereLUdW/hgzsF2y6pR7mmdoLQ9+4+yoXuqqnXjVdLysSr4zIP4g/iYxOpSDsNpba2O+3iuBbEhfKfU6gwrlDBLhTy+UIhX7pfvv/Atmf7FtgnSF+J6X9oMV2n2HsDk5npjv9SFyOetGRN1MCXKxUJxJfGkPVdvfH/33f1yHqPjv+L6aLFq4erF+JvS3I9fXd92Pg/JJbze+3KnuzLC9mQjnSkLa+nHtH5vmqixRMjofhipCFOskR1lygpS0lKYstTWZWqhKKkKkbqoiWUdQklEp18olwJRIsjkfgSiJJlceW2KMlLWcpSFCVacrIuvrTEk5pUxEn2siXbyXEvirKGxXhQKD+0Gdne564thRGtZfzH5E61/wYm8ak3/gMAAAAAgK+Wlfz1PT7/n5NrSa5q6tqedlgAAAAAAOAUJf/5X4yTuTh3TSzO/wEAAAAA+NpYyT12lohk5Uaa2xIruV1q0B8BLkwhRAAAAAAAMKHk///X4ySZA+WGWAfTpXARAAAAAAAAX4kfDmbfHTbHbti8ZP36mwTBnPWuufYvayeZm9fZ6V4K0HdFQFRdsOa7O0mSUprMzrp60cqkhQ4mwfzYTbbkbTeOdId9cVhBMPfHp9RBAN8NDyAjJwO4PCs/yc20zM3NNN3srUlryVZNXedcv/4wL44zPxPptej/L7e/kaT5P3qNeSsj25127tmrzmZyMN7Fe3m3051AsW8exWEH4/KsvEnmW0juuRh45OeSGzG69WYt2drutO2kTidt/0y6+czxGt/Oj6jzvSylpZa6M95mj7c/E9eZzw1rfTeK/IQtfy+30jK3lm+lyYAoCuOiKByNYvCxmDyK4rgoihNGAQDTsjVmFLKODPxDxp1eZkQvtzXutwyrr5a/+utF0qMvp2WWF5KOdXZhQI9uj+vR7QlHt1/6noE0bIyN6/35xKj6Id7gw9B6w3rBig/hhTc7/5Mru3v7d7Z3Np63n7dfFgrFkn3Ptu8XZC5pRjdh7AEADDD+GTtjS1j3xpxV/+PgkoKcPJNX0pFNWUnuNkiuOBi41+yRyxBWxpy1ZpNhMn3Cy8qIs7qLyV0Ovf0WRpY9HkPx7H8QAACco6Ux4/DnjP8rY867j4/lo8+Os0ee1gYAAM6GDj5a2eh7KwhM82m+XM470apWge8+VoGp1LQyXqQDd9Xxalo1Az/yXb8eZ56Yig5V2Go2/SBSVT9QTT80a8n0gar76PdQNxwvMm7YrGsn1Mr1vchxI1Uxoauarf/UTbiqg2TjsKldUzWuExnfU6HfClydUyrU+khBU9FeZKomznqqGZiGE2TUE7/eamhV0aEbmGbkpzvs1WW8qh80kt3mpn2wAQD4Quzu7b/Y6HTar88qc3HaLQQAACcdDtfTjgQAAAAAAAAAAAAAAAAAAAAAAAxz5vf/ncx0HwAgE+9Qzi9mMqMP+Mxp/UzJfDmZsV3H2zPtmACcuT8DAAD///GvUk8=") 35.216398473s ago: executing program 5 (id=5165): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00'}) ioctl$KDGKBDIACR(r3, 0x4b4a, 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000001900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[{0x10, 0x10e, 0x9}], 0x10}}], 0x1, 0x8850) 33.552928631s ago: executing program 5 (id=5177): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 31.873509739s ago: executing program 5 (id=5187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00'}) ioctl$KDGKBDIACR(r3, 0x4b4a, 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000001900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[{0x10, 0x10e, 0x9}], 0x10}}], 0x1, 0x8850) 30.960268569s ago: executing program 5 (id=5205): r0 = syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000280), 0x1, 0x79c, &(0x7f00000007c0)="$eJzs3c9rXNUeAPDvnSSdJu17yYMH7/WtAg80UDoxNbYKLuJKBAsFXduGyTTUTDIlMylNyKJFBDeCigtBN137oy4Et/5YuNH/woW0VE2LFRcSufOjmSYz6SRNZir5fODOnHPPvXPOd879cWbmcieAA2s0fchEHIuId5KI4fr8JCIGqqn+iKnacvfWVvPplMT6+iu/JNVl7q6t5qNpndSReua/EfHNmxHHM1vrLS+vzE0Xi4XFen68Mn9pvLy8cuLi/PRsYbawcGpicvLk6WdOn9q7WH/7YeXorXdffPKzqT/e+M+Nt79N0sCu1sqa49grozFaf08G0po2DO91Tb2X9LoB7Eq6a/bV9vI4FsPRV021MdjNlgEA+2UdADiAEmMAADhgGt8D3F1bzTem3n4j0V23X4iIw7X4G79v1kr6YyqyaWFfmhu6mzzwy0gSESN7UP9oRHz05WufpFPU+8FvaUA3XL0WEedHRrce/5MHr1nYhae2K1zPVp9GN80+aOcf6KWv0vHPs63Gf5n6/n+4+rh5/JNtse/uxsP3/8zNzet89+oeVFyXjv+eb7q27V5T/HUjffXcP6pjvoHkwsViIT22/TMixmIgm+Ynqou2HrmN3fnzTrv6m8d/v773+sdp/enzxhKZm/3ZB9eZma5MP2rcDbevRfyvv1X8yf3+T9qMf892WMdLz731YbuyNP403sa0Nf7Wvuiw7odZvx7xRMv+3+jLZNvrE8erm8N4Y6No4fMfPxhqV39z/6dTWn/js0A3pP0/tH38I0nz9Zrlndfx/fXhr9uVPTz+1tv/oaR2EDhUn3dlulJZnIg4lLy8df7JjXUb+cbyafxj/2+9/9eqbb39D6TDpg7j77/186e7j39/pfHP7Kj/d564cW+ur139beJv6vG0/yerqbH6nE6Of5028FHeOwAAAAAAAAAAAAAAAAAAAAAAAADoVCYijkaSyd1PZzK5XO0/vP8dQ5liqVw5fqG0tDCTllXvf5pp3OpyuOl+qBP1++E38ic35Z+OiH9FxPvZwWo+ly8VZ3odPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUHWnz//+pn7K9bh0AsG8O97oBAEDXOf8DwMGzs/P/YFN6as/bAgB0h8//AHDwdHz+P7+/7QAAusfnfwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPbZ2TNn0mn997XVfJqfuby8NFe6fGKmUJ7LzS/lc/nS4qXcbKk0Wyzk8qX5ti90tfZULJUuTcbC0pXxSqFcGS8vr5ybLy0tVM5dnJ+eLZwrDHQtMgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoXHl5ZW66WCwsSmybGNzTF8z+7d/5/ngsmiGxb4nmo8Rg7w5QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI+5vwIAAP//BeYuJQ==") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = getpgrp(0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x3}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, r2, 0x1, 0x5001) syz_mount_image$vfat(&(0x7f0000000ec0), &(0x7f0000000180)='./file2\x00', 0x420c, &(0x7f0000003240)=ANY=[], 0x6, 0x35d, &(0x7f0000000f00)="$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") r5 = creat(&(0x7f0000000240)='./file1\x00', 0xd) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0xfc, 0x5}) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x4be, &(0x7f0000000540)="$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") syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x2029c1b, 0x0, 0x5, 0x0, &(0x7f0000000240)) 29.635643943s ago: executing program 5 (id=5211): r0 = socket$inet6(0xa, 0x802, 0x88) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$inet6_udp_int(r0, 0x11, 0xb, &(0x7f00000000c0)=0x17, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000080)=0x3, 0x4) syz_emit_ethernet(0x83, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030486dd601b8b97004d88c19e9ace5ffb2e9fc603dd282100000002ff02000000000000000000000000000104004e200023b0"], 0x0) 28.206381468s ago: executing program 5 (id=5224): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in=@local, 0x4e1f, 0xfffc, 0x4e24, 0x13, 0x2}, {0x0, 0x200000024, 0x40000000007, 0x6811220d, 0x100000000, 0x4, 0x200000004, 0x9}, {0x5, 0x0, 0x3}, 0x1000001, 0x0, 0x1, 0x0, 0x6}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x2, @in=@empty, 0x4, 0x3, 0x0, 0x0, 0x9, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 28.185795549s ago: executing program 34 (id=5224): r0 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@initdev={0xfe, 0x88, '\x00', 0x40, 0x0}, @in=@local, 0x4e1f, 0xfffc, 0x4e24, 0x13, 0x2}, {0x0, 0x200000024, 0x40000000007, 0x6811220d, 0x100000000, 0x4, 0x200000004, 0x9}, {0x5, 0x0, 0x3}, 0x1000001, 0x0, 0x1, 0x0, 0x6}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6c}, 0x2, @in=@empty, 0x4, 0x3, 0x0, 0x0, 0x9, 0x0, 0x4}}, 0xe8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 26.762249513s ago: executing program 0 (id=5234): socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489c", 0x25}], 0x1}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="580000000206030000000000000000000300000705000100070000000900020073797a31000000000c00078008001240000000050500050002000000050004000100000011000300686173683a69702c706f727400"], 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x20004000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, 0x0, 0x90) 26.686270574s ago: executing program 0 (id=5235): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syslog(0x2, 0xffffffffffffffff, 0x4b) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80020, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) readv(r4, &(0x7f0000000040)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 26.450916597s ago: executing program 0 (id=5236): openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x201, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, 0x0}, 0x1f00) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x8d, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0x6f5f}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x5) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xa, r1, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b70500000000000085000000b300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 24.700057135s ago: executing program 0 (id=5247): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x20) mkdirat(r0, &(0x7f0000000540)='./file7\x00', 0x21) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file7\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x5) 24.699597215s ago: executing program 0 (id=5248): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = openat$ptp0(0xffffffffffffff9c, 0x0, 0xc0542, 0x0) readv(r1, &(0x7f00000018c0)=[{&(0x7f0000000840)=""/4096, 0x1000}], 0x1) 23.39035145s ago: executing program 0 (id=5252): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x5, @string={0x5, 0x3, "d60b00"}}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x40, 0xe, 0x2, {0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f0000000340)={0x0, 0xe, 0x6, {0x6, 0xa, '\x00\x00\x00\x00'}}, 0x0}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) 23.3186074s ago: executing program 35 (id=5252): r0 = syz_usb_connect$uac3(0x3, 0x97, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x1, 0x2, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0xa, 0x7}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x6, 0x8000, 0x7, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, &(0x7f0000000000)={0x14, 0x0, &(0x7f00000001c0)={0x0, 0x3, 0x5, @string={0x5, 0x3, "d60b00"}}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000580)={0x2c, &(0x7f0000000240)={0x40, 0xe, 0x2, {0x2, 0x8}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac1(0x4, 0x0, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0xc07}}]}) syz_usb_control_io$uac3(r0, &(0x7f0000000100)={0x14, &(0x7f0000000340)={0x0, 0xe, 0x6, {0x6, 0xa, '\x00\x00\x00\x00'}}, 0x0}, 0x0) syz_usb_control_io$uac3(r0, &(0x7f0000000140)={0x14, &(0x7f0000000240)=ANY=[], 0x0}, 0x0) 5.958359106s ago: executing program 1 (id=5379): mount$tmpfs(0x0, 0x0, 0x0, 0x400, &(0x7f00000000c0)=ANY=[]) syz_usb_connect(0x0, 0x36, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) recvfrom$phonet(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close_range(r3, 0xffffffffffffffff, 0x0) 2.496695284s ago: executing program 3 (id=5404): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000140), &(0x7f0000000200)=0x4) 2.493830794s ago: executing program 1 (id=5405): r0 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) r3 = socket$kcm(0xf, 0x3, 0x2) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[], 0xfefb) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000a80)={&(0x7f0000000700)="6775e2fc806360a7f9cc3ccfcef19d80aa197b8c6baaab0f3f4b87af7d15d249d03ea86d033de710056cc6bbc6e3eba9114219f0265a7954d829bb620d6c47a98767849427bea53d0f9f2d2928f8b2c838b10ad81354b9f1c4a64a3b1d74816c8346f1b471cf23f53b420baf8671410a5acf02d80d6adaa50d773c592eaf3992903aa472398e70b865d2f84ca67500834db10fbd3ee7aa321a4d6924cab8728c7c5fac73e9aca53dcf4cfc96f30ee6f8ddcc493b1973072da42ff57f9b50409f60e6c01f126a5d96764e66af01bb491a4bb36796b0389b256336ed9d439fdb3277a32b117cff073f5e873b25ad52caec89b7", &(0x7f0000000b40)=""/229, &(0x7f0000000900), &(0x7f0000000940)="628c4e3cae5a364abcc81c1423d3f2a6272bba881a3d157c764cac28fbcee7772369e9802181a889648a03bd7744c08e2286608ac90d7fe86b5cd1092b7beb34cc36c59f355d7a353a069796707102a91f0b21afe5d17a2735a719e6d7c3dd350621f79c07ee1085c8e4ce0c01e710f5b4ef34b785fb52101874ee370adfe0daf31547ba2b6d61cf4cbdeb3048853e46f3dd454e0a6ecae151afe123e5711f33c3ccbb2d67983a0f1952c49ec5827e085d3f5c37d394112cf6f4ca", 0x8}, 0x38) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="5c00000014006b0402311dfc0b2154972c29389fc4a03e20aebba6080c000acc28d2280000f800250f00000f00e5", 0x2e}, {&(0x7f0000000240)="d9289fe0dad5feadbb14cde7a31ca8de664d0ce8bd59c5847100aeb57f9122443bc97a9c2cb1ec37ead56e70b311", 0x2e}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x43}, 0x28) r5 = socket$kcm(0xa, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x5411, &(0x7f0000000dc0)) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000440)=[{&(0x7f00000001c0)}, {&(0x7f0000000340)}, {&(0x7f0000000400)="e3a601601993ec416d112771174323", 0xf}], 0x3, &(0x7f0000000500)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @remote}}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x89ba}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0xc8}, 0x20000000) r6 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004580), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x800) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) 2.340085575s ago: executing program 8 (id=5407): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffdfc, {0x0, 0x0, 0x0, r4, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x8}, {0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 2.117459038s ago: executing program 1 (id=5408): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mq_notify(0xffffffffffffffff, 0x0) 2.061478208s ago: executing program 8 (id=5410): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffff7, 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031411d3fc220000", 0x9, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.826678241s ago: executing program 8 (id=5413): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x55, 0x0, &(0x7f0000000200)="b44c80630562443108347301af47fa0ff9b11fe7d5fe008c6392009c5bbd04080000000000000fae7a6a53200386ce51dec4a4effb9de8b4645c2b9c0614907dac12c6d34a8266e6124b925240ca1fce3ee8048925", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3}, 0x50) r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0xa000) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85) 1.730115052s ago: executing program 8 (id=5415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syslog(0x2, 0xffffffffffffffff, 0x4b) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x80020, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x9, r3}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) readv(r4, &(0x7f0000000040)=[{0x0}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) 1.637650313s ago: executing program 6 (id=5416): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="0000520006000500010000000800", @ANYRES16=r1], 0x2c}}, 0x20008000) 1.178929428s ago: executing program 8 (id=5417): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r3, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) ppoll(&(0x7f0000000040)=[{r2, 0x4236}, {r3, 0x3328}, {r0, 0x1}], 0x3, 0x0, 0x0, 0x0) close(r1) 1.127367668s ago: executing program 3 (id=5418): r0 = socket$kcm(0x21, 0x2, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10, 0x0}, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'wlan1\x00', 0x800}) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @cgroup_sock_addr=0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f0000000080)) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0xfe33) r3 = socket$kcm(0xf, 0x3, 0x2) write$cgroup_devices(r3, &(0x7f0000000080)=ANY=[], 0xfefb) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000a80)={&(0x7f0000000700)="6775e2fc806360a7f9cc3ccfcef19d80aa197b8c6baaab0f3f4b87af7d15d249d03ea86d033de710056cc6bbc6e3eba9114219f0265a7954d829bb620d6c47a98767849427bea53d0f9f2d2928f8b2c838b10ad81354b9f1c4a64a3b1d74816c8346f1b471cf23f53b420baf8671410a5acf02d80d6adaa50d773c592eaf3992903aa472398e70b865d2f84ca67500834db10fbd3ee7aa321a4d6924cab8728c7c5fac73e9aca53dcf4cfc96f30ee6f8ddcc493b1973072da42ff57f9b50409f60e6c01f126a5d96764e66af01bb491a4bb36796b0389b256336ed9d439fdb3277a32b117cff073f5e873b25ad52caec89b7", &(0x7f0000000b40)=""/229, &(0x7f0000000900), &(0x7f0000000940)="628c4e3cae5a364abcc81c1423d3f2a6272bba881a3d157c764cac28fbcee7772369e9802181a889648a03bd7744c08e2286608ac90d7fe86b5cd1092b7beb34cc36c59f355d7a353a069796707102a91f0b21afe5d17a2735a719e6d7c3dd350621f79c07ee1085c8e4ce0c01e710f5b4ef34b785fb52101874ee370adfe0daf31547ba2b6d61cf4cbdeb3048853e46f3dd454e0a6ecae151afe123e5711f33c3ccbb2d67983a0f1952c49ec5827e085d3f5c37d394112cf6f4ca", 0x8}, 0x38) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x1c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x10c002, 0xac5d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r4, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000600)="5c00000014006b0402311dfc0b2154972c29389fc4a03e20aebba6080c000acc28d2280000f800250f00000f00e5", 0x2e}, {&(0x7f0000000240)="d9289fe0dad5feadbb14cde7a31ca8de664d0ce8bd59c5847100aeb57f9122443bc97a9c2cb1ec37ead56e70b311", 0x2e}], 0x2, 0x0, 0x0, 0x1f00c00e}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, 0x0, 0x43}, 0x28) r5 = socket$kcm(0xa, 0x2, 0x73) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x5411, &(0x7f0000000dc0)) sendmsg$inet(r0, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000440)=[{&(0x7f00000001c0)}, {&(0x7f0000000340)}, {&(0x7f0000000400)="e3a601601993ec416d112771174323", 0xf}], 0x3, &(0x7f0000000500)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @rand_addr=0x64010101, @remote}}}, @ip_tos_u8={{0x11}}, @ip_ttl={{0x14, 0x0, 0x2, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x89ba}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}], 0xc8}, 0x20000000) r6 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="68cabf2dfb58fc0a1d6b689866f05d490d010088a8ffff0200258f2e4409b8f9e6aaeb88bea123dc2c6726e89b1ae2f6e8bcb5ee52dcd7298d39093c510293bca0b646a3ce904f6e6b788b3204c233e60ddc", 0x52}], 0x1}, 0x0) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000004580), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x800) bpf$BPF_MAP_GET_NEXT_ID(0xc, 0x0, 0x0) 1.074380549s ago: executing program 6 (id=5419): r0 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3e, 0x1c, 0x0, 0x0, 0x2, 0x2, 0x0, @rand_addr=0x64010101, @multicast1}, @address_request}}}}, 0x0) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x36}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) 1.058807999s ago: executing program 6 (id=5420): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x1}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x7c}}, 0x0) socket$kcm(0x11, 0x200000000000002, 0x300) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="39000000140081ae10003c00052001", 0xf}], 0x1}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000001900000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000140a03000000000000000000020000000900010073797a3000000000080003400000d1b6e62006400000000000000002140000001100010000000000000000000000000a00"/152], 0x98}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20000004}, 0x20040814) recvmsg(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x140) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xeb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a70f00659f44304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x4, @perf_config_ext={0x3, 0x4}, 0xaa7a, 0x0, 0x0, 0x3, 0x6, 0x804000, 0xfffc, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xfffffffefffeffff, 0xffffffffffffffff, 0x1) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0c4}, 0x40011) socketpair$nbd(0x1, 0x1, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000540)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r5, &(0x7f0000000080)='freezer.self_freezing\x00', 0x275a, 0x0) socket$kcm(0x2c, 0x7, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x8, 0x3fe, 0x7fffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, 0x0, &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r6, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0}, 0x50) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000001c0)=@bpf_lsm={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="8510000004000000950080000000000018000000000000000000000000000002950000000000000085100000fcffffff"], &(0x7f00000000c0)='GPL\x00'}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r7, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x200000000000014f, 0xfffffffffffffc9e, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, 0x0, 0xfffffffffffffe47, 0x10, 0x8, 0x2, 0x0}}, 0x10) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x2, 0x300}, {0x6e, 0x0, 0xd}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xc, 0x9, 0x0, 0x0, 0x20000f19}, {0x3, 0x0, 0x6, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0xf1}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x69, 0x10, 0x6f}, [@ldst={0x4}]}, &(0x7f0000000080)='GPL\x00', 0x2, 0x3f7, &(0x7f000000cf3d)=""/195}, 0x48) 1.02799292s ago: executing program 8 (id=5421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'veth0_to_bridge\x00'}) ioctl$KDGKBDIACR(r2, 0x4b4a, 0xffffffffffffffff) sendmmsg(0xffffffffffffffff, &(0x7f0000001900)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001780)=[{0x10, 0x10e, 0x9}], 0x10}}], 0x1, 0x8850) 962.24907ms ago: executing program 1 (id=5422): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'bond0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 854.498011ms ago: executing program 1 (id=5424): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000840)={r1, @in6={{0xa, 0x4e22, 0x80, @empty, 0x5d4e}}, 0x2, 0x2, 0x614, 0x4, 0xd, 0x7, 0x4}, 0x9c) 624.583993ms ago: executing program 7 (id=5427): socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$sg(&(0x7f00000000c0), 0x0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff4000/0xc000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b77, &(0x7f0000000040)={0x0, 0x36ba, 0xf000, 0x0, 0x3c}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000180)=0xb4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 503.851665ms ago: executing program 7 (id=5428): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x3, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000380)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}, 0x4, 0x4, 0x1}}, 0x26) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x40047459, 0xfffffffffffffffe) 503.157045ms ago: executing program 3 (id=5429): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x2a801, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000240)={{}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x4c, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x38, 0x1, [@m_skbedit={0x34, 0x15, 0x0, 0x0, {{0xc}, {0x4}, {0x6, 0x6, "8aee"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0x4c}, 0x1, 0x2b1e}, 0x0) 483.449945ms ago: executing program 6 (id=5430): r0 = socket(0x2b, 0x1, 0x1) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1f, 0x2, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x60) 448.297266ms ago: executing program 7 (id=5431): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket$unix(0x1, 0x2, 0x0) connect$unix(r3, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ppoll(&(0x7f0000000040)=[{r2, 0x4236}, {r3, 0x3328}, {r0, 0x1}], 0x3, 0x0, 0x0, 0x0) close(r1) 447.529296ms ago: executing program 3 (id=5432): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) mknod$loop(&(0x7f0000000140)='./file0\x00', 0x8fff, 0x0) execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000001140)={[&(0x7f0000000180)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01', &(0x7f0000000380)='\x7f\xb7\xc3\x7f\xa5a\xd6A*c\x9b\xd8R\xf02b\xefA|uiWb\x8f\xee\x1c\xc5\xdb^\x11\x16h\x83\x94y\x89\xf1Y{\x87\xd5\xf3\xccMr\xc5\xbdT\x9e\xc4\x84\x06\xcd\x8b\xcd\t\x01']}, 0x0) 427.998746ms ago: executing program 7 (id=5433): perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff7ffa}, 0x0, 0x35, 0x43a1bd76, 0x7, 0x3, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0xa0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x9, 0x4022, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x0, 0xfffffffc, 0x5, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x0, 0x2, 0x0, 0x80}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x70}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x200}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x8946, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8914, &(0x7f0000000080)) 374.387826ms ago: executing program 6 (id=5434): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="020000000000000002000000e0"], 0x190) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB='\n\x00'], 0x2c}], 0x1}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) 344.663917ms ago: executing program 3 (id=5435): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xa}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffff7, 0x1}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x4207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031411d3fc220000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 269.582177ms ago: executing program 7 (id=5436): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010000ff1f00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 236.666928ms ago: executing program 6 (id=5437): timer_create(0x3, 0x0, &(0x7f0000044000)=0x0) timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) rt_sigprocmask(0x0, &(0x7f0000000040)={[0xfffffffffffffffb]}, 0x0, 0x8) timer_settime(r0, 0x1, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xe) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000004c0), 0x800, 0x0) ioctl$EVIOCGPROP(r2, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSMRU1(r2, 0x4020744f, &(0x7f0000000080)=0x1) 154.480609ms ago: executing program 3 (id=5438): r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x6}, 0x18) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000880)={0x14, r4, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 151.072129ms ago: executing program 7 (id=5439): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8, 0x2, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r6) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 0s ago: executing program 1 (id=5440): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) preadv(r0, &(0x7f0000000340)=[{&(0x7f0000000000)=""/30, 0x1e}], 0x1, 0x8, 0x2) kernel console output (not intermixed with test programs): red promiscuous mode [ 378.333745][T14552] syzkaller0: entered allmulticast mode [ 378.766903][T14586] IPv6: Can't replace route, no match found [ 378.812584][T14589] veth1_to_bond: entered allmulticast mode [ 379.099166][T14610] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4008'. [ 379.189961][T14616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.226381][T14616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.254492][T14616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.302211][T14616] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.771855][T14653] IPv6: Can't replace route, no match found [ 379.853859][T14658] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.865341][T14658] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.881314][T14658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14658 comm=syz.3.4028 [ 379.912449][T14658] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4028'. [ 379.960160][T14658] vlan2: entered allmulticast mode [ 379.978107][T14658] bond1: entered allmulticast mode [ 380.083253][T14670] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4032'. [ 380.453183][T14687] netlink: 16255 bytes leftover after parsing attributes in process `syz.0.4040'. [ 380.531196][T14690] veth1_to_bond: entered allmulticast mode [ 380.787881][ T28] audit: type=1400 audit(2000000070.250:852): avc: denied { getopt } for pid=14703 comm="syz.1.4049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 381.635004][T14740] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.4064'. [ 381.715630][T14745] netlink: 'syz.3.4066': attribute type 10 has an invalid length. [ 381.734767][T14748] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4068'. [ 381.755717][T14745] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 381.807143][T14745] 8021q: adding VLAN 0 to HW filter on device bond2 [ 381.841617][T14745] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 381.869014][T14745] bond2: (slave macvlan2): Enslaving as a backup interface with an up link [ 381.906242][ T7773] bond_slave_0: entered promiscuous mode [ 381.912001][ T7773] bond_slave_1: entered promiscuous mode [ 381.917932][ T7773] veth1_to_batadv: entered promiscuous mode [ 381.923989][ T7773] syz_tun: entered promiscuous mode [ 381.973419][T14772] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.4076'. [ 381.998862][T14775] IPv6: Can't replace route, no match found [ 382.691907][T14805] netlink: 16255 bytes leftover after parsing attributes in process `syz.3.4091'. [ 382.868485][T14807] syzkaller0: entered promiscuous mode [ 382.884410][T14807] syzkaller0: entered allmulticast mode [ 382.949148][T14823] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4098'. [ 383.189536][T14849] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4106'. [ 383.384820][T14863] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4112'. [ 383.973752][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 383.973769][ T28] audit: type=1400 audit(2000000073.440:854): avc: denied { ioctl } for pid=14865 comm="syz.3.4113" path="socket:[47293]" dev="sockfs" ino=47293 ioctlcmd=0x894c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 384.652162][T14900] netlink: 'syz.0.4126': attribute type 39 has an invalid length. [ 384.965435][T14939] syzkaller0: entered promiscuous mode [ 384.975464][T14939] syzkaller0: entered allmulticast mode [ 384.981074][ T28] audit: type=1400 audit(2000000074.440:855): avc: denied { read } for pid=14932 comm="syz.1.4141" lport=38957 faddr=::ffff:10.1.1.2 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 385.063248][T14944] syzkaller0: entered promiscuous mode [ 385.072381][T14944] syzkaller0: entered allmulticast mode [ 385.129262][T14959] __nla_validate_parse: 6 callbacks suppressed [ 385.129282][T14959] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4151'. [ 385.149026][T14956] netlink: 'syz.0.4150': attribute type 39 has an invalid length. [ 385.216008][ T28] audit: type=1400 audit(2000000074.670:856): avc: denied { create } for pid=14961 comm="syz.5.4152" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 385.274335][T14965] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4153'. [ 385.484221][T14979] syzkaller0: entered promiscuous mode [ 385.506224][T14979] syzkaller0: entered allmulticast mode [ 385.562565][T14989] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 385.573675][T14989] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 385.607040][T14991] netlink: 'syz.5.4164': attribute type 27 has an invalid length. [ 385.662707][T14991] bridge0: left allmulticast mode [ 385.761033][T14991] veth1_to_bond: left allmulticast mode [ 385.785017][T14991] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.798918][T14991] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 385.908246][T14995] syzkaller0: entered promiscuous mode [ 385.916868][T14995] syzkaller0: entered allmulticast mode [ 385.986582][ T6677] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.007365][ T6677] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.022148][ T6677] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.031537][ T6677] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.671105][ T28] audit: type=1400 audit(2000000076.130:857): avc: denied { mounton } for pid=15030 comm="syz.0.4179" path="/198/file0" dev="tmpfs" ino=1036 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 386.890477][T15049] netlink: 'syz.3.4189': attribute type 39 has an invalid length. [ 386.919528][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4192'. [ 387.507679][T15060] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.515019][T15060] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.956640][T15060] bridge0: entered allmulticast mode [ 388.282211][T15084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.294181][T15084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 388.380576][ T28] audit: type=1401 audit(2000000077.840:858): op=setxattr invalid_context="" [ 388.416998][T15092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4201'. [ 388.742532][T15107] netlink: 'syz.5.4209': attribute type 39 has an invalid length. [ 388.979985][T15119] 9p: Bad value for 'rfdno' [ 389.086750][T15121] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4214'. [ 389.581063][T15141] lo: Caught tx_queue_len zero misconfig [ 390.456580][T15169] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4233'. [ 390.598466][T15174] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4232'. [ 391.850722][T15193] netlink: 'syz.3.4238': attribute type 39 has an invalid length. [ 391.871734][T15192] syzkaller0: entered promiscuous mode [ 391.877894][T15192] syzkaller0: entered allmulticast mode [ 391.969129][T15200] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4242'. [ 392.067702][T15208] netlink: 17279 bytes leftover after parsing attributes in process `syz.3.4246'. [ 392.514307][T15231] netlink: 'syz.1.4253': attribute type 39 has an invalid length. [ 392.595278][T15239] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4256'. [ 392.705472][T15247] netlink: 17279 bytes leftover after parsing attributes in process `syz.6.4260'. [ 392.927266][T15261] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4266'. [ 392.956114][T15261] bridge0: entered allmulticast mode [ 392.957934][T15264] netlink: 172 bytes leftover after parsing attributes in process `syz.6.4268'. [ 392.965433][T15266] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4269'. [ 393.044412][T15269] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4264'. [ 393.585209][T15285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.594332][T15285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.793853][T15287] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.801077][T15287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.808550][T15287] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.815646][T15287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.855518][T15296] netlink: 'syz.0.4280': attribute type 1 has an invalid length. [ 393.864351][T15287] bridge0: left allmulticast mode [ 393.952025][T15301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.965867][T15287] veth1_to_bond: left allmulticast mode [ 394.082378][T15301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.124759][T15287] veth0_vlan: left allmulticast mode [ 394.233797][T15287] Ÿë: port 1(gretap0) entered blocking state [ 394.240081][T15287] Ÿë: port 1(gretap0) entered forwarding state [ 394.334341][ T2231] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 394.342020][ T2231] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 394.350103][ T2231] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 394.357911][ T2231] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 394.365821][ T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 394.374136][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 394.377799][T15296] bond1: entered promiscuous mode [ 394.387105][T15296] 8021q: adding VLAN 0 to HW filter on device bond1 [ 394.398385][T15300] bond1: entered allmulticast mode [ 394.410400][T15307] bond1: (slave bridge0): making interface the new active one [ 394.418201][T15307] bridge0: entered promiscuous mode [ 394.424001][T15307] bridge0: entered allmulticast mode [ 394.430346][T15307] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 394.566606][T15317] syzkaller0: entered promiscuous mode [ 394.572213][T15317] syzkaller0: entered allmulticast mode [ 394.722135][ T10] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 394.782111][ T10] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 394.856740][T15334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.865569][T15334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.879779][T15334] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.900629][T15334] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.941212][T15336] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.948379][T15336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.952164][ T3380] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 394.955853][T15336] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.970292][T15336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.988362][T15336] bridge0: left allmulticast mode [ 395.120316][T15336] 8021q: adding VLAN 0 to HW filter on device bond1 [ 395.212352][ T3380] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 396.092556][T15356] __nla_validate_parse: 5 callbacks suppressed [ 396.092574][T15356] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4300'. [ 396.194763][T15362] veth1_to_bond: entered allmulticast mode [ 396.240395][T15366] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4305'. [ 396.452499][T15382] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4311'. [ 396.528201][T15391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4315'. [ 396.759498][T15397] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4316'. [ 397.255063][T15407] netlink: 'syz.5.4319': attribute type 39 has an invalid length. [ 397.425814][T15419] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4324'. [ 398.238413][T15432] netlink: 68 bytes leftover after parsing attributes in process `syz.6.4328'. [ 398.373719][T15438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.397678][T15438] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.405015][T15440] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4331'. [ 398.512078][T15446] syzkaller0: entered promiscuous mode [ 398.517676][T15446] syzkaller0: entered allmulticast mode [ 398.548523][T15448] netlink: 'syz.6.4335': attribute type 39 has an invalid length. [ 398.642801][T15456] 9p: Bad value for 'wfdno' [ 398.962958][T15466] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8) [ 398.969640][T15466] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 398.977588][T15466] vhci_hcd vhci_hcd.0: Device attached [ 399.468417][T15468] vhci_hcd: connection closed [ 399.468784][ T2231] vhci_hcd vhci_hcd.3: stop threads [ 399.480916][T15477] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.489000][ T2231] vhci_hcd vhci_hcd.3: release socket [ 399.495007][ T2231] vhci_hcd vhci_hcd.3: disconnect device [ 399.500880][T15477] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.587265][T15483] syzkaller0: entered promiscuous mode [ 399.593951][T15483] syzkaller0: entered allmulticast mode [ 399.797179][T15496] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4353'. [ 399.942246][T15500] syzkaller0: entered promiscuous mode [ 399.947912][T15500] syzkaller0: entered allmulticast mode [ 400.086192][ T28] audit: type=1400 audit(2000000089.550:859): avc: denied { bind } for pid=15511 comm="syz.0.4360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 400.357247][T15535] syzkaller0: entered promiscuous mode [ 400.369500][T15535] syzkaller0: entered allmulticast mode [ 401.006669][T15559] netlink: 'syz.3.4380': attribute type 39 has an invalid length. [ 401.075338][T15562] netlink: 68 bytes leftover after parsing attributes in process `syz.5.4381'. [ 401.258812][T15573] syzkaller0: entered promiscuous mode [ 401.268787][T15573] syzkaller0: entered allmulticast mode [ 401.285388][T15571] veth1_to_bond: entered allmulticast mode [ 401.418604][T15584] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.437804][T15584] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.501184][T15590] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4393'. [ 401.533660][T15592] netlink: 'syz.1.4394': attribute type 1 has an invalid length. [ 401.588248][T15596] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4394'. [ 401.619304][T15592] bond1: entered promiscuous mode [ 401.624680][T15592] 8021q: adding VLAN 0 to HW filter on device bond1 [ 401.633574][T15596] bond1: entered allmulticast mode [ 401.670169][T15592] bond1: (slave bridge1): making interface the new active one [ 401.692159][T15592] bridge1: entered promiscuous mode [ 401.697747][T15592] bridge1: entered allmulticast mode [ 401.717953][T15592] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 401.829812][T15610] veth1_to_bond: entered allmulticast mode [ 401.862863][T15619] dvmrp8: entered allmulticast mode [ 401.876671][T15619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.886076][T15619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.895689][T15619] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 401.904867][T15619] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.945774][T15621] netlink: 'syz.1.4406': attribute type 39 has an invalid length. [ 402.742932][T15650] netlink: 'syz.5.4416': attribute type 1 has an invalid length. [ 402.801555][T15650] bond1: entered promiscuous mode [ 402.812016][T15656] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4416'. [ 402.846152][T15650] 8021q: adding VLAN 0 to HW filter on device bond1 [ 402.935592][T15658] bond1: (slave bridge1): making interface the new active one [ 402.956725][T15658] bridge1: entered promiscuous mode [ 402.966772][T15658] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 402.976065][T15656] bond1: entered allmulticast mode [ 402.981634][T15656] bridge1: entered allmulticast mode [ 403.077860][T15660] syzkaller0: entered promiscuous mode [ 403.091308][T15660] syzkaller0: entered allmulticast mode [ 403.201639][T15666] netlink: 'syz.3.4420': attribute type 27 has an invalid length. [ 403.273717][T15666] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.280985][T15666] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.309893][T15666] bond_slave_0: left promiscuous mode [ 403.323441][T15666] bond_slave_1: left promiscuous mode [ 403.332414][T15666] veth1_to_batadv: left promiscuous mode [ 403.365019][T15666] veth1_to_bond: left allmulticast mode [ 403.378890][T15666] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.389658][T15666] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.447117][T15669] syz_tun: left promiscuous mode [ 403.463317][T15669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 403.481525][T15669] 8021q: adding VLAN 0 to HW filter on device team0 [ 403.491929][T15669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.552174][T15669] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.559464][T15669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.575331][T15669] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.582474][T15669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.618480][T15669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.637051][T15669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.662947][T15669] veth1_vlan: left promiscuous mode [ 403.670305][T15669] veth0_vlan: left promiscuous mode [ 403.680230][T15669] veth0_vlan: entered promiscuous mode [ 403.705046][T15669] veth1_vlan: entered promiscuous mode [ 403.721909][T15669] veth1_macvtap: left promiscuous mode [ 403.729852][T15669] veth0_macvtap: left promiscuous mode [ 403.738603][T15669] veth0_macvtap: entered promiscuous mode [ 403.747096][T15669] veth1_macvtap: entered promiscuous mode [ 403.760832][T15669] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 403.773376][T15669] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 403.787144][T15669] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 403.798538][T15669] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 403.810229][T15669] 8021q: adding VLAN 0 to HW filter on device bond1 [ 403.821354][T15669] 8021q: adding VLAN 0 to HW filter on device bond2 [ 403.833818][T15669] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 403.844513][ T3395] bond_slave_0: entered promiscuous mode [ 403.850226][ T3395] bond_slave_1: entered promiscuous mode [ 403.856086][ T3395] veth1_to_batadv: entered promiscuous mode [ 403.862167][ T3395] syz_tun: entered promiscuous mode [ 404.051248][T15702] syzkaller0: entered promiscuous mode [ 404.057828][T15702] syzkaller0: entered allmulticast mode [ 404.129809][T15714] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4435'. [ 404.250661][T15730] netlink: 'syz.3.4439': attribute type 39 has an invalid length. [ 404.260421][T15728] netlink: 'syz.5.4442': attribute type 1 has an invalid length. [ 404.285296][T15728] bond2: entered promiscuous mode [ 404.290703][T15728] 8021q: adding VLAN 0 to HW filter on device bond2 [ 404.301574][T15728] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4442'. [ 404.311369][T15728] bond2: entered allmulticast mode [ 404.325092][T15728] bond2: (slave bridge2): making interface the new active one [ 404.333137][T15728] bridge2: entered promiscuous mode [ 404.338470][T15728] bridge2: entered allmulticast mode [ 404.347419][T15728] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 404.408185][T15744] syzkaller0: entered promiscuous mode [ 404.415557][T15744] syzkaller0: entered allmulticast mode [ 404.553951][T15764] netlink: 'syz.0.4457': attribute type 1 has an invalid length. [ 404.589389][T15764] bond2: entered promiscuous mode [ 404.594949][T15764] 8021q: adding VLAN 0 to HW filter on device bond2 [ 404.608342][T15764] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4457'. [ 404.623091][T15764] bond2: entered allmulticast mode [ 404.640342][T15764] bond2: (slave bridge1): making interface the new active one [ 404.648183][T15764] bridge1: entered promiscuous mode [ 404.653643][T15764] bridge1: entered allmulticast mode [ 404.660283][T15764] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 404.670656][T15770] veth1_to_bond: entered allmulticast mode [ 404.822887][T15788] netlink: 204 bytes leftover after parsing attributes in process `syz.6.4465'. [ 404.923787][T15800] netlink: 'syz.5.4474': attribute type 1 has an invalid length. [ 404.968459][T15800] bond3: entered promiscuous mode [ 404.974318][T15800] 8021q: adding VLAN 0 to HW filter on device bond3 [ 404.988292][T15800] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4474'. [ 404.997601][T15800] bond3: entered allmulticast mode [ 405.014731][T15800] bond3: (slave bridge3): making interface the new active one [ 405.023041][T15800] bridge3: entered promiscuous mode [ 405.028475][T15800] bridge3: entered allmulticast mode [ 405.036308][T15800] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 405.442751][T15842] netlink: 'syz.1.4489': attribute type 1 has an invalid length. [ 405.443945][T15840] netlink: 68 bytes leftover after parsing attributes in process `syz.3.4488'. [ 405.459909][T15842] bond2: entered promiscuous mode [ 405.467350][T15842] 8021q: adding VLAN 0 to HW filter on device bond2 [ 405.481151][T15842] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4489'. [ 405.490507][T15842] bond2: entered allmulticast mode [ 405.507307][T15842] bond2: (slave bridge2): making interface the new active one [ 405.515720][T15842] bridge2: entered promiscuous mode [ 405.521193][T15842] bridge2: entered allmulticast mode [ 405.528917][T15842] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 405.863866][ T28] audit: type=1400 audit(2000000095.330:860): avc: denied { create } for pid=15876 comm="syz.3.4499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 406.262040][ C1] ip6_tnl_xmit_ctl: 2 callbacks suppressed [ 406.262057][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 406.264552][T15891] syzkaller0: entered promiscuous mode [ 406.319716][T15891] syzkaller0: entered allmulticast mode [ 406.892112][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 407.924456][T15921] syzkaller0: entered promiscuous mode [ 407.931892][T15921] syzkaller0: entered allmulticast mode [ 408.031797][T15926] syzkaller0: entered promiscuous mode [ 408.037529][T15926] syzkaller0: entered allmulticast mode [ 408.690348][T15943] __nla_validate_parse: 1 callbacks suppressed [ 408.690434][T15943] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4521'. [ 409.447844][T15965] syzkaller0: entered promiscuous mode [ 409.489325][T15965] syzkaller0: entered allmulticast mode [ 410.130664][T15990] netlink: 'syz.6.4537': attribute type 27 has an invalid length. [ 410.216189][T15990] Ÿë: port 1(gretap0) entered disabled state [ 410.284623][T15990] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.292034][T15990] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.579057][T15990] veth1_to_bond: left allmulticast mode [ 410.585572][T16012] netlink: 'syz.1.4546': attribute type 1 has an invalid length. [ 410.599846][T15990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.610406][T15990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.646354][T16016] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4546'. [ 410.681508][T15995] erspan0: left promiscuous mode [ 410.701830][T15995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.711465][T15995] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.721594][T15995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.736888][T15995] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.744450][T15995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.754934][T15995] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.762125][T15995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.780640][T15995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.790604][T15995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.804547][T15995] veth1_vlan: left promiscuous mode [ 410.810677][T15995] veth0_vlan: left promiscuous mode [ 410.822162][T15995] veth0_vlan: entered promiscuous mode [ 410.830835][T15995] veth1_vlan: entered promiscuous mode [ 410.840209][T15995] veth1_macvtap: left promiscuous mode [ 410.846865][T15995] veth0_macvtap: left promiscuous mode [ 410.854203][T15995] veth0_macvtap: entered promiscuous mode [ 410.861034][T15995] veth1_macvtap: entered promiscuous mode [ 410.870233][T15995] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 410.879282][T15995] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 410.887965][T15995] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 410.899707][T15995] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 410.909833][T15995] Ÿë: port 1(gretap0) entered blocking state [ 410.915981][T15995] Ÿë: port 1(gretap0) entered forwarding state [ 410.924608][T15995] erspan0: entered promiscuous mode [ 410.979158][T16012] bond3: entered promiscuous mode [ 410.984658][T16012] 8021q: adding VLAN 0 to HW filter on device bond3 [ 410.994959][ T2231] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 410.998669][T16022] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4547'. [ 411.004501][ T2231] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 411.019678][ T2231] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 411.022110][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 411.027852][ T2231] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 411.042604][ T1040] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 411.050154][T16020] bond3: (slave bridge3): making interface the new active one [ 411.057912][T16020] bridge3: entered promiscuous mode [ 411.064890][T16020] bond3: (slave bridge3): Enslaving as an active interface with an up link [ 411.141600][T16033] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4552'. [ 411.150911][T16033] netlink: 392 bytes leftover after parsing attributes in process `syz.5.4552'. [ 411.169540][T16033] netlink: 12 bytes leftover after parsing attributes in process `syz.5.4552'. [ 411.335117][T16054] netlink: 'syz.5.4560': attribute type 1 has an invalid length. [ 411.382143][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 411.383179][ T3388] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 411.392584][T16057] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4560'. [ 411.404307][T16054] bond4: entered promiscuous mode [ 411.439671][T16054] 8021q: adding VLAN 0 to HW filter on device bond4 [ 411.452290][ T9] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 411.506279][T16054] bond4: (slave bridge4): making interface the new active one [ 411.530025][T16054] bridge4: entered promiscuous mode [ 411.551869][T16054] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 411.782387][ T23] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 411.946597][T16071] netlink: 'syz.3.4566': attribute type 1 has an invalid length. [ 411.978074][T16071] netlink: 'syz.3.4566': attribute type 4 has an invalid length. [ 412.021925][T16071] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.4566'. [ 412.082698][T16075] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4567'. [ 412.112235][T16075] netlink: 392 bytes leftover after parsing attributes in process `syz.6.4567'. [ 413.053611][T16125] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.082805][T16125] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.673913][T16147] netlink: 'syz.1.4600': attribute type 27 has an invalid length. [ 413.715701][T16153] netlink: 'syz.3.4603': attribute type 1 has an invalid length. [ 413.753477][T16147] sit0: left allmulticast mode [ 413.768587][T16156] __nla_validate_parse: 9 callbacks suppressed [ 413.768665][T16156] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4603'. [ 413.786364][T16147] bridge0: left allmulticast mode [ 413.828939][T16147] veth1_to_bond: left allmulticast mode [ 413.848132][T16147] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.865586][T16147] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.920793][T16147] bond1: left promiscuous mode [ 413.931292][T16147] bridge1: left promiscuous mode [ 413.937355][T16147] bond1: left allmulticast mode [ 413.942713][T16147] bridge1: left allmulticast mode [ 413.949224][T16147] bond2: left promiscuous mode [ 413.958348][T16147] bridge2: left promiscuous mode [ 413.968584][T16147] bond2: left allmulticast mode [ 413.978520][T16147] bridge2: left allmulticast mode [ 413.990831][T16147] bond3: left promiscuous mode [ 414.000811][T16147] bridge3: left promiscuous mode [ 414.062625][T16154] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.073864][T16154] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.095105][T16154] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.117938][T16154] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.125113][T16154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.144199][T16154] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.151586][T16154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 414.190218][T16154] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 414.219425][T16154] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 414.250194][T16154] veth1_vlan: left promiscuous mode [ 414.256254][T16154] veth0_vlan: left promiscuous mode [ 414.262554][T16154] veth0_vlan: entered promiscuous mode [ 414.271194][T16154] veth1_vlan: entered promiscuous mode [ 414.337508][T16154] veth1_macvtap: left promiscuous mode [ 414.344736][T16154] veth1_macvtap: entered promiscuous mode [ 414.354405][T16154] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 414.364281][T16154] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 414.372906][T16154] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 414.381506][T16154] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 414.414879][T16154] 8021q: adding VLAN 0 to HW filter on device bond1 [ 414.431064][T16154] 8021q: adding VLAN 0 to HW filter on device bond2 [ 414.449572][T16154] 8021q: adding VLAN 0 to HW filter on device bond3 [ 414.510806][T16153] bond3: entered promiscuous mode [ 414.522304][T16153] 8021q: adding VLAN 0 to HW filter on device bond3 [ 414.572993][ T6696] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.577348][T16176] netlink: 'syz.6.4610': attribute type 39 has an invalid length. [ 414.584828][ T6696] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.607394][T16159] bond3: (slave bridge1): making interface the new active one [ 414.615702][T16159] bridge1: entered promiscuous mode [ 414.622599][T16159] bond3: (slave bridge1): Enslaving as an active interface with an up link [ 414.648715][ T6696] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.668152][ T6696] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.927274][T16193] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4612'. [ 414.972077][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 415.372044][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 415.645369][T16208] syzkaller0: entered promiscuous mode [ 415.653165][T16208] syzkaller0: entered allmulticast mode [ 415.659989][T16213] netlink: 'syz.1.4622': attribute type 1 has an invalid length. [ 415.679007][T16213] bond4: entered promiscuous mode [ 415.684542][T16213] 8021q: adding VLAN 0 to HW filter on device bond4 [ 415.695727][T16213] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4622'. [ 415.782540][T16221] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 415.791610][T16221] tipc: Started in network mode [ 415.796810][T16221] tipc: Node identity c2e5b0b32fa7, cluster identity 4711 [ 415.804267][T16221] tipc: Enabled bearer , priority 0 [ 415.822939][T16220] tipc: Disabling bearer [ 415.846951][T16213] bond4: (slave bridge4): making interface the new active one [ 415.854730][T16213] bridge4: entered promiscuous mode [ 415.861561][T16213] bond4: (slave bridge4): Enslaving as an active interface with an up link [ 416.131928][T16230] xt_NFQUEUE: number of total queues is 0 [ 416.204831][ T6677] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.438204][ T6677] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.547062][T16238] syzkaller0: entered promiscuous mode [ 416.553666][T16238] syzkaller0: entered allmulticast mode [ 416.641641][T16254] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4634'. [ 416.657023][ T6677] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.670047][T16254] netlink: 'syz.5.4634': attribute type 20 has an invalid length. [ 416.746369][T16254] netlink: 'syz.5.4634': attribute type 22 has an invalid length. [ 416.796573][ T6677] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.810110][T16254] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4634'. [ 417.143601][ T6677] bridge_slave_1: left allmulticast mode [ 417.187022][ T6677] bridge_slave_1: left promiscuous mode [ 417.192825][ T6677] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.208340][ T6677] bridge_slave_0: left allmulticast mode [ 417.209638][T16261] netlink: 'syz.5.4636': attribute type 1 has an invalid length. [ 417.222115][ T6677] bridge_slave_0: left promiscuous mode [ 417.222232][ T6677] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.243533][ T6677] gretap0: left allmulticast mode [ 417.251863][ T6677] gretap0: left promiscuous mode [ 417.258750][ T6677] Ÿë: port 1(gretap0) entered disabled state [ 417.266836][ T6677] dvmrp8: left allmulticast mode [ 417.292369][T16264] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4636'. [ 417.445140][ T6677] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.459496][ T6677] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.470069][ T6677] bond0 (unregistering): Released all slaves [ 417.497914][T16261] bond5: entered promiscuous mode [ 417.504585][T16261] 8021q: adding VLAN 0 to HW filter on device bond5 [ 417.524428][T16275] bond5: (slave bridge5): making interface the new active one [ 417.533448][T16275] bridge5: entered promiscuous mode [ 417.540989][T16275] bond5: (slave bridge5): Enslaving as an active interface with an up link [ 417.573947][ T6677] hsr_slave_0: left promiscuous mode [ 417.595713][ T6677] hsr_slave_1: left promiscuous mode [ 417.609146][ T6677] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 417.618887][ T6677] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 417.642925][ T6677] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 417.654661][ T6677] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 417.785262][ T6677] veth1_macvtap: left promiscuous mode [ 417.800456][ T6677] veth0_macvtap: left promiscuous mode [ 417.811395][ T6677] veth1_vlan: left promiscuous mode [ 417.813943][ T28] audit: type=1400 audit(2000000107.270:861): avc: denied { write } for pid=16283 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.820263][ T6677] veth0_vlan: left promiscuous mode [ 417.889526][T16315] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4648'. [ 417.900079][ T28] audit: type=1400 audit(2000000107.360:862): avc: denied { write } for pid=16312 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 417.975397][ T6677] team0 (unregistering): Port device team_slave_1 removed [ 417.988046][ T6677] team0 (unregistering): Port device team_slave_0 removed [ 418.045609][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 418.191074][T16349] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4659'. [ 418.228155][ T28] audit: type=1400 audit(2000000107.690:863): avc: denied { write } for pid=16334 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 418.283632][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10 [ 418.285211][ T28] audit: type=1400 audit(2000000107.710:864): avc: denied { write } for pid=16355 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 418.333152][ T6677] IPVS: stop unused estimator thread 0... [ 418.412755][T16242] bridge0: port 1(bridge_slave_0) entered blocking state [ 418.423877][T16242] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.431722][T16242] bridge_slave_0: entered allmulticast mode [ 418.438462][T16242] bridge_slave_0: entered promiscuous mode [ 418.445529][T16242] bridge0: port 2(bridge_slave_1) entered blocking state [ 418.452852][T16242] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.460221][T16242] bridge_slave_1: entered allmulticast mode [ 418.467238][T16242] bridge_slave_1: entered promiscuous mode [ 418.554737][T16374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4667'. [ 418.566506][T16242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 418.577621][T16242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.626705][T16374] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.634190][T16374] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.669998][T16374] bridge0: entered allmulticast mode [ 418.705449][T16242] team0: Port device team_slave_0 added [ 418.711217][ T28] audit: type=1400 audit(2000000108.170:865): avc: denied { write } for pid=16380 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 418.742278][T16242] team0: Port device team_slave_1 added [ 418.765672][T16397] netlink: 260 bytes leftover after parsing attributes in process `syz.1.4670'. [ 418.777047][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12 [ 418.810361][T16242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.817604][ T28] audit: type=1400 audit(2000000108.190:866): avc: denied { write } for pid=16394 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 418.846044][T16242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.879840][T16242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.891622][T16242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.901371][T16242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.901747][T16403] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4674'. [ 418.928269][T16242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.979493][T16410] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4675'. [ 418.992124][T16401] veth1_to_bond: entered allmulticast mode [ 419.031868][T16242] hsr_slave_0: entered promiscuous mode [ 419.049177][T16242] hsr_slave_1: entered promiscuous mode [ 419.060746][T16406] tipc: Started in network mode [ 419.065872][T16406] tipc: Node identity 9682e0313bce, cluster identity 4711 [ 419.073450][T16406] tipc: Enabled bearer , priority 0 [ 419.091739][T16405] tipc: Disabling bearer [ 419.155273][T16416] syzkaller0: entered promiscuous mode [ 419.169635][T16416] syzkaller0: entered allmulticast mode [ 419.200767][ T28] audit: type=1400 audit(2000000108.660:867): avc: denied { write } for pid=16420 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.243769][ T28] audit: type=1400 audit(2000000108.710:868): avc: denied { write } for pid=16434 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.268743][T16428] syzkaller0: entered promiscuous mode [ 419.276465][T16428] syzkaller0: entered allmulticast mode [ 419.286775][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11 [ 419.399299][T16448] syz_tun: entered allmulticast mode [ 419.405588][T16447] syz_tun: left allmulticast mode [ 419.554268][ T28] audit: type=1400 audit(2000000109.020:869): avc: denied { write } for pid=16449 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 419.582316][T16478] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.592517][T16478] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.600329][ T28] audit: type=1326 audit(2000000109.050:870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16458 comm="syz.0.4687" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1cbd7fcdd9 code=0x7fc00000 [ 419.681120][T16242] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 419.755167][T16494] netlink: 14 bytes leftover after parsing attributes in process `syz.0.4692'. [ 419.776292][T16242] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 419.798400][T16242] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 419.823378][T16242] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 419.855295][T16242] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 419.878829][T16242] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 419.912765][T16242] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 419.937199][T16242] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 419.973955][T16517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.992168][T16517] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 420.052577][T16242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 420.072721][T16242] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.094536][ T6677] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.101678][ T6677] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.124074][ T6677] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.131368][ T6677] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.291221][T16550] syzkaller0: entered promiscuous mode [ 420.304043][T16550] syzkaller0: entered allmulticast mode [ 420.486397][T16242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.791098][T16242] veth0_vlan: entered promiscuous mode [ 420.808978][T16242] veth1_vlan: entered promiscuous mode [ 420.847604][T16618] netlink: 'syz.3.4711': attribute type 1 has an invalid length. [ 420.850810][T16242] veth0_macvtap: entered promiscuous mode [ 420.915113][T16620] syzkaller0: entered promiscuous mode [ 420.920826][T16620] syzkaller0: entered allmulticast mode [ 420.937783][T16618] bond4: entered promiscuous mode [ 420.943658][T16618] 8021q: adding VLAN 0 to HW filter on device bond4 [ 420.952932][T16242] veth1_macvtap: entered promiscuous mode [ 420.976512][T16618] bond4: (slave bridge2): making interface the new active one [ 420.984132][T16618] bridge2: entered promiscuous mode [ 420.990614][T16618] bond4: (slave bridge2): Enslaving as an active interface with an up link [ 421.026377][T16242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 421.064720][T16242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 421.081644][ T6704] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.095433][ T6704] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.112816][ T6704] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.142447][ T6704] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 421.181615][T16643] netlink: 216 bytes leftover after parsing attributes in process `syz.1.4721'. [ 421.907742][T16677] netlink: 216 bytes leftover after parsing attributes in process `syz.3.4733'. [ 422.319689][T16691] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4740'. [ 422.435977][T16699] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 422.459347][T16699] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 422.540728][T16710] sch_tbf: burst 555 is lower than device syzkaller0 mtu (1514) ! [ 422.550904][T16710] tipc: Enabled bearer , priority 0 [ 422.558893][T16709] tipc: Disabling bearer [ 422.686835][T16725] veth1_to_bond: left allmulticast mode [ 422.754844][T16725] bond1: left promiscuous mode [ 422.759827][T16725] bridge0: left promiscuous mode [ 422.765148][T16725] bond1: left allmulticast mode [ 422.772210][T16725] bridge0: left allmulticast mode [ 422.779226][T16725] bond2: left promiscuous mode [ 422.784352][T16725] bridge1: left promiscuous mode [ 422.789948][T16725] bond2: left allmulticast mode [ 422.795098][T16725] bridge1: left allmulticast mode [ 423.047441][T16756] netlink: 'syz.5.4769': attribute type 4 has an invalid length. [ 423.131646][T16766] tipc: Started in network mode [ 423.137420][T16766] tipc: Node identity f25ee29f6842, cluster identity 4711 [ 423.145339][T16766] tipc: Enabled bearer , priority 0 [ 423.160239][T16766] syzkaller0: entered promiscuous mode [ 423.166477][T16768] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.186582][T16766] syzkaller0: entered allmulticast mode [ 423.194409][T16768] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.196047][T16772] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4776'. [ 423.227069][T16766] tipc: Resetting bearer [ 423.235924][T16765] tipc: Resetting bearer [ 423.264593][T16765] tipc: Disabling bearer [ 423.281862][T16780] netlink: 'syz.5.4780': attribute type 1 has an invalid length. [ 423.298460][T16780] bond6: entered promiscuous mode [ 423.304432][T16780] 8021q: adding VLAN 0 to HW filter on device bond6 [ 423.316693][T16780] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4780'. [ 423.326397][T16780] bond6: entered allmulticast mode [ 423.339266][T16780] bond6: (slave bridge6): making interface the new active one [ 423.347383][T16780] bridge6: entered promiscuous mode [ 423.352921][T16780] bridge6: entered allmulticast mode [ 423.359982][T16780] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 423.438097][T16795] syzkaller0: entered promiscuous mode [ 423.447068][T16795] syzkaller0: entered allmulticast mode [ 423.461457][T16795] tipc: Enabled bearer , priority 0 [ 423.469019][T16794] tipc: Resetting bearer [ 423.479400][T16794] tipc: Disabling bearer [ 423.602977][T16809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.613929][T16809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 423.650833][T16815] netlink: 'syz.1.4795': attribute type 10 has an invalid length. [ 423.666360][T16815] 8021q: adding VLAN 0 to HW filter on device bond5 [ 423.680364][T16815] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 423.689926][T16815] bond5: (slave macvlan2): Enslaving as a backup interface with an up link [ 423.698852][ T3380] bond_slave_0: entered promiscuous mode [ 423.704924][ T3380] Ù: entered promiscuous mode [ 423.710207][ T3380] bridge0: entered promiscuous mode [ 423.734346][T16824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4799'. [ 423.747238][T16824] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4799'. [ 423.888934][T16842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 423.914447][T16842] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 424.161080][T16849] syzkaller0: entered promiscuous mode [ 424.167158][T16849] syzkaller0: entered allmulticast mode [ 424.268477][T16852] syzkaller0: entered promiscuous mode [ 424.288010][T16852] syzkaller0: entered allmulticast mode [ 424.449957][ T28] kauditd_printk_skb: 36 callbacks suppressed [ 424.449987][ T28] audit: type=1400 audit(2000000113.910:907): avc: denied { ioctl } for pid=16854 comm="syz.0.4810" path="socket:[55331]" dev="sockfs" ino=55331 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 425.349263][T16865] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.366428][T16865] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.129127][T16885] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4821'. [ 426.206190][T16887] syzkaller0: entered promiscuous mode [ 426.211850][T16887] syzkaller0: entered allmulticast mode [ 426.839520][ T28] audit: type=1400 audit(2000000115.950:908): avc: denied { ioctl } for pid=16902 comm="syz.0.4829" path="pid:[4026532600]" dev="nsfs" ino=4026532600 ioctlcmd=0xb701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 427.438384][T16916] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4834'. [ 427.525927][T16924] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4837'. [ 427.625082][ T28] audit: type=1400 audit(2000000117.090:909): avc: denied { map } for pid=16935 comm="syz.0.4843" path="/dev/bus/usb/005/001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 427.660507][ T28] audit: type=1400 audit(2000000117.090:910): avc: denied { execute } for pid=16935 comm="syz.0.4843" path="/dev/bus/usb/005/001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 427.940107][ T28] audit: type=1400 audit(2000000117.400:911): avc: denied { write } for pid=16951 comm="syz.6.4850" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 428.200676][T16960] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4852'. [ 428.407001][T16978] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4860'. [ 428.444178][T16978] hsr_slave_0: entered allmulticast mode [ 428.581274][T16992] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4866'. [ 428.616414][T16996] usb usb8: usbfs: process 16996 (syz.5.4868) did not claim interface 0 before use [ 428.748902][T17015] netlink: 'syz.5.4878': attribute type 1 has an invalid length. [ 428.769481][T17015] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4878'. [ 428.870544][T17025] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4880'. [ 429.156151][T17030] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 429.226290][T17030] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 429.288968][T17027] syzkaller0: entered promiscuous mode [ 429.335966][T17034] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4884'. [ 429.349381][T17027] syzkaller0: entered allmulticast mode [ 429.470071][T17043] 9p: Unknown access argument : -22 [ 429.528770][T17051] netlink: 204 bytes leftover after parsing attributes in process `syz.1.4892'. [ 429.641803][T17067] loop6: detected capacity change from 0 to 512 [ 430.604734][T17111] syzkaller0: entered promiscuous mode [ 430.610386][T17111] syzkaller0: entered allmulticast mode [ 430.811032][T17127] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 430.842478][T17127] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 431.708939][T17156] syzkaller0: entered promiscuous mode [ 431.762513][T17156] syzkaller0: entered allmulticast mode [ 431.781163][T17157] tipc: Started in network mode [ 431.798243][T17157] tipc: Node identity 161e6190d28e, cluster identity 4711 [ 431.822961][T17157] tipc: Enabled bearer , priority 0 [ 431.852489][T17155] tipc: Resetting bearer [ 431.902587][T17155] tipc: Disabling bearer [ 431.909295][T17159] __nla_validate_parse: 2 callbacks suppressed [ 431.909314][T17159] netlink: 204 bytes leftover after parsing attributes in process `syz.3.4930'. [ 432.165901][T17161] syzkaller0: entered promiscuous mode [ 432.196879][T17161] syzkaller0: entered allmulticast mode [ 432.615502][T17181] syzkaller0: entered promiscuous mode [ 432.633161][T17181] syzkaller0: entered allmulticast mode [ 432.766744][T17191] IPv6: Can't replace route, no match found [ 434.044965][T17230] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4958'. [ 434.160099][T17229] syzkaller0: entered promiscuous mode [ 434.181736][T17229] syzkaller0: entered allmulticast mode [ 434.219510][T17235] netlink: 'syz.0.4960': attribute type 27 has an invalid length. [ 434.328136][T17244] loop6: detected capacity change from 0 to 256 [ 434.400554][T17235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 434.435668][T17235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 434.456935][ T28] audit: type=1400 audit(2000000123.920:912): avc: denied { read } for pid=17251 comm="syz.5.4968" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 434.609229][T17258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4970'. [ 434.618694][ T28] audit: type=1400 audit(2000000123.940:913): avc: denied { open } for pid=17251 comm="syz.5.4968" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 435.054476][T17240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.063115][T17240] 8021q: adding VLAN 0 to HW filter on device team0 [ 435.071737][T17240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.097424][T17240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.106780][T17240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.120900][T17240] veth1_vlan: left promiscuous mode [ 435.129291][T17240] veth0_vlan: left promiscuous mode [ 435.135859][T17240] veth0_vlan: entered promiscuous mode [ 435.145014][T17240] veth1_vlan: entered promiscuous mode [ 435.154169][T17240] veth1_macvtap: left promiscuous mode [ 435.160423][T17240] veth0_macvtap: left promiscuous mode [ 435.167349][T17240] veth0_macvtap: entered promiscuous mode [ 435.174146][T17240] veth1_macvtap: entered promiscuous mode [ 435.183913][T17240] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 435.192492][T17240] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 435.200913][T17240] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 435.209533][T17240] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 435.219619][T17240] 8021q: adding VLAN 0 to HW filter on device bond1 [ 435.229067][T17240] 8021q: adding VLAN 0 to HW filter on device bond2 [ 435.342632][T17269] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4972'. [ 435.605461][ T28] audit: type=1400 audit(2000000125.050:914): avc: denied { mounton } for pid=17274 comm="syz.5.4976" path="/file0" dev="ramfs" ino=56127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 436.218024][T17295] netlink: 'syz.6.4982': attribute type 39 has an invalid length. [ 436.370116][T17301] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.436878][T17301] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.710303][T17308] syzkaller0: entered promiscuous mode [ 436.876489][T17308] syzkaller0: entered allmulticast mode [ 436.987041][T17319] netlink: 'syz.3.4989': attribute type 7 has an invalid length. [ 436.994920][T17319] netlink: 'syz.3.4989': attribute type 8 has an invalid length. [ 439.006381][T17340] dns_resolver: Unsupported content type (186) [ 439.440283][T17346] netlink: 'syz.0.5000': attribute type 27 has an invalid length. [ 440.579726][T17346] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 440.637512][T17346] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 440.664603][T17362] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 440.799013][T17352] 8021q: adding VLAN 0 to HW filter on device bond0 [ 440.823607][T17352] 8021q: adding VLAN 0 to HW filter on device team0 [ 440.842957][T17352] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.877026][T17352] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 440.886947][T17352] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 440.908755][T17352] veth1_vlan: left promiscuous mode [ 440.922935][T17352] veth0_vlan: left promiscuous mode [ 440.929210][T17352] veth0_vlan: entered promiscuous mode [ 440.946021][T17352] veth1_vlan: entered promiscuous mode [ 440.963267][T17352] veth1_macvtap: left promiscuous mode [ 440.969942][T17352] veth0_macvtap: left promiscuous mode [ 440.981361][T17352] veth0_macvtap: entered promiscuous mode [ 440.995416][T17352] veth1_macvtap: entered promiscuous mode [ 441.014112][T17352] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 441.027691][T17352] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 441.042306][T17352] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 441.055474][T17352] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 441.063690][T17367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 441.080140][T17352] 8021q: adding VLAN 0 to HW filter on device bond1 [ 441.094669][T17367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 441.106636][T17352] 8021q: adding VLAN 0 to HW filter on device bond2 [ 441.245779][ T28] audit: type=1400 audit(2000000130.710:915): avc: denied { sys_module } for pid=17368 comm="syz.1.5007" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 441.470882][T17382] netlink: 'syz.1.5010': attribute type 39 has an invalid length. [ 441.684181][T17394] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5015'. [ 441.719056][T17396] netlink: 'syz.3.5018': attribute type 27 has an invalid length. [ 441.749105][T17396] bridge0: left allmulticast mode [ 441.755976][T17396] bond_slave_0: left promiscuous mode [ 441.761756][T17396] bond_slave_1: left promiscuous mode [ 441.767943][T17396] veth1_to_batadv: left promiscuous mode [ 441.801459][T17396] veth1_to_bond: left allmulticast mode [ 441.831746][T17396] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 441.853329][T17396] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.170725][T17396] bond3: left promiscuous mode [ 442.215897][T17396] bridge1: left promiscuous mode [ 442.266323][T17396] bond4: left promiscuous mode [ 442.298318][T17396] bridge2: left promiscuous mode [ 442.892842][T17399] syz_tun: left promiscuous mode [ 442.906290][T17399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.039284][T17399] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.071088][T17399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 443.138104][T17399] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.145440][T17399] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.175095][T17399] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.182395][T17399] bridge0: port 2(bridge_slave_1) entered forwarding state [ 443.304873][T17399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 443.324106][T17399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 443.339043][T17421] netlink: 'syz.6.5024': attribute type 39 has an invalid length. [ 443.343138][T17399] veth1_vlan: left promiscuous mode [ 443.354451][T17399] veth0_vlan: left promiscuous mode [ 443.361610][T17399] veth0_vlan: entered promiscuous mode [ 443.374460][T17399] veth1_vlan: entered promiscuous mode [ 443.387064][T17399] veth1_macvtap: left promiscuous mode [ 443.393848][T17399] veth0_macvtap: left promiscuous mode [ 443.401633][T17399] veth0_macvtap: entered promiscuous mode [ 443.411018][T17399] veth1_macvtap: entered promiscuous mode [ 443.430603][T17399] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 443.441792][T17399] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 443.453463][T17399] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 443.465247][T17399] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 443.475422][T17399] 8021q: adding VLAN 0 to HW filter on device bond1 [ 443.486013][T17399] 8021q: adding VLAN 0 to HW filter on device bond2 [ 443.495654][T17399] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 443.507646][T17399] 8021q: adding VLAN 0 to HW filter on device bond3 [ 443.521354][T17399] 8021q: adding VLAN 0 to HW filter on device bond4 [ 443.596580][ T9] bond_slave_0: entered promiscuous mode [ 443.602415][ T9] bond_slave_1: entered promiscuous mode [ 443.608260][ T9] veth1_to_batadv: entered promiscuous mode [ 443.614454][ T9] syz_tun: entered promiscuous mode [ 443.786241][T17429] loop5: detected capacity change from 0 to 512 [ 443.825357][T17429] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.911923][ T28] audit: type=1400 audit(2000000133.370:916): avc: denied { read append } for pid=17428 comm="syz.5.5027" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 444.500516][T17444] netlink: 'syz.3.5031': attribute type 4 has an invalid length. [ 444.853923][ T28] audit: type=1400 audit(2000000133.370:917): avc: denied { open } for pid=17428 comm="syz.5.5027" path="/294/file0/file0/file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 444.911369][ T28] audit: type=1400 audit(2000000134.190:918): avc: denied { write } for pid=17428 comm="syz.5.5027" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 444.933983][ T28] audit: type=1400 audit(2000000134.190:919): avc: denied { read } for pid=17428 comm="syz.5.5027" name="file1" dev="loop5" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 444.980638][T17450] netlink: 'syz.1.5035': attribute type 27 has an invalid length. [ 445.007173][T13003] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 445.053181][T17450] bridge0: port 2(bridge_slave_1) entered disabled state [ 445.060553][T17450] bridge0: port 1(bridge_slave_0) entered disabled state [ 445.132153][T17450] bond_slave_0: left promiscuous mode [ 445.181047][T17450] Ù: left promiscuous mode [ 445.355161][T17450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 445.416327][T17450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 445.587742][T17450] bond4: left promiscuous mode [ 445.597299][T17450] bridge4: left promiscuous mode [ 445.645694][T17455] bridge0: left promiscuous mode [ 445.651924][T17455] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.692280][T17455] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.714953][T17455] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 445.752338][T17455] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.759640][T17455] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.775403][T17455] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.782815][T17455] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.801036][T17455] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.811266][T17455] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.829970][T17455] veth1_vlan: left promiscuous mode [ 445.837825][T17455] veth0_vlan: left promiscuous mode [ 445.845475][T17455] veth0_vlan: entered promiscuous mode [ 445.855654][T17455] veth1_vlan: entered promiscuous mode [ 445.867513][T17455] veth1_macvtap: left promiscuous mode [ 445.875412][T17455] veth1_macvtap: entered promiscuous mode [ 445.886951][T17455] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 445.906398][T17455] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 445.917332][T17455] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 445.927923][T17455] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 445.940794][T17455] 8021q: adding VLAN 0 to HW filter on device bond1 [ 445.953977][T17455] 8021q: adding VLAN 0 to HW filter on device bond2 [ 445.969187][T17455] 8021q: adding VLAN 0 to HW filter on device bond3 [ 445.982393][T17471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 445.983281][T17455] 8021q: adding VLAN 0 to HW filter on device bond4 [ 445.993184][T17471] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.001074][T17455] 8021q: adding VLAN 0 to HW filter on device bond5 [ 446.016547][T17455] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 446.039142][T17453] veth1_to_bond: entered allmulticast mode [ 446.147311][ T23] bond_slave_0: entered promiscuous mode [ 446.153181][ T23] Ù: entered promiscuous mode [ 446.172394][ T23] bridge0: entered promiscuous mode [ 446.401174][ T28] audit: type=1326 audit(2000000135.860:920): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17483 comm="syz.1.5048" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121a79cdd9 code=0x7ffc0000 [ 446.466598][ T28] audit: type=1326 audit(2000000135.860:921): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17483 comm="syz.1.5048" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121a79cdd9 code=0x7ffc0000 [ 447.336319][ T28] audit: type=1326 audit(2000000135.860:922): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17483 comm="syz.1.5048" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121a79cdd9 code=0x7ffc0000 [ 447.996363][T17498] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5052'. [ 448.008342][ T28] audit: type=1326 audit(2000000135.860:923): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17483 comm="syz.1.5048" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f121a79cdd9 code=0x7ffc0000 [ 448.045803][T17498] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5052'. [ 448.048325][ T9] kernel read not supported for file /cpu/0/msr (pid: 9 comm: kworker/0:0) [ 448.064298][ T3416] kernel write not supported for file /cpu/0/msr (pid: 3416 comm: kworker/0:6) [ 448.088631][ T28] audit: type=1326 audit(2000000135.860:924): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17483 comm="syz.1.5048" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121a79cdd9 code=0x7ffc0000 [ 448.248705][T17509] netlink: 'syz.6.5056': attribute type 27 has an invalid length. [ 448.257094][ T28] audit: type=1326 audit(2000000135.860:925): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17483 comm="syz.1.5048" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121a79cdd9 code=0x7ffc0000 [ 448.283211][ T28] audit: type=1326 audit(2000000135.860:926): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17483 comm="syz.1.5048" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121a79cdd9 code=0x7ffc0000 [ 448.310056][ T28] audit: type=1326 audit(2000000135.860:927): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17483 comm="syz.1.5048" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121a79cdd9 code=0x7ffc0000 [ 448.336273][ T28] audit: type=1326 audit(2000000135.860:928): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17483 comm="syz.1.5048" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f121a79cdd9 code=0x7ffc0000 [ 448.443146][ T28] audit: type=1326 audit(2000000135.860:929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17483 comm="syz.1.5048" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7f121a79cdd9 code=0x7ffc0000 [ 448.567120][T17509] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.574423][T17509] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.728338][T17509] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.756869][T17509] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 448.769624][T17509] hsr_slave_0: left allmulticast mode [ 448.837488][T17510] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.846796][T17510] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.858247][T17510] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 448.895057][T17510] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.902312][T17510] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.928545][T17510] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.935688][T17510] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.985827][T17510] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 448.996429][T17510] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.011240][T17510] veth1_vlan: left promiscuous mode [ 449.017621][T17510] veth0_vlan: left promiscuous mode [ 449.023955][T17510] veth0_vlan: entered promiscuous mode [ 449.033359][T17510] veth1_vlan: entered promiscuous mode [ 449.045373][T17510] veth1_macvtap: left promiscuous mode [ 449.052745][T17510] veth0_macvtap: left promiscuous mode [ 449.060686][T17510] veth0_macvtap: entered promiscuous mode [ 449.069082][T17510] veth1_macvtap: entered promiscuous mode [ 449.082742][T17510] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 449.093345][T17510] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 449.122506][T17510] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 449.190348][T17510] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 449.774058][T17532] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=1258 sclass=netlink_audit_socket pid=17532 comm=syz.6.5063 [ 450.273503][T17540] loop5: detected capacity change from 0 to 512 [ 450.328956][T17540] EXT4-fs: test_dummy_encryption option not supported [ 450.741862][T17540] netlink: 64 bytes leftover after parsing attributes in process `syz.5.5066'. [ 452.119132][T17567] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5075'. [ 452.436882][T17578] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 452.523261][T17578] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 452.736407][T17587] netlink: 'syz.1.5080': attribute type 7 has an invalid length. [ 452.744467][T17587] netlink: 'syz.1.5080': attribute type 8 has an invalid length. [ 452.860273][T17586] veth1_to_bond: entered allmulticast mode [ 453.356413][T17615] netlink: 'syz.5.5088': attribute type 1 has an invalid length. [ 453.379771][T17619] loop6: detected capacity change from 0 to 512 [ 453.470447][T17622] netlink: 28 bytes leftover after parsing attributes in process `syz.5.5088'. [ 453.496620][T17615] bond7: entered promiscuous mode [ 453.502239][T17615] 8021q: adding VLAN 0 to HW filter on device bond7 [ 453.515754][T17619] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 453.531627][T17619] ext4 filesystem being mounted at /69/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 453.592018][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 453.592035][ T28] audit: type=1400 audit(2000000143.010:965): avc: denied { mounton } for pid=17618 comm="syz.6.5090" path="/69/bus" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 453.639768][ T28] audit: type=1400 audit(2000000143.010:966): avc: denied { mount } for pid=17618 comm="syz.6.5090" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 453.745862][T16242] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.012070][T17660] netlink: 'syz.5.5099': attribute type 7 has an invalid length. [ 455.019839][T17660] netlink: 'syz.5.5099': attribute type 8 has an invalid length. [ 455.265648][T17670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 455.275322][T17670] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.320244][T17675] loop1: detected capacity change from 0 to 256 [ 455.328428][ T28] audit: type=1400 audit(2000000144.790:967): avc: denied { create } for pid=17671 comm="syz.0.5106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 455.378026][ T28] audit: type=1400 audit(2000000144.790:968): avc: denied { write } for pid=17671 comm="syz.0.5106" path="socket:[56945]" dev="sockfs" ino=56945 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 455.726571][T17693] 8021q: adding VLAN 0 to HW filter on device .` [ 456.000702][T17693] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.016247][T17693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.143855][T17693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 456.154639][T17693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 456.168346][T17693] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 456.188092][ T6681] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.195691][ T6681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.205308][ T6681] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.212494][ T6681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.397809][T17714] loop5: detected capacity change from 0 to 4096 [ 456.410337][T17714] EXT4-fs: test_dummy_encryption option not supported [ 456.539286][T17725] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 456.549505][T17725] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 456.670500][T17731] loop3: detected capacity change from 0 to 1024 [ 456.677941][T17731] EXT4-fs: Ignoring removed orlov option [ 456.701844][T17731] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.725508][ T28] audit: type=1400 audit(2000000146.190:969): avc: denied { setattr } for pid=17730 comm="syz.3.5128" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 456.748633][ T28] audit: type=1400 audit(2000000146.190:970): avc: denied { write } for pid=17730 comm="syz.3.5128" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 456.771657][ T28] audit: type=1400 audit(2000000146.190:971): avc: denied { write } for pid=17730 comm="syz.3.5128" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 456.794441][ T28] audit: type=1400 audit(2000000146.190:972): avc: denied { rename } for pid=17730 comm="syz.3.5128" name="file0" dev="loop3" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 456.796785][T11873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.817187][ T28] audit: type=1400 audit(2000000146.190:973): avc: denied { unlink } for pid=17730 comm="syz.3.5128" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 457.217707][T17745] netlink: 'syz.0.5132': attribute type 4 has an invalid length. [ 458.032163][T17756] usb usb5: usbfs: process 17756 (syz.5.5135) did not claim interface 0 before use [ 458.407291][T17771] loop0: detected capacity change from 0 to 512 [ 458.422770][T17771] EXT4-fs: Ignoring removed bh option [ 458.444925][T17771] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 458.533248][T17771] EXT4-fs (loop0): 1 truncate cleaned up [ 458.539848][T17771] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 458.557903][T17782] futex_wake_op: syz.1.5145 tries to shift op by -1; fix this program [ 458.575040][ T28] audit: type=1400 audit(2000000148.030:974): avc: denied { write } for pid=17769 comm="syz.0.5141" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 458.605810][ T28] audit: type=1400 audit(2000000148.030:975): avc: denied { write } for pid=17769 comm="syz.0.5141" name="file0" dev="loop0" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 458.631919][T12144] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.328397][T17809] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 459.337803][T17809] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 459.847560][T17818] syzkaller0: entered promiscuous mode [ 459.881355][T17818] syzkaller0: entered allmulticast mode [ 460.130265][T17832] netlink: 'syz.6.5162': attribute type 1 has an invalid length. [ 460.141058][T17830] veth1_to_bond: left allmulticast mode [ 460.177878][T17836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5164'. [ 460.191645][T17832] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5162'. [ 460.351434][T17853] loop1: detected capacity change from 0 to 512 [ 460.360299][T17842] netlink: 'syz.3.5167': attribute type 39 has an invalid length. [ 460.388999][T17853] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 460.428323][ T28] audit: type=1400 audit(2000000149.890:976): avc: denied { write } for pid=17851 comm="syz.1.5171" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 460.479663][T11380] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.853717][T17870] loop6: detected capacity change from 0 to 4096 [ 461.866024][T17870] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 461.964046][T17873] bridge0: left allmulticast mode [ 461.980121][T17873] veth1_to_bond: left allmulticast mode [ 462.015842][T17873] veth1_vlan: left promiscuous mode [ 462.029586][T17873] veth0_vlan: left promiscuous mode [ 462.046586][T17873] veth0_vlan: entered promiscuous mode [ 462.078213][T17873] veth1_vlan: entered promiscuous mode [ 462.120119][T17873] veth1_macvtap: left promiscuous mode [ 462.133828][T17873] veth0_macvtap: left promiscuous mode [ 462.147285][T17873] veth0_macvtap: entered promiscuous mode [ 462.270326][T17873] veth1_macvtap: entered promiscuous mode [ 462.546296][T17883] loop3: detected capacity change from 0 to 1024 [ 462.559309][T17883] EXT4-fs: Ignoring removed orlov option [ 462.578339][T17873] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 462.592081][T17883] EXT4-fs: Ignoring removed orlov option [ 462.629137][T17873] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 462.663564][T17883] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 462.678115][T17873] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 462.715046][T17873] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 462.772916][T17873] 8021q: adding VLAN 0 to HW filter on device bond0 [ 462.793359][T17873] bond1: left promiscuous mode [ 462.803588][T17873] bridge1: left promiscuous mode [ 462.819020][T17873] bond1: left allmulticast mode [ 462.834644][T17873] bridge1: left allmulticast mode [ 462.856964][T17873] bond2: left promiscuous mode [ 462.872745][T17873] bridge2: left promiscuous mode [ 462.888370][T17873] bond2: left allmulticast mode [ 462.905834][T17873] bridge2: left allmulticast mode [ 462.920865][T17898] loop1: detected capacity change from 0 to 512 [ 462.932597][T17873] bond3: left promiscuous mode [ 462.942260][T17898] EXT4-fs: Ignoring removed i_version option [ 462.950437][T17873] bridge3: left promiscuous mode [ 462.975762][T17873] bond3: left allmulticast mode [ 462.983669][T17898] EXT4-fs: Ignoring removed mblk_io_submit option [ 462.998607][T17873] bridge3: left allmulticast mode [ 463.009180][T17898] ext4: Unknown parameter 'journal_async_commit.fsmagic' [ 463.026138][T16242] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.038579][T17873] bond4: left promiscuous mode [ 463.045864][T11873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.065868][T17873] bridge4: left promiscuous mode [ 463.112575][T17873] bond5: left promiscuous mode [ 463.144035][T17873] bridge5: left promiscuous mode [ 463.164710][T17907] loop3: detected capacity change from 0 to 512 [ 463.176908][T17873] bond6: left promiscuous mode [ 463.185962][T17907] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.192614][T17873] bridge6: left promiscuous mode [ 463.206929][ T28] audit: type=1400 audit(2000000152.670:977): avc: denied { write } for pid=17906 comm="syz.3.5183" name="file0" dev="loop3" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 463.237583][T17873] bond6: left allmulticast mode [ 463.248099][T17873] bridge6: left allmulticast mode [ 463.274860][T17873] bond7: left promiscuous mode [ 463.335542][ T6702] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.349337][T11873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.359097][ T6702] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.455598][T17885] syzkaller0: entered promiscuous mode [ 463.461283][T17885] syzkaller0: entered allmulticast mode [ 463.501907][ T6702] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.538396][ T6702] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.579330][ T6702] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.597897][ T6702] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.625371][ T6702] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 463.627080][T17924] netlink: 'syz.0.5188': attribute type 1 has an invalid length. [ 463.643393][ T6702] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.673019][T17924] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5188'. [ 463.924976][T17937] netlink: 60 bytes leftover after parsing attributes in process `syz.3.5192'. [ 464.150237][T17950] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 464.159284][T17950] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 464.200184][T17954] syzkaller0: entered promiscuous mode [ 464.213395][T17954] syzkaller0: entered allmulticast mode [ 464.270590][T17961] netlink: 'syz.1.5201': attribute type 1 has an invalid length. [ 464.280226][T17961] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5201'. [ 464.344014][T17962] veth1_to_bond: entered allmulticast mode [ 464.350825][T17964] syz_tun: entered allmulticast mode [ 464.455562][T17972] loop5: detected capacity change from 0 to 2048 [ 464.481393][T17972] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.328501][ T28] audit: type=1400 audit(2000000154.070:978): avc: denied { write } for pid=17983 comm="syz.5.5205" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 465.396542][T17987] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 465.495650][ T28] audit: type=1400 audit(2000000154.850:979): avc: denied { write } for pid=17971 comm="syz.5.5205" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 465.518612][ T28] audit: type=1400 audit(2000000154.850:980): avc: denied { ioctl } for pid=17971 comm="syz.5.5205" path="/323/file1/file1" dev="loop5" ino=15 ioctlcmd=0x5828 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 465.576928][ T28] audit: type=1400 audit(2000000154.940:981): avc: denied { write } for pid=17971 comm="syz.5.5205" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 465.769720][ T28] audit: type=1400 audit(2000000154.940:982): avc: denied { create } for pid=17971 comm="syz.5.5205" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 465.835240][ T28] audit: type=1400 audit(2000000155.220:983): avc: denied { write } for pid=13003 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 465.860115][ T28] audit: type=1400 audit(2000000155.220:984): avc: denied { write } for pid=13003 comm="syz-executor" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 465.902027][ T28] audit: type=1400 audit(2000000155.220:985): avc: denied { write } for pid=13003 comm="syz-executor" name="file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 465.946258][ T28] audit: type=1400 audit(2000000155.220:986): avc: denied { write } for pid=13003 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 465.979146][ T28] audit: type=1400 audit(2000000155.220:987): avc: denied { write } for pid=13003 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 466.183294][T18005] loop0: detected capacity change from 0 to 2048 [ 466.226064][T18005] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 466.344967][T18005] ext4 filesystem being mounted at /418/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 466.675359][T18019] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5216'. [ 466.724552][T18005] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.804713][T17983] EXT4-fs (loop5): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 3 with error 28 [ 466.806300][T18022] loop3: detected capacity change from 0 to 512 [ 466.817172][T17983] EXT4-fs (loop5): This should not happen!! Data will be lost [ 466.817172][T17983] [ 466.833350][T17983] EXT4-fs (loop5): Total free blocks count 0 [ 466.839425][T17983] EXT4-fs (loop5): Free/Dirty block details [ 466.845468][T17983] EXT4-fs (loop5): free_blocks=2415919504 [ 466.851227][T17983] EXT4-fs (loop5): dirty_blocks=31552 [ 466.856646][T17983] EXT4-fs (loop5): Block reservation details [ 466.862754][T17983] EXT4-fs (loop5): i_reserved_data_blocks=1972 [ 466.869838][T18022] EXT4-fs: test_dummy_encryption option not supported [ 467.079806][ T6696] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.104122][ T6696] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.108332][T17983] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.185606][ T6696] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 467.215994][ T6696] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.240954][T18038] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5226'. [ 468.262982][ T6696] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.290415][ T6696] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.301288][T18052] loop1: detected capacity change from 0 to 2048 [ 468.325309][T18052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 468.350906][ T6696] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 468.369110][ T6696] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.401711][T18063] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5232'. [ 468.553691][ T6696] bridge_slave_1: left allmulticast mode [ 468.570347][ T6696] bridge_slave_1: left promiscuous mode [ 468.595255][ T6696] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.620675][ T6696] bridge_slave_0: left allmulticast mode [ 468.636908][ T6696] bridge_slave_0: left promiscuous mode [ 468.647645][ T6696] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.947414][ T6696] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 469.023273][ T6696] bond2 (unregistering): (slave bridge2): Releasing backup interface [ 469.077561][T11380] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.113968][ T6696] bond3 (unregistering): (slave bridge3): Releasing backup interface [ 469.151001][T18099] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5239'. [ 469.193741][ T6696] bond4 (unregistering): (slave bridge4): Releasing backup interface [ 469.264870][ T6696] bond5 (unregistering): (slave bridge5): Releasing backup interface [ 469.323323][ T6696] bond6 (unregistering): (slave bridge6): Releasing backup interface [ 469.608455][ T6696] .` (unregistering): (slave bond_slave_0): Releasing backup interface [ 469.658467][ T6696] .` (unregistering): (slave bond_slave_1): Releasing backup interface [ 469.670046][ T6696] .` (unregistering): Released all slaves [ 469.682958][ T6696] bond0 (unregistering): Released all slaves [ 469.721186][ T6696] bond1 (unregistering): Released all slaves [ 469.772705][ T6696] bond2 (unregistering): Released all slaves [ 469.830354][ T6696] bond3 (unregistering): Released all slaves [ 469.850130][ T6696] bond4 (unregistering): Released all slaves [ 469.866251][ T6696] bond5 (unregistering): Released all slaves [ 469.881020][ T6696] bond6 (unregistering): Released all slaves [ 469.894195][ T6696] bond7 (unregistering): Released all slaves [ 469.999513][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 470.147865][ T6696] tipc: Left network mode [ 470.224596][ T6696] hsr_slave_0: left promiscuous mode [ 470.254283][ T6696] hsr_slave_1: left promiscuous mode [ 470.278414][ T6696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.290803][T18124] loop6: detected capacity change from 0 to 512 [ 470.308141][ T6696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.323801][T18124] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 470.348419][ T6696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.368658][ T6696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.406549][ T6696] veth1_macvtap: left promiscuous mode [ 470.417501][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 470.417528][ T28] audit: type=1400 audit(2000000159.880:1000): avc: denied { write } for pid=18122 comm="syz.6.5244" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 470.457439][ T6696] veth0_macvtap: left promiscuous mode [ 470.470401][T16242] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.480783][ T6696] veth1_vlan: left promiscuous mode [ 470.489048][ T6696] veth0_vlan: left promiscuous mode [ 470.530268][ T28] audit: type=1400 audit(2000000159.960:1001): avc: denied { write } for pid=18118 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.583665][ T28] audit: type=1400 audit(2000000161.040:1002): avc: denied { write } for pid=18139 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 471.738685][ T6696] team0 (unregistering): Port device team_slave_1 removed [ 471.754005][ T6696] team0 (unregistering): Port device team_slave_0 removed [ 471.769583][T18147] loop1: detected capacity change from 0 to 128 [ 471.880796][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10 [ 472.100506][T18041] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.136300][T18041] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.166697][T18041] bridge_slave_0: entered allmulticast mode [ 472.193579][T18041] bridge_slave_0: entered promiscuous mode [ 472.219155][T18041] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.248917][T18041] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.274849][T18041] bridge_slave_1: entered allmulticast mode [ 472.312422][T18041] bridge_slave_1: entered promiscuous mode [ 472.355393][ T6696] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.383466][ T6696] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.395758][ T28] audit: type=1400 audit(2000000161.860:1003): avc: denied { write } for pid=18155 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.443857][T18041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.487297][ T28] audit: type=1400 audit(2000000161.950:1004): avc: denied { write } for pid=18175 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 472.496411][T18041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.569711][ T6696] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 472.594920][ T6696] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.597800][T18188] loop1: detected capacity change from 0 to 128 [ 472.624365][T18191] loop3: detected capacity change from 0 to 512 [ 472.625717][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11 [ 472.637785][T18188] EXT4-fs: test_dummy_encryption option not supported [ 472.646415][T18041] team0: Port device team_slave_0 added [ 472.661366][T18191] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.5258: inode has both inline data and extents flags [ 472.704467][T18191] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 472.704693][T18191] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.5258: couldn't read orphan inode 15 (err -117) [ 472.714020][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 472.714040][ C1] EXT4-fs (loop3): initial error at time 2000000162: ext4_orphan_get:1397: inode 15 [ 472.714083][ C1] EXT4-fs (loop3): last error at time 2000000162: ext4_orphan_get:1397: inode 15 [ 472.757446][T18041] team0: Port device team_slave_1 added [ 472.773972][T18041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.781504][T18191] loop3: lost filesystem error report for type 5 error -117 [ 472.781571][T18041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 472.821864][T18041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.836048][T18191] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.178564][ T28] audit: type=1400 audit(2000000162.330:1005): avc: denied { write } for pid=18189 comm="syz.3.5258" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 473.320092][ T28] audit: type=1400 audit(2000000162.360:1006): avc: denied { setattr } for pid=18189 comm="syz.3.5258" name="file0" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 473.351198][T18202] loop1: detected capacity change from 0 to 764 [ 473.358175][ T28] audit: type=1400 audit(2000000162.360:1007): avc: denied { write } for pid=18189 comm="syz.3.5258" name="file0" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 473.392178][T18202] rock: directory entry would overflow storage [ 473.403975][T18202] rock: sig=0x5245, size=8, remaining=5 [ 473.414055][ T28] audit: type=1400 audit(2000000162.360:1008): avc: denied { add_name } for pid=18189 comm="syz.3.5258" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 473.450898][ T28] audit: type=1400 audit(2000000162.370:1009): avc: denied { write } for pid=18189 comm="syz.3.5258" name="file0" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 473.713919][T11873] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.729475][ T6696] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.761253][ T6696] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.821354][T18041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.838134][T18041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 473.864834][T18041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.885880][ T6696] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 473.896849][ T6696] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.999030][T18041] hsr_slave_0: entered promiscuous mode [ 474.008461][T18041] hsr_slave_1: entered promiscuous mode [ 474.027852][T18041] debugfs: 'hsr0' already exists in 'hsr' [ 474.036114][T18041] Cannot create hsr debugfs directory [ 474.042480][T18217] loop6: detected capacity change from 0 to 512 [ 474.706602][ T6696] bond1 (unregistering): (slave bridge0): Releasing backup interface [ 474.751473][T18231] loop6: detected capacity change from 0 to 512 [ 474.825719][ T6696] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 474.850273][T18231] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.936796][ T6696] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 474.986613][ T6696] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.010481][T16242] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.040034][ T6696] bond0 (unregistering): (slave veth1_virt_wifi): Releasing backup interface [ 475.076350][ T6696] bond0 (unregistering): Released all slaves [ 475.100446][ T6696] bond1 (unregistering): Released all slaves [ 475.129865][ T6696] bond2 (unregistering): Released all slaves [ 475.241117][T18251] loop6: detected capacity change from 0 to 512 [ 475.241409][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12 [ 475.257542][T18251] EXT4-fs: Ignoring removed i_version option [ 475.377236][T18251] EXT4-fs (loop6): 1 orphan inode deleted [ 475.392971][ T6696] tipc: Left network mode [ 475.398746][T18251] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.461354][ T6696] hsr_slave_0: left promiscuous mode [ 475.467697][T16242] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.478702][T18259] loop1: detected capacity change from 0 to 256 [ 475.487377][ T6696] hsr_slave_1: left promiscuous mode [ 475.497300][ T6696] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.514185][ T6696] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 475.528683][ T6696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 475.549119][ T6696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 475.569176][ T6696] veth1_macvtap: left promiscuous mode [ 475.584269][ T6696] veth0_macvtap: left promiscuous mode [ 475.600288][ T6696] veth1_vlan: left promiscuous mode [ 475.609703][ T6696] veth0_vlan: left promiscuous mode [ 475.678386][ T6696] team0 (unregistering): Port device team_slave_1 removed [ 475.689071][ T6696] team0 (unregistering): Port device team_slave_0 removed [ 476.437458][T18162] bridge0: port 1(bridge_slave_0) entered blocking state [ 476.480089][T18162] bridge0: port 1(bridge_slave_0) entered disabled state [ 476.519927][T18162] bridge_slave_0: entered allmulticast mode [ 476.551505][T18162] bridge_slave_0: entered promiscuous mode [ 476.605557][T18162] bridge0: port 2(bridge_slave_1) entered blocking state [ 476.641965][T18162] bridge0: port 2(bridge_slave_1) entered disabled state [ 476.677259][T18162] bridge_slave_1: entered allmulticast mode [ 476.706429][T18162] bridge_slave_1: entered promiscuous mode [ 476.754174][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 476.754192][ T28] audit: type=1400 audit(2000000166.220:1020): avc: denied { write } for pid=18291 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.856809][T18162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 476.906295][T18162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 476.916358][ T6696] IPVS: stop unused estimator thread 0... [ 476.926829][ T28] audit: type=1400 audit(2000000166.280:1021): avc: denied { write } for pid=18310 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 476.997257][T18041] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 477.028038][T18041] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 477.039797][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13 [ 477.105357][T18041] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 477.125526][T18041] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 477.144589][T18041] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 477.163932][T18041] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 477.176440][T18162] team0: Port device team_slave_0 added [ 477.188999][T18041] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 477.189720][T18326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 477.212355][T18041] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 477.226850][T18162] team0: Port device team_slave_1 added [ 477.239148][T18326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 477.286946][T18162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 477.303834][T18162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.347545][T18162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 477.366744][T18162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 477.382060][T18162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 477.419743][T18162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 477.473174][T18336] syzkaller0: entered promiscuous mode [ 477.484248][T18336] syzkaller0: entered allmulticast mode [ 477.513917][ T28] audit: type=1400 audit(2000000166.970:1022): avc: denied { write } for pid=18339 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.569209][ T28] audit: type=1400 audit(2000000167.030:1023): avc: denied { write } for pid=18353 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.613319][T18162] hsr_slave_0: entered promiscuous mode [ 477.641886][T18162] hsr_slave_1: entered promiscuous mode [ 477.649093][T18162] debugfs: 'hsr0' already exists in 'hsr' [ 477.657685][T18162] Cannot create hsr debugfs directory [ 477.688303][ T3022] 8021q: adding VLAN 0 to HW filter on device eth14 [ 477.725961][T18041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.784028][T18041] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.805402][ T6700] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.812608][ T6700] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.856390][ T6687] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.863504][ T6687] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.924079][ T28] audit: type=1400 audit(2000000167.390:1024): avc: denied { write } for pid=18361 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 477.958135][T18162] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 477.967657][T18162] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 477.982075][T18162] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 477.992467][ T28] audit: type=1400 audit(2000000167.450:1025): avc: denied { write } for pid=18373 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.016707][T18162] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 478.034491][ T3022] 8021q: adding VLAN 0 to HW filter on device eth15 [ 478.046665][T18162] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 478.060627][T18162] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 478.079293][T18162] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 478.096985][T18162] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 478.200620][T18162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 478.236072][T18162] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.258946][ T6681] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.266092][ T6681] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.294171][ T6681] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.301308][ T6681] bridge0: port 2(bridge_slave_1) entered forwarding state [ 478.331594][T18041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 478.376663][ T28] audit: type=1400 audit(2000000167.840:1026): avc: denied { write } for pid=18395 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.465888][ T28] audit: type=1400 audit(2000000167.930:1027): avc: denied { write } for pid=18419 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 478.506691][ T3022] 8021q: adding VLAN 0 to HW filter on device eth16 [ 478.617818][T18041] veth0_vlan: entered promiscuous mode [ 478.630122][T18041] veth1_vlan: entered promiscuous mode [ 478.670747][T18041] veth0_macvtap: entered promiscuous mode [ 478.689927][T18041] veth1_macvtap: entered promiscuous mode [ 478.736663][T18041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.758095][T18041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.774692][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.843555][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 478.934038][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.015919][T18162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 479.073485][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.131689][T18446] veth1_to_bond: entered allmulticast mode [ 479.505503][T18162] veth0_vlan: entered promiscuous mode [ 479.515460][T18162] veth1_vlan: entered promiscuous mode [ 479.544273][T18470] netlink: 28 bytes leftover after parsing attributes in process `syz.7.5299'. [ 479.555004][T18470] gretap0: entered promiscuous mode [ 479.560833][T18470] gretap0: entered allmulticast mode [ 479.622962][T18162] veth0_macvtap: entered promiscuous mode [ 479.656720][T18474] loop1: detected capacity change from 0 to 512 [ 479.743064][T18474] EXT4-fs error (device loop1): ext4_orphan_get:1397: inode #15: comm syz.1.5300: inode has both inline data and extents flags [ 479.761918][T18474] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 479.763872][T18474] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.5300: couldn't read orphan inode 15 (err -117) [ 479.774200][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 479.774238][ C0] EXT4-fs (loop1): initial error at time 2000000169: ext4_orphan_get:1397: inode 15 [ 479.774266][ C0] EXT4-fs (loop1): last error at time 2000000169: ext4_orphan_get:1397: inode 15 [ 479.818543][T18474] loop1: lost filesystem error report for type 5 error -117 [ 479.842319][T18162] veth1_macvtap: entered promiscuous mode [ 479.947233][T18474] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 480.086904][T18162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 480.115976][T11380] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 480.120152][T18162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 480.160697][ T347] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.180077][ T347] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.201418][ T347] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 480.221813][ T347] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.069219][ T28] audit: type=1400 audit(2000000170.530:1028): avc: denied { append } for pid=18511 comm="syz.7.5310" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 481.153089][T18515] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5311'. [ 481.163128][T18515] erspan0: entered promiscuous mode [ 481.168557][T18515] erspan0: entered allmulticast mode [ 481.762068][ T28] audit: type=1326 audit(2000000171.160:1029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18532 comm="syz.8.5318" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37787fcdd9 code=0x7ffc0000 [ 482.168988][ T28] audit: type=1326 audit(2000000171.160:1030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18532 comm="syz.8.5318" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37787fcdd9 code=0x7ffc0000 [ 482.439739][ T28] audit: type=1326 audit(2000000171.170:1031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18532 comm="syz.8.5318" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f37787fcdd9 code=0x7ffc0000 [ 482.902045][ T28] audit: type=1326 audit(2000000171.170:1032): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18532 comm="syz.8.5318" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37787fcdd9 code=0x7ffc0000 [ 483.243713][ T28] audit: type=1326 audit(2000000171.170:1033): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18532 comm="syz.8.5318" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=443 compat=0 ip=0x7f37787fcdd9 code=0x7ffc0000 [ 483.320784][ T28] audit: type=1326 audit(2000000171.170:1034): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18532 comm="syz.8.5318" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37787fcdd9 code=0x7ffc0000 [ 483.427308][ T28] audit: type=1326 audit(2000000171.170:1035): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18532 comm="syz.8.5318" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f37787fcdd9 code=0x7ffc0000 [ 483.455363][ T28] audit: type=1326 audit(2000000171.170:1036): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18532 comm="syz.8.5318" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f37787fcdd9 code=0x7ffc0000 [ 483.540093][T18556] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5327'. [ 483.579116][T18558] loop8: detected capacity change from 0 to 2048 [ 483.594342][T18558] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.692650][T18552] syzkaller0: entered promiscuous mode [ 483.698306][T18552] syzkaller0: entered allmulticast mode [ 483.925737][T18573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 483.937584][T18573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 485.142096][T18476] EXT4-fs error (device loop8): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 485.398560][T18593] loop3: detected capacity change from 0 to 128 [ 485.405507][T18162] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 486.623067][T18612] gretap0: left promiscuous mode [ 486.638196][T18617] netlink: 67 bytes leftover after parsing attributes in process `syz.6.5329'. [ 486.640998][T18612] gretap0: left allmulticast mode [ 486.671344][ T28] audit: type=1400 audit(2000000176.130:1037): avc: denied { write } for pid=18602 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.702563][T18621] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5339'. [ 486.731760][ T28] audit: type=1400 audit(2000000176.190:1038): avc: denied { write } for pid=18622 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 486.793526][T18625] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5339'. [ 486.845536][T18627] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.854520][T18627] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.891793][T18629] syzkaller0: entered promiscuous mode [ 486.897502][T18629] syzkaller0: entered allmulticast mode [ 487.011457][T18638] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5345'. [ 487.304311][T18646] netlink: 'syz.1.5349': attribute type 7 has an invalid length. [ 487.312244][T18646] netlink: 'syz.1.5349': attribute type 8 has an invalid length. [ 487.400632][T18653] loop1: detected capacity change from 0 to 1024 [ 487.414345][T18653] EXT4-fs: Ignoring removed orlov option [ 487.446265][T18653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 487.463490][T18657] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5353'. [ 487.483107][T18657] netlink: 28 bytes leftover after parsing attributes in process `syz.6.5353'. [ 487.514688][T18660] syzkaller0: entered promiscuous mode [ 487.520300][T18660] syzkaller0: entered allmulticast mode [ 487.546461][ T28] audit: type=1400 audit(2000000177.010:1039): avc: denied { write } for pid=18652 comm="syz.1.5352" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 487.568902][ T28] audit: type=1400 audit(2000000177.030:1040): avc: denied { write } for pid=18652 comm="syz.1.5352" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 487.664441][T11380] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 487.700280][T18667] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5357'. [ 488.788192][T18699] syzkaller0: entered promiscuous mode [ 488.818343][T18699] syzkaller0: entered allmulticast mode [ 489.045633][T18717] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5374'. [ 489.076996][T18720] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5375'. [ 489.187985][T18720] veth1_to_bond: left allmulticast mode [ 489.222618][ T28] audit: type=1400 audit(2000000178.680:1041): avc: denied { write } for pid=18708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.353828][ T28] audit: type=1400 audit(2000000178.820:1042): avc: denied { write } for pid=18734 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 489.417959][T18739] syzkaller0: entered promiscuous mode [ 489.438445][T18739] syzkaller0: entered allmulticast mode [ 489.461141][T18739] tipc: Started in network mode [ 489.472184][T18739] tipc: Node identity 86816c1602cf, cluster identity 4711 [ 489.487589][T18739] tipc: Enabled bearer , priority 0 [ 489.513757][T18737] tipc: Resetting bearer [ 489.521096][T18743] ucma_write: process 338 (syz.6.5380) changed security contexts after opening file descriptor, this is not allowed. [ 489.536333][T18737] tipc: Disabling bearer [ 489.760074][T18748] bridge0: adding interface bridge0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 490.142429][T18759] ªªªªªª: renamed from vlan0 (while UP) [ 490.277083][T18764] netlink: 'syz.7.5386': attribute type 7 has an invalid length. [ 490.285201][T18764] netlink: 'syz.7.5386': attribute type 8 has an invalid length. [ 490.295250][ T28] audit: type=1400 audit(2000000179.760:1043): avc: denied { write } for pid=18751 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.370170][ T28] audit: type=1400 audit(2000000179.830:1044): avc: denied { write } for pid=18775 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.478509][ T28] audit: type=1400 audit(2000000179.940:1045): avc: denied { write } for pid=18780 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 490.502478][T18771] veth1_to_bond: entered allmulticast mode [ 490.553666][ T28] audit: type=1400 audit(2000000180.020:1046): avc: denied { write } for pid=18792 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.249669][ T28] audit: type=1400 audit(2000000180.710:1047): avc: denied { write } for pid=18796 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.323899][T18817] netlink: 12 bytes leftover after parsing attributes in process `syz.6.5394'. [ 491.351386][ T28] audit: type=1400 audit(2000000180.810:1048): avc: denied { write } for pid=18818 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.388203][T18817] veth1_to_bond: left allmulticast mode [ 491.452746][T18827] syzkaller0: entered promiscuous mode [ 491.458613][T18827] syzkaller0: entered allmulticast mode [ 492.167450][T18881] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5401'. [ 492.186012][T18881] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5401'. [ 492.198436][T18881] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5401'. [ 492.662118][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 492.980373][T18896] sctp: [Deprecated]: syz.3.5404 (pid 18896) Use of int in maxseg socket option. [ 492.980373][T18896] Use struct sctp_assoc_value instead [ 493.125091][T18904] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5406'. [ 493.387946][T18911] syzkaller0: entered promiscuous mode [ 493.414864][T18911] syzkaller0: entered allmulticast mode [ 493.518000][T18915] vhci_hcd vhci_hcd.3: invalid port number 254 [ 493.582406][T18922] program syz.8.5413 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 494.397677][T18942] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5420'. [ 494.510173][T18949] syzkaller0: entered promiscuous mode [ 494.516145][T18949] syzkaller0: entered allmulticast mode [ 494.635289][T18956] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5425'. [ 494.915614][T18965] netlink: 'syz.3.5429': attribute type 7 has an invalid length. [ 494.923452][T18965] netlink: 'syz.3.5429': attribute type 8 has an invalid length. [ 495.004960][T18973] veth1_to_bond: entered allmulticast mode [ 495.090162][T18977] syzkaller0: entered promiscuous mode [ 495.109351][T18977] syzkaller0: entered allmulticast mode [ 495.137345][T18979] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5436'. [ 495.158235][T18979] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5436'. [ 495.168880][T18979] netlink: 36 bytes leftover after parsing attributes in process `syz.7.5436'. [ 495.205128][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 495.205146][ T28] audit: type=1400 audit(2000000184.670:1055): avc: denied { create } for pid=18982 comm="syz.3.5438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 495.250423][ T28] audit: type=1400 audit(2000000184.700:1056): avc: denied { bind } for pid=18982 comm="syz.3.5438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 495.270374][ T28] audit: type=1400 audit(2000000184.700:1057): avc: denied { write } for pid=18982 comm="syz.3.5438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 495.295752][ T28] audit: type=1400 audit(2000000184.700:1058): avc: denied { read } for pid=18982 comm="syz.3.5438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 495.329386][T18986] syzkaller0: entered promiscuous mode [ 495.344806][T18986] syzkaller0: entered allmulticast mode [ 495.362885][T18986] tipc: Enabled bearer , priority 0 [ 495.389878][T18985] tipc: Resetting bearer [ 495.406078][ T2983] ================================================================== [ 495.414323][ T2983] BUG: KCSAN: data-race in atime_needs_update / inode_set_ctime_current [ 495.422694][ T2983] [ 495.425031][ T2983] write to 0xffff88811ac75100 of 8 bytes by task 4098 on cpu 0: [ 495.432680][ T2983] inode_set_ctime_current+0x5f2/0x8c0 [ 495.438177][ T2983] simple_unlink+0x2d/0x80 [ 495.442682][ T2983] shmem_unlink+0x12d/0x140 [ 495.447558][ T2983] vfs_unlink+0x1c7/0x490 [ 495.451923][ T2983] filename_unlinkat+0x1e2/0x410 [ 495.457025][ T2983] __se_sys_unlink+0x2b/0xe0 [ 495.461657][ T2983] __x64_sys_unlink+0x1f/0x30 [ 495.466374][ T2983] x64_sys_call+0x2eb6/0x3020 [ 495.471084][ T2983] do_syscall_64+0x12c/0x3b0 [ 495.475842][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.481937][ T2983] [ 495.484372][ T2983] read to 0xffff88811ac75100 of 8 bytes by task 2983 on cpu 1: [ 495.492024][ T2983] atime_needs_update+0x2ef/0x3e0 [ 495.497086][ T2983] touch_atime+0x4a/0x330 [ 495.501537][ T2983] do_readlinkat+0x137/0x2f0 [ 495.506153][ T2983] __x64_sys_readlink+0x47/0x60 [ 495.511033][ T2983] x64_sys_call+0x2b51/0x3020 [ 495.515754][ T2983] do_syscall_64+0x12c/0x3b0 [ 495.520384][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 495.526479][ T2983] [ 495.528834][ T2983] value changed: 0x00000000773594b7 -> 0x00000000773594b8 [ 495.536330][ T2983] [ 495.538752][ T2983] Reported by Kernel Concurrency Sanitizer on: [ 495.545185][ T2983] CPU: 1 UID: 0 PID: 2983 Comm: udevd Tainted: G W syzkaller #0 PREEMPT(full) [ 495.555706][ T2983] Tainted: [W]=WARN [ 495.559599][ T2983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 495.569760][ T2983] ================================================================== [ 495.596397][T18985] tipc: Disabling bearer