last executing test programs: 6m35.277245158s ago: executing program 32 (id=70): io_setup(0x4, &(0x7f00000014c0)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000002c0)='mounts\x00') io_submit(r0, 0x1, &(0x7f0000000280)=[&(0x7f0000000100)={0x0, 0x0, 0x0, 0x5, 0xfffe, r1, 0x0}]) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0) 5m44.840629155s ago: executing program 33 (id=1424): socket$inet6_sctp(0xa, 0x801, 0x84) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68380, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x7e, 0x1, @perf_bp={0x0, 0x1}, 0x10c8e8, 0x0, 0x0, 0x3, 0x6, 0x7ffd, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x6, 0x9, 0x1, 0x2}, {0x6, 0x5f, 0x6, 0xfffffffa}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 5m21.766227388s ago: executing program 34 (id=1947): syz_mount_image$msdos(&(0x7f0000000100), &(0x7f0000000140)='./file0\x00', 0x80c406, &(0x7f00000005c0)=ANY=[], 0xff, 0x2bc, &(0x7f0000000180)="$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") seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x0, 0x0, 0x7, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket(0x28, 0x5, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r0, 0x84, 0x82, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) 5m6.651234973s ago: executing program 35 (id=2218): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000640)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x65, 0x0, 0xf, 0x6, 0x0, @rand_addr=0x64010101, @broadcast}, {{0x11, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) 4m55.985162044s ago: executing program 6 (id=2493): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x685c0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x10c0e8, 0x3, 0x0, 0x8, 0x6, 0x1, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(0xffffffffffffffff, 0x40084503, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000f00), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000010c0)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000000400)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8, 0x1, r2}, {0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x40041}, 0x48850) 4m53.876254384s ago: executing program 6 (id=2517): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000140)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)='W', 0xfe8a}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000002c0)="5c00000014006b03000000d86e6c1d00028440fcffff564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1ff, 0x4, 0x0, 0x4, 0x0, 0xfffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$kcm(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000012c0)=""/4096, 0x1000}, {&(0x7f00000022c0)=""/4096, 0x1000}], 0x2}, 0x20) 4m52.972069606s ago: executing program 6 (id=2536): perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe, 0x0, @perf_bp={0x0, 0x9}, 0x17008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x15c, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x710, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x800, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0x7}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @lifetime_val={0x24, 0x9, {0xf, 0x1edcb, 0x9, 0x9}}]}, 0x15c}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000940)=@newsa={0x140, 0x1a, 0x803, 0xfffffffe, 0x100, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x717, 0xe23, 0x5, 0xa, 0x0, 0x20, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, {0xfe, 0x1000000000000192, 0x8000000009ba3, 0x10001, 0x8251c, 0x5, 0xfffffffffffffffc, 0x4}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffe, 0x3f9}, 0x7e, 0x3505, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x5}]}, 0x140}}, 0x844) 4m52.869686438s ago: executing program 6 (id=2539): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) chdir(&(0x7f0000000200)='./file0/file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='sysfs\x00', 0x1214040, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x0, 0x0) 4m52.80214274s ago: executing program 6 (id=2540): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x80000001, 0x8a}, 0x80, 0x0, 0x0, 0x5, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f00000005c0)={[{@init_itable_val}, {@journal_path={'journal_path', 0x3d, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000180)="$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") r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$printer(0x1, 0x2d, &(0x7f0000000100)=ANY=[], 0x0) ioctl$EVIOCRMFF(r0, 0xc0085504, &(0x7f0000000180)=0x17) 4m52.75661891s ago: executing program 6 (id=2551): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8208, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000001c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000480)="b9ff03076003008cb89e08f086dd23374c648b2a26b1448e983ad911b10576713ad75ed8f872f955e7d0c307a63944750916948473d3", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 4m52.728860692s ago: executing program 36 (id=2551): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8208, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f00000001c0)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={r1}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000000000000000000000400008500000061000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000580)={r2, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000480)="b9ff03076003008cb89e08f086dd23374c648b2a26b1448e983ad911b10576713ad75ed8f872f955e7d0c307a63944750916948473d3", 0x0, 0xfe6, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 2m9.048831603s ago: executing program 9 (id=6548): fcntl$lock(0xffffffffffffffff, 0x7, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000006000000500000a3c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc4c0000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000020000380100000800c00018006000100d10300000c000080080003400000000214000000110001"], 0xb0}, 0x1, 0x0, 0x0, 0x14}, 0x40) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r1, 0xffffffffffffffff, 0x0) 2m9.011995144s ago: executing program 9 (id=6550): pipe(&(0x7f0000002680)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m8.970982225s ago: executing program 9 (id=6551): syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="00e789da34e04a1ffb124b2c2fb684c70b90bbb45efd97899a16f2df4fa2e8f06ac2c5352509e3c51d882eb3ec0dd3b1c96e980163890d2d0d1b8d3d62f6d77b0209e166e2ca4c35483d49316daf522556a16cab12d75a852bc680da7ea837480feb2060a1e20a59b7745235030000004ed0351cb5b416ba1c57217be5a338392f831617ee8c35bb61f0a9eeed3b1226b18c4b455ab222d7ae1b5258d5643d70000000000000000000ae468a387d9e63008000000000000063a454d1ab8760076a893752105f030c49caf2fdfe6bc9743a68593b576e2f2f6ab69e1b974ac90855ac250f8f73e16bc593730b88d7a3346b945e276875915040ce4901262cd8ce8191ee84e3ce5526a0a43b707cc711a3311f840cad641a013c6dd783aa895227b3d50a86e15a57e26666aaa296b7ddc4c8f421cf9d76d344bf6522f5d1138659d3de84ce13b085a2ed9d66c93767378423521cc4ea440e0ac3b953e1ca1675a716a97a5c3106aba648f119eeab4747b9b53000475e0a34514ccf397ea6f170e018122a98f135beac48d2ed195e20fdd226c7f5a20000ad1fcfbee59924e161280a8b78fe34b2fa3efa7c1d4268bf090000ecb4ece3234c232659fee3ff9e6d21e008a570bb490a65b84ea8b6d6507355cb1112fae6e3456bf8da53e1df20458e59456822dbb8dbd7ce0f928d5fbd6414fe8ab5277f3fd5ce6be044993f93e697a69484cc0e65ec742443c84e21a440998c8d69c12c2db7aee2872c6e0671d639e8f6bece219dcd0f69b9867dfc3187c882c035809c81832d7416f90c734be30c2faf0c22bfc8d95dfc7b9bac96b838c98ae5a75b9dc9e967ef5edf311bbebd7ca803cea8f5b9ec5b3edd6c44d633b71bde97a3c10a468432ff3d4e63ce3ecfa640d44b70b68744d26e72389e6c61767725d2c692443bc949c28b1a374e541bd352ca2f3bf64d883862dc24d8e27d86b6e38bc269f110c3d563f8e4ec9a98016b6b58157deeefa8fa022514bdc75f794094700cb8fa2b61310cbf9058bce5f2399055929e0fc732e0d5db926fe1b09a2993ff038d8099c229bda0801f8b81719d73b4abac97f704a0942051bae38b00b69d7fa69d738f99f73b19082ec0c99442d97ddbf68a4822aa2a2673478f81f14f67beee619b9d9882f7eabfb5000000000000000000003ff8795b5ec2de11479e781396117c84449647684239c9b9475b389a6a76d36c31f39539d928d2c58f188b4bf713d0915df4cc7de48a930935dbb01c9422d604467d209fd1421c7fc503cabde4bb193ff3654377c6e4fb72dcfc835f760bae7447068c2e43433e3d77c6805b559a04f3ebb741a9bbf57274b1da7800000000000000000000000000000000000000001c4f225672f3465b2638e921d80d58dca4ee4592d8cc0c06b2e390b7b1c713a46bc8ece9be25f055a59032576bc00a844c32b46040a607eaeb886ec0cb8e90c5a4075caa8a358ab81e78ad794a20f772b73466a43cd696401521793e54b1c4aa58d506b661f393e7233337473f36c2dbb15ae673afe82ebe45cc6f776162e43b74d9b9ca6f68d6bc8261600b27431e0f6f4f1e0947f69d2d812ebc9d2a8869b14a84dbdcdc5055b97a241e2f707740bb966b6c58408aceb9f6a943f61405a5093c60c0dfb511b02f191ef6fa6e5a1a86687a44ec6098439a2ef55a4ba07e2b0f62ae86e1458f63f6b8b2d2b9990495f17b6d1052b19472a97d41204a8be48e380be2e6885c7de0807f2c154ad4f25b16027bc4aeb85dc798e7eef25631bfd79c8e0aff725dcd4b91c61bf8d72f74e4dbae59bddcea722c5135791af1f0ab1d70de8b01"], 0x1, 0x11f4, &(0x7f0000001280)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x1000418, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") creat(0x0, 0x142) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r1, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) 2m8.583884504s ago: executing program 9 (id=6565): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x8052, &(0x7f00000005c0), 0x6, 0x4ef, &(0x7f0000000740)="$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") mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x10b440, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x23e9c9e, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 2m8.32888307s ago: executing program 9 (id=6575): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000080)=[@in={0x2, 0x4e21, @private=0xa010102}], 0x10) readv(r1, &(0x7f0000000600)=[{&(0x7f0000000180)=""/135, 0x87}], 0x1) setsockopt(r1, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 2m7.968666558s ago: executing program 9 (id=6586): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x40007, @mcast2, 0x3}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x9, @mcast1, 0x8}, 0x1c) 2m7.964896209s ago: executing program 37 (id=6586): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x40007, @mcast2, 0x3}, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r1, &(0x7f0000000200)={0xa, 0x4e20, 0x9, @mcast1, 0x8}, 0x1c) 1m33.791481613s ago: executing program 2 (id=7262): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x4}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r0, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1m33.745273834s ago: executing program 2 (id=7265): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffffffffffe84}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x9f69a7a086f70ae8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x24, &(0x7f0000000000)=0x1d, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m33.665002606s ago: executing program 2 (id=7266): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x10, '\x00', 0x0, @sock_ops=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x39, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0x14, 0x0, &(0x7f0000000080)="259a001471a76d2688a24e6588a8fb5e0af66395", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9}, 0x50) 1m33.629611046s ago: executing program 2 (id=7267): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x51) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount(0x0, &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x80000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r0}}, 0x20) 1m33.603301797s ago: executing program 2 (id=7269): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350073797a5f74756e00000000000000000008000a00", @ANYRES32=r2], 0x3c}}, 0x8000) syz_emit_ethernet(0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="ffffffffffff00000000000088a832"], 0x0) 1m33.153028438s ago: executing program 2 (id=7274): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r0}, &(0x7f0000000940), &(0x7f0000000980)=r1}, 0x20) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}], {0x14}}, 0x3c}}, 0x0) 1m33.152905018s ago: executing program 38 (id=7274): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x9, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x24, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r0}, &(0x7f0000000940), &(0x7f0000000980)=r1}, 0x20) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r3, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}}], {0x14}}, 0x3c}}, 0x0) 51.045093208s ago: executing program 0 (id=8029): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r2, 0x9}, 0x8) 50.98109839s ago: executing program 0 (id=8030): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./bus\x00', 0x4d) rename(&(0x7f0000000180)='./bus\x00', &(0x7f00000001c0)='./file0\x00') 50.980888661s ago: executing program 0 (id=8031): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x350}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 50.948962541s ago: executing program 0 (id=8032): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 50.923911482s ago: executing program 0 (id=8033): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf50, 0x0, 0xffff, 0x9dfe, 0x8, "00b300"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x7fff, 0x16, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000440)=0x8) 50.689131197s ago: executing program 0 (id=8036): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x6a, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r3, 0xfff}, 0x8) 50.689021457s ago: executing program 39 (id=8036): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x6a, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0)={r3, 0xfff}, 0x8) 26.34540981s ago: executing program 7 (id=8487): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="02000000040000000400000001"], 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000d80)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="76ea090000000000009ba56a88ca", 0x0, 0x6400, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x2, 0x8, 0x40, 0x42, 0x1}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r1}, 0x38) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r2, 0xffffffffffffffff, 0x60000000}, 0xc) 26.159787054s ago: executing program 7 (id=8495): perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x1, @perf_config_ext={0x3fffffffc}, 0x0, 0x4, 0x0, 0x3, 0xfff, 0x8001, 0x7fff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x8) mremap(&(0x7f0000a11000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ba6000/0x2000)=nil) munmap(&(0x7f0000e29000/0x1000)=nil, 0x1000) mremap(&(0x7f0000a01000/0x4000)=nil, 0x4000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000678000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f000084c000/0x3000)=nil) mremap(&(0x7f000040b000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f00004b3000/0x4000)=nil) munmap(&(0x7f0000a88000/0x1000)=nil, 0x1000) mremap(&(0x7f00005a7000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00004fe000/0x4000)=nil) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 26.092713246s ago: executing program 7 (id=8499): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000280)=@newsa={0x154, 0x10, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in=@local, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x5c, 0x0, 0xffffffffffffffff}, {@in6=@loopback, 0x14, 0x6c}, @in=@empty=0x14, {0x0, 0x7f, 0x0, 0xfffffff7ffffffff, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x6, 0x1000, 0xfffffffffffffffd}, {}, 0x80000000, 0x0, 0x2, 0x1, 0x6, 0x2c}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @extra_flags={0x8, 0x18, 0xb}, @coaddr={0x14, 0xe, @in6=@private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x154}, 0x1, 0x0, 0x0, 0x4004050}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) socket$key(0xf, 0x3, 0x2) r2 = mmap$IORING_OFF_CQ_RING(0x0, 0x1000, 0x1000004, 0x4010011, 0xffffffffffffffff, 0x8000000) syz_io_uring_complete(r2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@local, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0x4}}, 0xe8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 26.049615317s ago: executing program 7 (id=8502): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(0xffffffffffffffff, 0x40045402, 0x0) read(0xffffffffffffffff, 0x0, 0x20) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000b80)={[{@errors_remount}, {@nobh}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@max_batch_time={'max_batch_time', 0x3d, 0x7}}, {@dioread_lock}]}, 0x3, 0x439, &(0x7f0000002380)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r1, 0x8004587d, &(0x7f0000000080)={@id={0x2, 0x0, @d}}) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 25.89306862s ago: executing program 7 (id=8504): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x190) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r2, 0x400, 0x1) fcntl$setlease(r1, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000240)={0x80040, 0x40}, 0x18) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 25.193495977s ago: executing program 7 (id=8511): r0 = bpf$MAP_CREATE(0x0, &(0x7f000000a180)=ANY=[@ANYBLOB="0e000000040000"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x2, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12, 0x5, 0x0, 0xe08ca72be36d9991, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 25.156304198s ago: executing program 40 (id=8511): r0 = bpf$MAP_CREATE(0x0, &(0x7f000000a180)=ANY=[@ANYBLOB="0e000000040000"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0xcb, 0x0, 0x0, 0x0, 0x0, 0x2, 0x440, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x12, 0x5, 0x0, 0xe08ca72be36d9991, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x4, 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000020000007b8a00fe0000000087080000000000007b8af0ff00000000bda100000000000027000000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000001a00000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="76389e6a65585578f830e9000000", 0x0, 0x10001, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.698769016s ago: executing program 8 (id=8872): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x2400c0f0}, 0x4010) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x101c01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079d}) socketpair(0x1, 0x1, 0x1, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_devices(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1e0328004d8c71ef2885634a8270121406"], 0xffdd) 2.655994197s ago: executing program 8 (id=8873): syz_emit_ethernet(0x4e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3c8100000086dd6000000000140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e", @ANYRES32=0x41424344, @ANYBLOB="4a02"], 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x0) listen(0xffffffffffffffff, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) ptrace$setregs(0xd, r0, 0x20000000002, &(0x7f0000000040)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 2.585154389s ago: executing program 8 (id=8875): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x6, 0x3, 0x6, 0x2, 0xffffffff}, [@TCA_NETEM_CORRUPT={0xc, 0x4, {0xfffffffd, 0x1}}, @TCA_NETEM_RATE={0x14, 0x6, {0x4, 0x2, 0x0, 0x4}}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x880}, 0x8010) sendmmsg$inet(r0, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)="e22971ce9db45fb52ceafd0d7d8ae8251c3c56139fe91e5682ff6362aa78ea6863a4f066a199ecd88ac46a946aab8e368b42c040dbbea26adf", 0x39}, {&(0x7f0000000300)="b4b98f791417e9d68f2bfb2f299437050f4f43ac5a68311636bc061a6740c3c8dfb073d165ac78443e3882a721ec4cb748d16cf734", 0x35}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2090) 1.582867292s ago: executing program 8 (id=8886): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x20) r2 = socket$unix(0x1, 0x2, 0x0) r3 = dup3(r1, r2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mount$9p_fd(0x0, &(0x7f0000000200)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000000), 0x2, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r2}}) connect$unix(r2, &(0x7f0000000100)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 823.507171ms ago: executing program 1 (id=8900): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) close_range(r4, 0xffffffffffffffff, 0x2) dup3(r0, r4, 0x80000) 769.105482ms ago: executing program 4 (id=8901): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f00000000c0), 0x0, 0x100, 0x2000000, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f00000001c0)={0x2, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x800000000000, 0xa040, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, @perf_config_ext={0x32b2, 0x2093}, 0x100ae1, 0x4, 0x0, 0x4, 0xfffffffffffffffc, 0xfffff801, 0x9, 0x0, 0xffffbffe, 0x0, 0xfffffffffffffff4}, 0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)='cpuset.mem_hardwall\x00', 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 685.758984ms ago: executing program 8 (id=8904): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x80000004}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r2, 0x8914, &(0x7f0000000080)) write$cgroup_subtree(r0, &(0x7f00000006c0)=ANY=[@ANYBLOB="8f03000000000060007538e486dd630ace2200102f00fe80000000000000875a65059ff57b00000000000000000000000000ac1414aa000086dd"], 0xcfa4) 667.835254ms ago: executing program 1 (id=8905): recvmsg$unix(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x163) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setreuid(0xee00, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000028c0), r0) sendmsg$NLBL_MGMT_C_LISTDEF(r0, &(0x7f0000002980)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x2000c084) write$RDMA_USER_CM_CMD_ACCEPT(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0x19, 0x0, 0x3b) 618.392925ms ago: executing program 4 (id=8907): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$can_bcm(0x1d, 0x2, 0x2) socket$kcm(0x21, 0x2, 0xa) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) connect$can_bcm(r3, &(0x7f0000000040)={0x1d, r4}, 0x10) write$cgroup_subtree(r1, &(0x7f0000000240)=ANY=[], 0x48) splice(r0, 0x0, r2, 0x0, 0x3000, 0x100000000000000d) 599.685936ms ago: executing program 4 (id=8908): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e23, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000005c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000cbd70100400000005000000080009000200000008000c00a80a000008000b00000000000600010007"], 0x48}, 0x1, 0x0, 0x0, 0x40811}, 0x20) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private2}}}, 0x32) ioctl$PPPIOCGL2TPSTATS(r4, 0x40047459, 0x0) 492.589629ms ago: executing program 8 (id=8910): r0 = gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x101000, 0x0) rt_sigqueueinfo(r0, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) 462.403569ms ago: executing program 1 (id=8911): socket$nl_route(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) bind$netlink(r0, &(0x7f0000000100)={0x10, 0x0, 0x25dfdbfd, 0x400}, 0xc) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f00000000c0), 0x4) getsockname$packet(r0, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001400)=@newlink={0x44, 0x10, 0x401, 0x2, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x4008010) 425.30239ms ago: executing program 4 (id=8914): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x40000) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvfrom$unix(r2, &(0x7f00000000c0)=""/236, 0xec, 0x60, 0x0, 0x0) 384.305181ms ago: executing program 4 (id=8915): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x10) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000060c0)=@delchain={0x24, 0x66, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 383.784311ms ago: executing program 3 (id=8916): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000340)={r0}) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000240)={r1}) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="85000000a800000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x13}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000100)="d8001c000831cf64e59a180081064e81f782db44fd56170d", 0x18}], 0x1}, 0x8040) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e3, &(0x7f0000000180)={r0, r3}) 363.545832ms ago: executing program 1 (id=8917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x20040040) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000033c0)=ANY=[], 0x90}}, 0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a48000000060a010400000000000000000a0000040900010073797a31000000000900020073797a32000000001c000480180001800d00010073796e70726f7879000000000400028014000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x24044010) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x1}, 0x8020, 0x1ff, 0x4, 0x0, 0x4, 0x1, 0xfffc}, 0x0, 0xefffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x8d, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 298.884123ms ago: executing program 3 (id=8918): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd634936f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="f4001100022b2c", 0x7}], 0x1}, 0x8000) close(r1) socket$kcm(0xa, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000300)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 298.580563ms ago: executing program 5 (id=8919): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r0, 0x25, &(0x7f00000000c0)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x3, 0x2000000000000000}) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) fcntl$lock(r1, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x9, 0x9}) close_range(r3, 0xffffffffffffffff, 0x0) 298.430793ms ago: executing program 3 (id=8920): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20000000}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 295.083393ms ago: executing program 3 (id=8921): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000009c0)=@newtfilter={0x8c, 0x2c, 0xd27, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0x4}, {}, {0x8, 0xfff2}}, [@filter_kind_options=@f_matchall={{0xd}, {0x58, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x3, 0x0, 0x2, 0x7fff, 0x7}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44000}, 0x20000000) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=@gettaction={0x2c, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x25dfdbfc, {}, [@action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}]}]}, 0x2c}}, 0x0) 261.424514ms ago: executing program 3 (id=8922): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r2, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x70, 0x24, 0xe0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x40, 0x2, {{0x1ff, 0x4, 0x0, 0x1, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x1, 0x6, 0x8, 0xfffffffe, 0xd99d}}]}]}}}]}, 0x70}}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmmsg$inet(r3, &(0x7f0000000880)=[{{&(0x7f0000000280)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 225.046555ms ago: executing program 3 (id=8923): r0 = gettid() rt_sigtimedwait(&(0x7f00000000c0)={[0x4000000a]}, 0x0, 0x0, 0x8) tkill(r0, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x9cgU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xbd\xc1: )Jh\xc7\xf1?\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3\xea$-s\x9d\xc7E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\x920\xdcrI\xfc\x92A\xf3{\x8e\xe24>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9d\x00\x00\x00\x00', 0x3) write$binfmt_elf64(r2, &(0x7f0000000140)=ANY=[], 0x78) sendfile(r1, r2, &(0x7f0000000880), 0x4) fcntl$addseals(r2, 0x409, 0x8) fallocate(r2, 0x3, 0x40000016, 0x1) 153.937056ms ago: executing program 5 (id=8924): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x800) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x78}, 0x1, 0x0, 0x0, 0x100440d5}, 0x4000) 153.706566ms ago: executing program 5 (id=8925): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000090}, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=@getchain={0x24, 0x2d, 0x8ff, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x10, 0x4}, {0x2, 0xfff1}, {0xfff2, 0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) 130.591987ms ago: executing program 4 (id=8926): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000001240)='./file0\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x11f4, &(0x7f0000001280)="$eJzs3M+LG2UYB/DHbWvr1v2h1moL0he96GXo7sGLgiyyBWlAaRuhFYSpO9GQMQmZsBARV09e/TvEozdBvOllL/4N3vbisQdxxMTapsRDqXTa8Plc8pD3/cLzkjDwDvPO0ZvffNrrVFknH8fKE2/FyjAi3UqRYiVu+zJee+PnX166ev3G5Z1Wa/dKSpd2rm29nlJav/DjB59/9/JP49Pvf7/+w8k43Pzw6Pft3w7PHp47+vPaJ90qdavUH4xTnm4OBuP8ZlmkvW7Vy1J6ryzyqkjdflWM5sY75WA4nKS8v7e2OhwVVZXy/iT1ikkaD9J4NEn5x3m3n7IsS2urwYNof3urruuIuj4RT0Zd1/VTsRqn4+lYi/XYiM14Jp6N5+JMPB9n44V4Mc5NZzXdNwAAAAAAAAAAAAAAAAAAACyXBzr/f6Hh5gEAAAAAAAAAAAAAAAAAAGBJXL1+4/JOq7V7JaVTEeXX++399uxzNr7TiW6UUcTF2Ig/Ynr6f2ZWX3qntXsxTW3GV+XBP/mD/fax+fzW9HUCC/Nbs3yaz5+M1bvz27ERZxbntxfmT8Wrr9yVz2Ijfv0oBlHGXvydvZP/Yiult99t3ZM/P50HAAAAyyBL/1q4f8+y/xqf5e/j/sA9++vjcf54s2snopp81svLshg1XtzuaPbNQUQ8Io0tcXHi0Wjj/y2Ozf2Rmu/nMS2auybx8Nz50ZvuBAAAAAAAAAAAgPvxMB4nbHqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHAsAAAAACPO3TqNjAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4KgAA//86R81g") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000003}) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x1000418, &(0x7f0000000100)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") creat(&(0x7f0000000140)='./bus\x00', 0x142) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) pwritev2(r2, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0) 111.047577ms ago: executing program 5 (id=8927): close(0x3) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, &(0x7f0000000040)=0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) 60.227849ms ago: executing program 1 (id=8928): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) mount_setattr(0xffffffffffffff9c, 0x0, 0x8000, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000200)={[{@noblock_validity}, {@noauto_da_alloc}, {@nobh}, {@oldalloc}, {@acl}, {@usrjquota, 0x2e}, {@noacl}, {@nodiscard}, {@grpquota}, {@usrquota}], [], 0x2c}, 0x1, 0x45e, &(0x7f0000000480)="$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") accept(0xffffffffffffffff, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8, 0x1, 0x1, 0x0, 0xf5ff}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}]}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10}}, 0xd0}}, 0x0) 60.048319ms ago: executing program 5 (id=8929): write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce22000000fffe80000000000000101000007f0c08000000000000000071273fa7b49301641184a9"], 0xfdef) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x84aebfbd634936f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x82, 0x0) close(r1) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6334ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa3c"], 0xfdef) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0x66) 18.92983ms ago: executing program 5 (id=8930): socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000600)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2b, 0x0, {{@in6=@mcast2, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x4000000000006, 0x3c, 0xffffffffffffffff, 0x200000000000}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in6=@loopback, 0x0, 0x32}, 0xa, @in6=@empty, 0x6, 0x1, 0x2}]}]}, 0xfc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "14d718", 0x14, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0xfffe, 0x0, 0x1001}}}}}}}, 0x0) 0s ago: executing program 1 (id=8931): r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10a0dc, 0x1224, 0x7, 0x5, 0x8, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) ioctl$XFS_IOC_GET_RESBLKS(r0, 0x80105873, &(0x7f0000000380)) openat$ptmx(0xffffffffffffff9c, &(0x7f00000003c0), 0x50000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d35, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket(0x10, 0x80002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) openat$selinux_access(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x24, r2, 0xc4fc9e906872338b, 0x70bd2e, 0x0, {{0x15}, {@void, @val={0xc, 0x99, {0x4, 0x3a}}}}, [@NL80211_ATTR_TID_CONFIG={0x4, 0x146}]}, 0x24}}, 0x40000) kernel console output (not intermixed with test programs): : 0000000000000003 [ 335.699018][T23654] RBP: 00007f6ed4093e6f R08: 0000000000000004 R09: 0000000000000000 [ 335.699033][T23654] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 335.699126][T23654] R13: 00007f6ed4286038 R14: 00007f6ed4285fa0 R15: 00007ffc686b7448 [ 335.699198][T23654] [ 335.745829][ T28] audit: type=1400 audit(1783618380.420:1978): avc: denied { write } for pid=23648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 335.754028][T23654] Mem-Info: [ 335.754038][T23654] active_anon:27915 inactive_anon:26 isolated_anon:0 [ 335.754038][T23654] active_file:4232 inactive_file:25886 isolated_file:0 [ 335.754038][T23654] unevictable:9 dirty:297 writeback:0 [ 335.754038][T23654] slab_reclaimable:4016 slab_unreclaimable:22940 [ 335.754038][T23654] mapped:29400 shmem:17214 pagetables:4289 [ 335.754038][T23654] sec_pagetables:0 bounce:0 [ 335.754038][T23654] kernel_misc_reclaimable:0 [ 335.754038][T23654] free:1841489 free_pcp:9374 free_cma:0 [ 335.754154][T23654] Node 0 active_anon:111660kB inactive_anon:104kB active_file:16928kB inactive_file:103544kB unevictable:36kB isolated(anon):0kB isolated(file):0kB mapped:117600kB dirty:1188kB writeback:0kB shmem:68856kB kernel_stack:5568kB pagetables:17156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 335.754261][T23654] Node 0 [ 335.810903][ T28] audit: type=1400 audit(1783618380.480:1979): avc: denied { write } for pid=23665 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 335.817035][T23654] DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 335.856034][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 335.869180][T23654] lowmem_reserve[]: 0 2878 7857 7857 [ 336.084580][T23654] Node 0 DMA32 free:2944064kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947692kB mlocked:0kB bounce:0kB free_pcp:3628kB local_pcp:104kB free_cma:0kB [ 336.115812][T23654] lowmem_reserve[]: 0 0 4978 4978 [ 336.122654][T23654] Node 0 Normal free:4402008kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:113748kB inactive_anon:104kB active_file:16928kB inactive_file:103544kB unevictable:36kB writepending:1188kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:32912kB local_pcp:16076kB free_cma:0kB [ 336.168992][T23654] lowmem_reserve[]: 0 0 0 0 [ 336.173872][T23654] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 336.187278][T23680] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7318'. [ 336.204267][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 336.204373][ T28] audit: type=1400 audit(1783618380.870:2013): avc: denied { write } for pid=23667 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.237622][ T28] audit: type=1400 audit(1783618380.890:2014): avc: denied { write } for pid=23682 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.237727][T23654] Node 0 DMA32: 2*4kB (M) 1*8kB (M) 3*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944064kB [ 336.294784][T23654] Node 0 Normal: 3078*4kB (UME) 1440*8kB (UME) 1128*16kB (UME) 733*32kB (UM) 481*64kB (UME) 206*128kB (UME) 195*256kB (UME) 102*512kB (UME) 51*1024kB (UM) 14*2048kB (UME) 1004*4096kB (UM) = 4417912kB [ 336.306787][ T28] audit: type=1400 audit(1783618380.970:2015): avc: denied { read write } for pid=23688 comm="syz.7.7320" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 336.326643][T23654] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 336.352714][ T28] audit: type=1400 audit(1783618380.970:2016): avc: denied { open } for pid=23688 comm="syz.7.7320" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 336.367420][T23654] 47348 total pagecache pages [ 336.383912][T23654] 24 pages in swap cache [ 336.390046][T23654] Free swap = 123804kB [ 336.394783][T23654] Total swap = 124996kB [ 336.398958][T23654] 2097051 pages RAM [ 336.402851][T23654] 0 pages HighMem/MovableOnly [ 336.407700][T23654] 81729 pages reserved [ 336.488642][T23492] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 336.498915][T23492] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 336.515822][T23492] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 336.520928][ T28] audit: type=1400 audit(1783618381.190:2017): avc: denied { write } for pid=23687 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.525460][T23710] netlink: 'syz.5.7326': attribute type 1 has an invalid length. [ 336.579067][T23492] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 336.588006][T23492] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 336.596525][ T28] audit: type=1400 audit(1783618381.270:2018): avc: denied { write } for pid=23715 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.625223][T23492] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 336.669111][T23710] 8021q: adding VLAN 0 to HW filter on device bond6 [ 336.696503][T23492] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 336.809747][T23492] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 336.817708][T23721] bond4: (slave syz_tun): Removing an active aggregator [ 336.827149][T23721] bond4: (slave syz_tun): Releasing backup interface [ 336.838584][T23721] bond6: (slave syz_tun): Enslaving as a backup interface with an up link [ 336.869393][ T28] audit: type=1400 audit(1783618381.540:2019): avc: denied { write } for pid=23723 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.925877][T23747] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7333'. [ 336.957934][ T28] audit: type=1400 audit(1783618381.630:2020): avc: denied { write } for pid=23749 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.024122][T23492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.049772][T23492] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.065239][ T6329] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.072912][ T6329] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.101782][T21551] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.109359][T21551] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.142025][ T28] audit: type=1400 audit(1783618381.800:2021): avc: denied { kexec_image_load } for pid=23758 comm="syz.5.7337" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 337.184597][T23765] netlink: 4 bytes leftover after parsing attributes in process `syz.7.7338'. [ 337.387760][T23789] loop5: detected capacity change from 0 to 7 [ 337.406888][ T28] audit: type=1400 audit(1783618382.080:2022): avc: denied { write } for pid=23763 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 337.422612][T23789] loop5: [ 337.483596][T23492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.666653][T23492] veth0_vlan: entered promiscuous mode [ 337.681352][T23492] veth1_vlan: entered promiscuous mode [ 337.706687][T23834] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7354'. [ 337.725731][T23492] veth0_macvtap: entered promiscuous mode [ 337.733341][T23492] veth1_macvtap: entered promiscuous mode [ 337.744774][T23492] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.766728][T23492] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.793067][T19817] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.826042][T19817] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.859521][T19817] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.878274][T19817] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 338.099030][T23883] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.7364'. [ 338.183060][T23892] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7366'. [ 338.275662][T23906] netlink: 'syz.8.7370': attribute type 1 has an invalid length. [ 338.294528][T23906] 8021q: adding VLAN 0 to HW filter on device bond11 [ 338.840379][T23952] loop0: detected capacity change from 0 to 512 [ 338.875059][T23952] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 338.920561][T23952] EXT4-fs (loop0): 1 truncate cleaned up [ 338.946122][T23952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 339.019661][T23492] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 339.186933][T23989] netlink: 20 bytes leftover after parsing attributes in process `syz.7.7382'. [ 340.004173][T24049] netlink: 200 bytes leftover after parsing attributes in process `syz.5.7402'. [ 340.130552][T24070] loop7: detected capacity change from 0 to 512 [ 340.143672][T24070] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 340.156409][T24070] ext4 filesystem being mounted at /268/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 340.231381][T19620] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 340.317334][T24080] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 340.672757][T24094] loop0: detected capacity change from 0 to 512 [ 341.524850][T24130] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7431'. [ 341.617864][T24142] hsr0: entered promiscuous mode [ 341.624688][T24142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7437'. [ 341.643157][T24140] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 341.659008][T24145] loop7: detected capacity change from 0 to 128 [ 341.671382][T24142] hsr_slave_0: left promiscuous mode [ 341.677382][T24145] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 341.693893][T24142] hsr_slave_1: left promiscuous mode [ 341.695966][T24145] ext4 filesystem being mounted at /274/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.713169][T24142] hsr0 (unregistering): left promiscuous mode [ 342.003300][ T28] kauditd_printk_skb: 133 callbacks suppressed [ 342.003356][ T28] audit: type=1400 audit(1783618386.680:2156): avc: denied { watch } for pid=24173 comm="syz.8.7450" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 342.434083][T24187] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7455'. [ 342.449581][T24187] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7455'. [ 342.472410][T24187] netlink: 28 bytes leftover after parsing attributes in process `syz.0.7455'. [ 342.498965][T24187] netlink: 32 bytes leftover after parsing attributes in process `syz.0.7455'. [ 342.519750][T19620] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 342.892192][T24209] loop7: detected capacity change from 0 to 512 [ 342.901892][ T28] audit: type=1400 audit(1783618387.570:2157): avc: denied { accept } for pid=24204 comm="syz.3.7462" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 342.948757][T24209] EXT4-fs: Ignoring removed nobh option [ 342.968649][T24209] EXT4-fs (loop7): failed to initialize system zone (-117) [ 342.976211][T24209] EXT4-fs (loop7): mount failed [ 343.487380][T24245] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7476'. [ 343.531836][ T5856] IPVS: starting estimator thread 0... [ 343.631025][T24250] IPVS: using max 2256 ests per chain, 112800 per kthread [ 343.934769][T24278] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7493'. [ 343.947606][T24280] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7492'. [ 344.309484][ T28] audit: type=1400 audit(1783618388.980:2158): avc: denied { create } for pid=24289 comm="syz.7.7497" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=can_socket permissive=1 [ 344.378636][T24295] netlink: 24 bytes leftover after parsing attributes in process `syz.0.7500'. [ 344.642309][ T28] audit: type=1400 audit(1783618389.310:2159): avc: denied { write } for pid=24308 comm="syz.5.7505" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 344.679834][ T28] audit: type=1400 audit(1783618389.320:2160): avc: denied { ioctl } for pid=24308 comm="syz.5.7505" path="socket:[70174]" dev="sockfs" ino=70174 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sock_file permissive=1 [ 344.919555][T24321] loop7: detected capacity change from 0 to 2048 [ 344.945644][T24321] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 344.986232][T24321] ext4 filesystem being mounted at /286/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 345.040091][ T28] audit: type=1400 audit(1783618389.710:2161): avc: denied { write } for pid=24320 comm="syz.7.7510" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 345.123622][T24332] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.7510: bg 0: block 345: padding at end of block bitmap is not set [ 345.140693][T24332] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 128 with error 117 [ 345.165874][T24332] EXT4-fs (loop7): This should not happen!! Data will be lost [ 345.165874][T24332] [ 345.180821][T21537] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 144 with max blocks 628 with error 28 [ 345.201220][T21537] EXT4-fs (loop7): This should not happen!! Data will be lost [ 345.201220][T21537] [ 345.211247][T21537] EXT4-fs (loop7): Total free blocks count 0 [ 345.217328][T21537] EXT4-fs (loop7): Free/Dirty block details [ 345.223674][T21537] EXT4-fs (loop7): free_blocks=0 [ 345.229508][T21537] EXT4-fs (loop7): dirty_blocks=640 [ 345.235075][T21537] EXT4-fs (loop7): Block reservation details [ 345.318028][T19620] EXT4-fs warning (device loop7): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 345.645044][T21537] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 345.828513][ T28] audit: type=1400 audit(1783618390.500:2162): avc: denied { mounton } for pid=24378 comm="syz.5.7530" path="/" dev="autofs" ino=70255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 345.957371][T24388] netlink: 'syz.5.7534': attribute type 1 has an invalid length. [ 345.965656][T24388] netlink: 'syz.5.7534': attribute type 2 has an invalid length. [ 346.792341][T24427] __nla_validate_parse: 6 callbacks suppressed [ 346.792358][T24427] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7546'. [ 347.089644][T24442] netlink: 4 bytes leftover after parsing attributes in process `syz.3.7552'. [ 347.100269][T24442] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7552'. [ 347.363254][T24459] netlink: 'syz.7.7563': attribute type 4 has an invalid length. [ 347.373484][T24459] netlink: 'syz.7.7563': attribute type 4 has an invalid length. [ 347.422646][T24465] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7566'. [ 348.070388][T24493] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7574'. [ 348.990714][T24547] bridge0: port 3(team0) entered blocking state [ 349.000258][T24547] bridge0: port 3(team0) entered disabled state [ 349.011577][T24547] team0: entered allmulticast mode [ 349.020956][T24547] team_slave_0: entered allmulticast mode [ 349.030262][T24547] team_slave_1: entered allmulticast mode [ 349.048165][T24547] team0: entered promiscuous mode [ 349.054395][T24547] team_slave_0: entered promiscuous mode [ 349.062025][T24547] team_slave_1: entered promiscuous mode [ 349.068955][T24547] bridge0: port 3(team0) entered blocking state [ 349.075391][T24547] bridge0: port 3(team0) entered forwarding state [ 349.096572][T24551] netlink: 168864 bytes leftover after parsing attributes in process `syz.5.7599'. [ 349.119861][T24551] netlink: del zone limit has 4 unknown bytes [ 349.152467][T24554] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7600'. [ 349.501012][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 349.727710][ T28] audit: type=1400 audit(1783618394.402:2163): avc: denied { write } for pid=24569 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.806983][ T28] audit: type=1400 audit(1783618394.482:2164): avc: denied { write } for pid=24585 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 349.967024][ T28] audit: type=1400 audit(1783618394.642:2165): avc: denied { write } for pid=24591 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.009272][ T28] audit: type=1400 audit(1783618394.682:2166): avc: denied { write } for pid=24604 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.243203][T24615] loop7: detected capacity change from 0 to 512 [ 350.277863][T24615] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 350.287416][T24615] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 350.299210][T24615] EXT4-fs (loop7): 1 truncate cleaned up [ 350.305404][T24615] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.351331][T24615] EXT4-fs error (device loop7): ext4_append:79: inode #2: comm syz.7.7612: Logical block already allocated [ 350.364855][ T28] audit: type=1400 audit(1783618395.032:2167): avc: denied { write } for pid=24614 comm="syz.7.7612" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 350.468970][T19620] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.482194][T24630] loop0: detected capacity change from 0 to 512 [ 350.513465][T24630] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.574984][T24630] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 350.616026][ T28] audit: type=1400 audit(1783618395.282:2168): avc: denied { write } for pid=24621 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.729673][ T28] audit: type=1400 audit(1783618395.342:2169): avc: denied { write } for pid=24642 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.788042][T23492] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.788524][ T28] audit: type=1400 audit(1783618395.352:2170): avc: denied { write } for pid=24629 comm="syz.0.7615" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 351.066276][ T28] audit: type=1400 audit(1783618395.732:2171): avc: denied { write } for pid=24648 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.150919][ T28] audit: type=1400 audit(1783618395.812:2172): avc: denied { write } for pid=24674 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.652657][T24693] SELinux: Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped). [ 351.968854][T24707] netlink: 2384 bytes leftover after parsing attributes in process `syz.5.7638'. [ 352.599271][T24726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.638781][T24726] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.671333][T24726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 352.747480][T21538] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 352.845512][T24732] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 353.656285][T24726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.683937][T24726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.715686][T24726] veth1_vlan: left promiscuous mode [ 353.729458][T24726] veth0_vlan: left promiscuous mode [ 353.745652][T24726] veth0_vlan: entered promiscuous mode [ 353.759081][T24726] veth1_vlan: entered promiscuous mode [ 353.790473][T24726] veth1_macvtap: left promiscuous mode [ 353.826667][T24726] veth0_macvtap: left promiscuous mode [ 353.847690][T24726] veth0_macvtap: entered promiscuous mode [ 353.871735][T24726] geneve1: left promiscuous mode [ 353.883016][T24726] veth1_macvtap: entered promiscuous mode [ 353.885735][T24766] netlink: 12 bytes leftover after parsing attributes in process `syz.7.7662'. [ 353.998686][T24768] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7663'. [ 354.112087][T24726] 8021q: adding VLAN 0 to HW filter on device bond1 [ 354.123157][T24726] 8021q: adding VLAN 0 to HW filter on device bond2 [ 354.135687][T24726] 8021q: adding VLAN 0 to HW filter on device bond3 [ 354.144783][T24726] 8021q: adding VLAN 0 to HW filter on device bond4 [ 354.157692][T24726] 8021q: adding VLAN 0 to HW filter on device bond5 [ 354.165808][T24726] geneve1: entered promiscuous mode [ 354.172586][T24726] 8021q: adding VLAN 0 to HW filter on device bond6 [ 354.245939][T24726] erspan0: entered promiscuous mode [ 354.253577][T24726] 8021q: adding VLAN 0 to HW filter on device bond7 [ 354.295067][T24726] 8021q: adding VLAN 0 to HW filter on device eth0 [ 354.304321][T24726] 8021q: adding VLAN 0 to HW filter on device eth1 [ 354.314074][T24726] 8021q: adding VLAN 0 to HW filter on device eth2 [ 354.323775][T24726] 8021q: adding VLAN 0 to HW filter on device eth3 [ 354.394621][T21537] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.403173][T21537] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.411958][T21537] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 42349 - 0 [ 354.420783][T21537] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.429482][T21537] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.438087][T21537] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 42349 - 0 [ 354.483179][T24768] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7663'. [ 354.499435][T21537] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.513853][T21537] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.537000][T21537] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 42349 - 0 [ 354.548984][T21537] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 354.566803][T21537] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.592670][T21537] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 42349 - 0 [ 354.621553][T21542] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.709385][T21542] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.794783][T21542] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.886950][T21542] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.960971][T24824] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7683'. [ 355.054052][T21542] team0: left allmulticast mode [ 355.064896][T21542] team_slave_0: left allmulticast mode [ 355.070444][T21542] team_slave_1: left allmulticast mode [ 355.077733][T21542] team0: left promiscuous mode [ 355.083002][T21542] team_slave_0: left promiscuous mode [ 355.088549][T21542] team_slave_1: left promiscuous mode [ 355.094780][T21542] bridge0: port 3(team0) entered disabled state [ 355.111120][T21542] bridge_slave_1: left allmulticast mode [ 355.116966][T21542] bridge_slave_1: left promiscuous mode [ 355.122844][T21542] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.132855][T21542] bridge_slave_0: left allmulticast mode [ 355.146002][T21542] bridge_slave_0: left promiscuous mode [ 355.152220][T21542] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.219388][T24851] loop2: detected capacity change from 0 to 7 [ 355.282854][T21542] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.299061][T21542] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.320265][T21542] bond0 (unregistering): Released all slaves [ 355.402299][T21542] hsr_slave_0: left promiscuous mode [ 355.410989][T21542] hsr_slave_1: left promiscuous mode [ 355.420242][T21542] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.438009][T21542] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.457438][T21542] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.465328][T21542] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.484250][T21542] veth1_macvtap: left promiscuous mode [ 355.492361][T21542] veth0_macvtap: left promiscuous mode [ 355.498280][T21542] veth1_vlan: left promiscuous mode [ 355.511906][T21542] veth0_vlan: left promiscuous mode [ 355.558304][ T28] kauditd_printk_skb: 8 callbacks suppressed [ 355.558324][ T28] audit: type=1400 audit(1783618400.233:2181): avc: denied { write } for pid=24867 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.614852][ T28] audit: type=1400 audit(1783618400.293:2182): avc: denied { write } for pid=24882 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 355.669353][T21542] team0 (unregistering): Port device team_slave_1 removed [ 355.681605][T21542] team0 (unregistering): Port device team_slave_0 removed [ 355.750100][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 355.818600][T24791] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.825900][T24791] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.833878][T24791] bridge_slave_0: entered allmulticast mode [ 355.848534][T24791] bridge_slave_0: entered promiscuous mode [ 355.877842][T24791] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.886840][T24791] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.896801][T24791] bridge_slave_1: entered allmulticast mode [ 355.904332][T24791] bridge_slave_1: entered promiscuous mode [ 355.994052][T24791] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 356.008280][T24791] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 356.097537][T24791] team0: Port device team_slave_0 added [ 356.099540][ T28] audit: type=1400 audit(1783618400.773:2183): avc: denied { write } for pid=24913 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.120729][T24791] team0: Port device team_slave_1 added [ 356.158911][ T28] audit: type=1400 audit(1783618400.833:2184): avc: denied { write } for pid=24924 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.221346][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 356.239195][T24791] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.250687][T24791] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.291722][T24791] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.320974][T24927] netlink: 'syz.3.7708': attribute type 3 has an invalid length. [ 356.329228][T21542] IPVS: stop unused estimator thread 0... [ 356.335441][T24927] netlink: 'syz.3.7708': attribute type 3 has an invalid length. [ 356.364659][T24791] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.381583][T24791] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 356.423086][T24936] netlink: 'syz.7.7711': attribute type 1 has an invalid length. [ 356.432819][T24791] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.462259][T24936] bond1: entered promiscuous mode [ 356.471858][T24936] 8021q: adding VLAN 0 to HW filter on device bond1 [ 356.521904][T24791] hsr_slave_0: entered promiscuous mode [ 356.529722][T24791] hsr_slave_1: entered promiscuous mode [ 356.536681][T24791] debugfs: 'hsr0' already exists in 'hsr' [ 356.545412][T24791] Cannot create hsr debugfs directory [ 356.579125][T24936] veth9: entered promiscuous mode [ 356.592482][ T28] audit: type=1400 audit(1783618401.273:2185): avc: denied { write } for pid=24934 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.596615][T24936] bond1: (slave veth9): Enslaving as a backup interface with a down link [ 356.656190][ T28] audit: type=1400 audit(1783618401.333:2186): avc: denied { write } for pid=24953 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 356.731686][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 357.074675][ T28] audit: type=1400 audit(1783618401.753:2187): avc: denied { write } for pid=24963 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 357.139874][T24791] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 357.162660][T24791] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 357.172041][ T28] audit: type=1400 audit(1783618401.843:2188): avc: denied { write } for pid=24980 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 357.178937][T24791] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 357.237962][T24791] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 357.254734][T24791] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 357.270821][T24791] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 357.284521][T24791] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 357.311642][T24791] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 357.368985][T24791] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.398265][T24791] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.420980][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 357.421259][T21542] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.435537][T21542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.453024][T21537] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.460566][T21537] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.479395][ T28] audit: type=1400 audit(1783618402.153:2189): avc: denied { write } for pid=24983 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 357.596611][ T28] audit: type=1400 audit(1783618402.263:2190): avc: denied { write } for pid=25007 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 357.752825][T24791] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.945507][T24791] veth0_vlan: entered promiscuous mode [ 357.981097][T24791] veth1_vlan: entered promiscuous mode [ 358.046790][T24791] veth0_macvtap: entered promiscuous mode [ 358.070461][T24791] veth1_macvtap: entered promiscuous mode [ 358.088387][T24791] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.106318][T24791] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.145865][T21550] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.170182][T21550] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.202549][T21550] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.225848][T21550] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.151680][T25133] loop0: detected capacity change from 0 to 128 [ 359.180321][T25133] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 359.211834][T25133] ext4 filesystem being mounted at /3/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 359.332003][T24791] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 360.487794][T25195] netlink: 24 bytes leftover after parsing attributes in process `syz.8.7770'. [ 360.675367][T25212] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7776'. [ 361.030391][T25233] sock: sock_set_timeout: `syz.0.7784' (pid 25233) tries to set negative timeout [ 361.070072][T25235] xt_hashlimit: size too large, truncated to 1048576 [ 362.096176][ T28] kauditd_printk_skb: 7 callbacks suppressed [ 362.096203][ T28] audit: type=1400 audit(1783618406.773:2198): avc: denied { watch watch_reads } for pid=25300 comm="syz.3.7809" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 362.581163][T25310] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7813'. [ 362.591500][T25310] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7813'. [ 362.608117][T25310] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7813'. [ 362.964055][T25346] netlink: 'syz.0.7822': attribute type 1 has an invalid length. [ 362.984521][T25346] netlink: 224 bytes leftover after parsing attributes in process `syz.0.7822'. [ 363.253104][ T28] audit: type=1326 audit(1783618407.933:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25366 comm="syz.5.7832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6ed3ffde59 code=0x0 [ 363.417970][T25380] netlink: 24 bytes leftover after parsing attributes in process `syz.3.7837'. [ 363.792509][ T28] audit: type=1400 audit(1783618408.473:2200): avc: denied { watch } for pid=25394 comm="syz.8.7843" path="/" dev="configfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 365.384024][T25463] 9pnet_fd: Insufficient options for proto=fd [ 366.566069][ T28] audit: type=1326 audit(1783618411.243:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25484 comm="syz.7.7879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a4f6de59 code=0x7ffc0000 [ 366.600948][ T28] audit: type=1326 audit(1783618411.243:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25484 comm="syz.7.7879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a4f6de59 code=0x7ffc0000 [ 366.642332][ T28] audit: type=1326 audit(1783618411.243:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25484 comm="syz.7.7879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a4f6de59 code=0x7ffc0000 [ 366.690923][ T28] audit: type=1326 audit(1783618411.243:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25484 comm="syz.7.7879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fa6a4f6de59 code=0x7ffc0000 [ 366.740897][ T28] audit: type=1326 audit(1783618411.243:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25484 comm="syz.7.7879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6a4f6de59 code=0x7ffc0000 [ 366.781296][ T28] audit: type=1326 audit(1783618411.283:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25484 comm="syz.7.7879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa6a4f2e68e code=0x7ffc0000 [ 366.845734][ T28] audit: type=1326 audit(1783618411.303:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=25484 comm="syz.7.7879" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa6a4f2e68e code=0x7ffc0000 [ 367.628483][T25533] loop0: detected capacity change from 0 to 1024 [ 367.659539][T25533] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 367.716722][T25533] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.7900: Invalid block bitmap block 0 in block_group 0 [ 367.793168][T25533] loop0: lost filesystem error report for type 5 error -117 [ 367.793669][T25533] __quota_error: 9 callbacks suppressed [ 367.793692][T25533] Quota error (device loop0): write_blk: dquota write failed [ 367.801480][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 367.801509][ C1] EXT4-fs (loop0): initial error at time 1783618412: ext4_read_block_bitmap_nowait:483 [ 367.801538][ C1] EXT4-fs (loop0): last error at time 1783618412: ext4_read_block_bitmap_nowait:483 [ 367.851428][T25533] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 367.872166][T25533] EXT4-fs error (device loop0): ext4_acquire_dquot:7041: comm syz.0.7900: Failed to acquire dquot type 0 [ 367.896084][T25533] loop0: lost filesystem error report for type 5 error -117 [ 367.897707][T25533] EXT4-fs error (device loop0): ext4_free_blocks:6718: comm syz.0.7900: Freeing blocks not in datazone - block = 0, count = 4096 [ 367.948088][T25533] loop0: lost filesystem error report for type 5 error -117 [ 367.949799][T25533] EXT4-fs error (device loop0): ext4_read_inode_bitmap:141: comm syz.0.7900: Invalid inode bitmap blk 0 in block_group 0 [ 367.970481][T21542] Quota error (device loop0): do_check_range: Getting block 0 out of range 1-7 [ 367.986193][T21542] EXT4-fs error (device loop0): ext4_release_dquot:7077: comm kworker/u8:28: Failed to release dquot type 0 [ 367.996806][T25533] loop0: lost filesystem error report for type 5 error -117 [ 367.999695][T25533] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 368.015805][T21542] loop0: lost filesystem error report for type 5 error -117 [ 368.038168][T25533] loop0: lost filesystem error report for type 5 error -117 [ 368.057702][T25533] EXT4-fs (loop0): 1 orphan inode deleted [ 368.117444][T25533] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 368.325927][T24791] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 368.438165][ T28] audit: type=1400 audit(1783618413.113:2217): avc: denied { mounton } for pid=25544 comm="syz.0.7905" path="/37/file0" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 368.494102][ T28] audit: type=1400 audit(1783618413.153:2218): avc: denied { unmount } for pid=24791 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 369.297830][T25582] loop7: detected capacity change from 0 to 1024 [ 369.328199][T25582] EXT4-fs (loop7): couldn't mount as ext2 due to feature incompatibilities [ 369.736706][T25593] netlink: 'syz.8.7933': attribute type 1 has an invalid length. [ 369.793227][T25593] 8021q: adding VLAN 0 to HW filter on device bond12 [ 369.836812][T25593] bond12: (slave dummy0): Enslaving as a backup interface with an up link [ 369.873971][T25593] netlink: 'syz.8.7933': attribute type 10 has an invalid length. [ 369.901725][T21537] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 369.949072][T25593] netlink: 40 bytes leftover after parsing attributes in process `syz.8.7933'. [ 370.029157][T25593] dummy0: entered promiscuous mode [ 370.051784][T21542] bond12: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 370.076511][T25593] bond12: (slave dummy0): Removing an active aggregator [ 370.146708][T25593] bond12: (slave dummy0): Releasing backup interface [ 370.408725][T25591] loop7: detected capacity change from 0 to 1024 [ 371.030302][T25639] syzkaller1: entered promiscuous mode [ 371.053274][T25639] syzkaller1: entered allmulticast mode [ 371.753206][T25685] uprobe: syz.0.7964:25685 failed to unregister, leaking uprobe [ 372.781201][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 372.907900][T25734] xt_hashlimit: size too large, truncated to 1048576 [ 373.594341][T25765] sctp: [Deprecated]: syz.8.7992 (pid 25765) Use of struct sctp_assoc_value in delayed_ack socket option. [ 373.594341][T25765] Use struct sctp_sack_info instead [ 374.015790][T25782] netlink: 'syz.5.8002': attribute type 1 has an invalid length. [ 374.054012][T25782] 8021q: adding VLAN 0 to HW filter on device bond7 [ 374.076478][T25782] macvlan2: entered promiscuous mode [ 374.090155][T25782] macvlan2: entered allmulticast mode [ 374.111646][T25782] bond7: entered promiscuous mode [ 374.134398][T25782] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 374.166921][T25782] bond7: left promiscuous mode [ 375.420479][T25838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 375.441555][ T28] audit: type=1400 audit(1783618420.113:2219): avc: denied { bind } for pid=25839 comm="syz.0.8027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 375.442881][T25838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 375.532296][ T28] audit: type=1400 audit(1783618420.213:2220): avc: denied { read } for pid=25837 comm="syz.7.8026" path="socket:[75936]" dev="sockfs" ino=75936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 375.728884][T25852] netlink: 6 bytes leftover after parsing attributes in process `syz.5.8034'. [ 375.738347][T25852] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 375.771416][T25854] netlink: 'syz.5.8035': attribute type 1 has an invalid length. [ 375.787729][T25854] 8021q: adding VLAN 0 to HW filter on device bond8 [ 375.807042][T25854] bond8: (slave veth9): Enslaving as an active interface with a down link [ 375.819488][T25854] bond8: (slave macvlan1): Enslaving as an active interface with a down link [ 375.866493][T21538] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.916065][T21538] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.978443][T21538] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 375.978886][T25872] sctp: [Deprecated]: syz.5.8039 (pid 25872) Use of struct sctp_assoc_value in delayed_ack socket option. [ 375.978886][T25872] Use struct sctp_sack_info instead [ 376.034348][T25876] netlink: 'syz.5.8040': attribute type 9 has an invalid length. [ 376.042458][T25876] netlink: 399 bytes leftover after parsing attributes in process `syz.5.8040'. [ 376.059967][T21538] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 376.132088][T25859] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.152652][T25859] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.192723][T25859] bridge_slave_0: entered allmulticast mode [ 376.222976][T25859] bridge_slave_0: entered promiscuous mode [ 376.275591][T25859] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.308321][T25859] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.325210][T25859] bridge_slave_1: entered allmulticast mode [ 376.340281][T25859] bridge_slave_1: entered promiscuous mode [ 376.400463][T25903] netlink: 'syz.3.8050': attribute type 4 has an invalid length. [ 376.404380][T25859] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.426946][T25903] netlink: 'syz.3.8050': attribute type 4 has an invalid length. [ 376.438232][T21538] bridge_slave_1: left allmulticast mode [ 376.444836][T21538] bridge_slave_1: left promiscuous mode [ 376.456314][T21538] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.607839][T21538] bridge_slave_0: left allmulticast mode [ 376.617310][T21538] bridge_slave_0: left promiscuous mode [ 376.637343][T21538] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.804122][T21538] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.841440][T21538] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.866081][T21538] bond0 (unregistering): Released all slaves [ 376.882980][T25859] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 377.028439][T21538] hsr_slave_0: left promiscuous mode [ 377.034961][T21538] hsr_slave_1: left promiscuous mode [ 377.042744][T21538] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.045895][T25948] netlink: 'syz.5.8067': attribute type 1 has an invalid length. [ 377.056514][T21538] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 377.079248][T21538] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.102289][T21538] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 377.120126][T21538] veth1_macvtap: left promiscuous mode [ 377.127727][T21538] veth0_macvtap: left promiscuous mode [ 377.134861][T21538] veth1_vlan: left promiscuous mode [ 377.143951][T21538] veth0_vlan: left promiscuous mode [ 377.406095][T21538] team0 (unregistering): Port device team_slave_1 removed [ 377.418936][T21538] team0 (unregistering): Port device team_slave_0 removed [ 377.465796][T25965] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8073'. [ 377.492788][T25859] team0: Port device team_slave_0 added [ 377.505472][T25859] team0: Port device team_slave_1 added [ 377.528964][T25948] 8021q: adding VLAN 0 to HW filter on device bond9 [ 377.541946][T25952] bond9: (slave team_slave_1): Enslaving as an active interface with a down link [ 377.559938][T25953] bond9 (unregistering): (slave team_slave_1): Releasing active interface [ 377.571115][T25953] bond9 (unregistering): Released all slaves [ 377.620721][T25859] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.633937][T25859] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.671117][T25859] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.708881][T25859] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.719756][T25859] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 377.748544][T25859] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.816833][T25859] hsr_slave_0: entered promiscuous mode [ 377.835065][T25859] hsr_slave_1: entered promiscuous mode [ 377.847465][T25859] debugfs: 'hsr0' already exists in 'hsr' [ 377.861381][T25859] Cannot create hsr debugfs directory [ 377.996138][ T28] audit: type=1400 audit(1783618422.673:2221): avc: denied { write } for pid=25983 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.095334][ T28] audit: type=1400 audit(1783618422.773:2222): avc: denied { write } for pid=26008 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.165837][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 378.329354][T25859] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 378.341411][T25859] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 378.359131][T25859] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 378.360972][ T28] audit: type=1400 audit(1783618423.033:2223): avc: denied { firmware_load } for pid=26021 comm="syz.7.8089" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 378.394724][T25859] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 378.407443][T25859] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 378.418074][T25859] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 378.434131][T25859] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 378.446236][T25859] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 378.454695][ T28] audit: type=1400 audit(1783618423.133:2224): avc: denied { write } for pid=26020 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.544423][T25859] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.552252][ T28] audit: type=1400 audit(1783618423.223:2225): avc: denied { write } for pid=26046 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 378.580700][T25859] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.591520][T21543] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.598595][T21543] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.622105][T19817] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.629642][T19817] bridge0: port 2(bridge_slave_1) entered forwarding state [ 378.675340][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 378.762722][ T28] audit: type=1400 audit(1783618423.443:2226): avc: denied { watch } for pid=26061 comm="syz.7.8097" path="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 378.896087][T25859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.991976][ T28] audit: type=1400 audit(1783618423.673:2227): avc: denied { write } for pid=26070 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 379.051282][T25859] veth0_vlan: entered promiscuous mode [ 379.054664][ T28] audit: type=1400 audit(1783618423.733:2228): avc: denied { write } for pid=26096 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 379.059672][T25859] veth1_vlan: entered promiscuous mode [ 379.104310][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 379.146819][T25859] veth0_macvtap: entered promiscuous mode [ 379.162222][T25859] veth1_macvtap: entered promiscuous mode [ 379.182906][T25859] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.202748][T25859] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.216430][T21539] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.229900][T21539] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.249737][T21539] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.264181][T21539] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.428530][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 379.449845][T26124] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8101'. [ 379.511334][T26124] netlink: 16 bytes leftover after parsing attributes in process `syz.7.8101'. [ 379.530568][T26124] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8101'. [ 379.576841][T26141] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8106'. [ 380.153905][T26210] netlink: 36 bytes leftover after parsing attributes in process `syz.5.8132'. [ 380.544710][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 380.544725][ T28] audit: type=1400 audit(1783618425.223:2240): avc: denied { write } for pid=26232 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 380.629208][ T28] audit: type=1400 audit(1783618425.303:2241): avc: denied { write } for pid=26256 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 380.933845][ T28] audit: type=1400 audit(1783618425.613:2242): avc: denied { write } for pid=26264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.001537][ T28] audit: type=1400 audit(1783618425.673:2243): avc: denied { write } for pid=26287 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.234994][ T28] audit: type=1400 audit(1783618425.913:2244): avc: denied { write } for pid=26291 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.326340][ T28] audit: type=1400 audit(1783618425.993:2245): avc: denied { write } for pid=26318 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.587483][ T28] audit: type=1400 audit(1783618426.253:2246): avc: denied { write } for pid=26323 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.663216][ T28] audit: type=1400 audit(1783618426.263:2247): avc: denied { write } for pid=26341 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.710380][T26350] netlink: 'syz.7.8158': attribute type 1 has an invalid length. [ 381.750690][T26350] netlink: 'syz.7.8158': attribute type 4 has an invalid length. [ 381.776494][T26350] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.8158'. [ 381.886731][T26363] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8160'. [ 381.907993][ T28] audit: type=1400 audit(1783618426.583:2248): avc: denied { write } for pid=26347 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 381.989421][ T28] audit: type=1400 audit(1783618426.663:2249): avc: denied { write } for pid=26366 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 382.404253][T26400] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8168'. [ 383.338298][T26498] sit0: left promiscuous mode [ 383.351883][T26498] sit0: left allmulticast mode [ 383.380495][T26498] dummy0: left promiscuous mode [ 383.422864][T26498] bond4: left promiscuous mode [ 383.442959][T26498] veth3: left promiscuous mode [ 383.452959][T26498] ip6tnl1: left promiscuous mode [ 383.475365][T26498] bond6: left promiscuous mode [ 383.487174][T26498] bond8: left promiscuous mode [ 383.497335][T26498] ip6gre2: left promiscuous mode [ 383.511519][T26498] bond9: left allmulticast mode [ 383.780017][T26536] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8202'. [ 383.928563][T26550] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=19 sclass=netlink_tcpdiag_socket pid=26550 comm=syz.1.8209 [ 383.974525][T26550] netlink: 'syz.1.8209': attribute type 12 has an invalid length. [ 384.001758][T26550] netlink: 'syz.1.8209': attribute type 29 has an invalid length. [ 384.030091][T26550] netlink: 148 bytes leftover after parsing attributes in process `syz.1.8209'. [ 384.065794][T26570] netlink: 16 bytes leftover after parsing attributes in process `syz.8.8216'. [ 384.067691][T26550] netlink: 'syz.1.8209': attribute type 1 has an invalid length. [ 384.112339][T26550] netlink: 'syz.1.8209': attribute type 2 has an invalid length. [ 384.426590][T26591] loop7: detected capacity change from 0 to 1024 [ 384.467652][T26591] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 384.498968][T26591] EXT4-fs (loop7): shut down requested (0) [ 387.450557][T19620] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 387.523951][T26589] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8224'. [ 387.553343][T26616] netlink: 'syz.7.8231': attribute type 1 has an invalid length. [ 387.598723][T26616] 8021q: adding VLAN 0 to HW filter on device bond2 [ 387.626175][T26616] team0: Port device team_slave_1 removed [ 387.642950][T26616] bond2: (slave team_slave_1): making interface the new active one [ 387.654594][T26616] bond2: (slave team_slave_1): Enslaving as an active interface with an up link [ 387.687829][T26628] netlink: 240 bytes leftover after parsing attributes in process `syz.5.8236'. [ 387.705919][T26616] bond2 (unregistering): (slave team_slave_1): Releasing active interface [ 387.718648][T26616] bond2 (unregistering): Released all slaves [ 387.825752][T26641] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8241'. [ 387.881852][T26645] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8242'. [ 387.992751][T26645] loop7: detected capacity change from 0 to 512 [ 388.031401][T26645] EXT4-fs: Ignoring removed bh option [ 388.041454][T26645] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended [ 388.051647][T26645] EXT4-fs (loop7): mounting ext2 file system using the ext4 subsystem [ 388.116113][T26645] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended [ 388.142334][T26645] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 388.185147][T26645] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 388.303018][T19620] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 388.745688][T26697] loop7: detected capacity change from 0 to 128 [ 388.786471][T26697] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 388.815266][T26697] ext4 filesystem being mounted at /414/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 388.897127][T26715] netlink: 'syz.5.8269': attribute type 1 has an invalid length. [ 388.910457][T26715] 8021q: adding VLAN 0 to HW filter on device bond9 [ 388.945556][T26718] netlink: 104 bytes leftover after parsing attributes in process `syz.3.8268'. [ 388.973059][T19620] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 389.009263][T26715] bond9: (slave veth11): Enslaving as an active interface with a down link [ 389.042236][T26723] bond0: (slave dummy0): Releasing backup interface [ 389.055775][T26723] bond9: (slave dummy0): making interface the new active one [ 389.071663][T26723] dummy0: entered promiscuous mode [ 389.077193][T26723] bond9: (slave dummy0): Enslaving as an active interface with an up link [ 389.214630][T26750] netlink: 'syz.7.8280': attribute type 83 has an invalid length. [ 389.319055][T26756] loop7: detected capacity change from 0 to 764 [ 389.337676][T26758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8283'. [ 389.405299][T26756] netlink: 104 bytes leftover after parsing attributes in process `syz.7.8282'. [ 389.618975][T26774] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8289'. [ 390.061181][T21543] bond1: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 390.087145][T21543] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 390.125616][T21543] bond1: active interface up! [ 390.186477][T26800] tipc: Failed to remove unknown binding: 66,1,1/0:1137565942/1137565944 [ 390.262033][T26798] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.296232][T26798] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.313227][T26798] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.405641][T26798] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 390.417968][T26798] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 390.444159][T26798] veth1_vlan: left promiscuous mode [ 390.452119][T26798] veth0_vlan: left promiscuous mode [ 390.466245][T26798] veth0_vlan: entered promiscuous mode [ 390.476202][T26798] veth1_vlan: entered promiscuous mode [ 390.496945][T26798] veth1_macvtap: left promiscuous mode [ 390.508825][T26798] veth0_macvtap: left promiscuous mode [ 390.520300][T26798] veth0_macvtap: entered promiscuous mode [ 390.533635][T26798] veth1_macvtap: entered promiscuous mode [ 390.552713][T26798] 8021q: adding VLAN 0 to HW filter on device bond1 [ 390.588328][T26798] 8021q: adding VLAN 0 to HW filter on device bond2 [ 390.609924][T26798] 8021q: adding VLAN 0 to HW filter on device bond3 [ 390.629626][T26798] batman_adv: batadv0: Interface activated: gretap2 [ 390.636513][T26823] netlink: 7 bytes leftover after parsing attributes in process `syz.5.8306'. [ 390.678404][T26798] 8021q: adding VLAN 0 to HW filter on device bond4 [ 390.703228][T26798] 8021q: adding VLAN 0 to HW filter on device bond5 [ 390.716765][T26798] 8021q: adding VLAN 0 to HW filter on device team1 [ 390.727832][T26798] 8021q: adding VLAN 0 to HW filter on device eth0 [ 390.755120][T26798] 8021q: adding VLAN 0 to HW filter on device eth1 [ 390.766926][T26798] 8021q: adding VLAN 0 to HW filter on device eth2 [ 390.779374][T26798] 8021q: adding VLAN 0 to HW filter on device eth3 [ 390.789492][T26798] 8021q: adding VLAN 0 to HW filter on device bond6 [ 390.829907][T26798] 8021q: adding VLAN 0 to HW filter on device bond7 [ 390.871961][T26798] 8021q: adding VLAN 0 to HW filter on device bond8 [ 390.882951][T26798] 8021q: adding VLAN 0 to HW filter on device bond9 [ 390.889648][T26835] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8309'. [ 390.901601][T26798] 8021q: adding VLAN 0 to HW filter on device bond10 [ 390.922649][T26798] 8021q: adding VLAN 0 to HW filter on device bond11 [ 390.970575][T26798] 8021q: adding VLAN 0 to HW filter on device bond12 [ 391.130365][T26817] ip_vti0: left promiscuous mode [ 391.155965][T26817] sit0: left promiscuous mode [ 391.170658][T26817] sit0: left allmulticast mode [ 391.374764][T26817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 391.392605][T26858] netlink: 'syz.8.8320': attribute type 1 has an invalid length. [ 391.400114][T26817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 391.653396][T26817] bridge1: left promiscuous mode [ 391.658423][T26817] bridge1: left allmulticast mode [ 391.701747][T26817] bond3: left promiscuous mode [ 391.706583][T26817] bond4: left promiscuous mode [ 391.724806][T26817] bond6: left promiscuous mode [ 391.729723][T26817] veth3: left promiscuous mode [ 391.793201][T26817] bridge0: left allmulticast mode [ 391.799723][T26817] bridge2: left promiscuous mode [ 391.805662][T26817] bridge2: left allmulticast mode [ 391.819619][T26817] gretap3: left promiscuous mode [ 391.849386][T26817] bond8: left promiscuous mode [ 391.854596][T26817] vti0: left promiscuous mode [ 391.877708][T21537] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.892344][T21537] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.903723][T21537] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.913458][T21537] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.925101][T26835] bond6: (slave syz_tun): Removing an active aggregator [ 391.934656][T26835] bond6: (slave syz_tun): Releasing backup interface [ 391.989057][T26858] bond13: entered promiscuous mode [ 392.015673][T26858] 8021q: adding VLAN 0 to HW filter on device bond13 [ 392.037925][T26859] bond13: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 392.050891][T26859] bond13: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 392.061456][T26859] bond13: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 392.075640][T21537] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.085329][T21537] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.093581][T21537] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.102349][T21537] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.115676][T21537] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.124251][T21537] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.132881][T21537] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 42349 - 0 [ 392.148919][T21537] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.157326][T21537] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.165728][T21537] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 42349 - 0 [ 392.176865][T21542] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.188222][T21542] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.227515][T21542] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 42349 - 0 [ 392.237787][T26879] netlink: 'syz.3.8327': attribute type 1 has an invalid length. [ 392.294733][T26879] 8021q: adding VLAN 0 to HW filter on device bond10 [ 392.321144][T21542] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 392.329581][T21542] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.337917][T21542] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 42349 - 0 [ 392.359603][T26886] team0: Port device team_slave_1 removed [ 392.387747][T26886] bond10: (slave team_slave_1): Enslaving as an active interface with a down link [ 392.454069][T26879] bond10 (unregistering): (slave team_slave_1): Releasing active interface [ 392.479504][T26879] bond10 (unregistering): Released all slaves [ 392.481996][ T28] kauditd_printk_skb: 24 callbacks suppressed [ 392.482009][ T28] audit: type=1400 audit(1783618437.153:2274): avc: denied { connect } for pid=26895 comm="syz.7.8333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 392.594404][T26907] netlink: 'syz.5.8340': attribute type 1 has an invalid length. [ 392.620209][T26909] __nla_validate_parse: 4 callbacks suppressed [ 392.620256][T26909] netlink: 240 bytes leftover after parsing attributes in process `syz.7.8339'. [ 392.623011][T26907] netlink: 64583 bytes leftover after parsing attributes in process `syz.5.8340'. [ 392.662679][T26911] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8342'. [ 392.758857][T26921] netlink: 132 bytes leftover after parsing attributes in process `syz.5.8345'. [ 393.222433][T26946] netlink: 'syz.8.8353': attribute type 1 has an invalid length. [ 393.249833][T26946] 8021q: adding VLAN 0 to HW filter on device bond14 [ 393.262049][T26948] erspan0: left promiscuous mode [ 393.278907][T26948] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.290767][T26948] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.302026][T26948] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.327601][T26948] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.336723][T26948] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.348520][T26948] veth1_vlan: left promiscuous mode [ 393.354598][T26948] veth0_vlan: left promiscuous mode [ 393.361365][T26948] veth0_vlan: entered promiscuous mode [ 393.367945][T26948] veth1_vlan: entered promiscuous mode [ 393.376320][T26948] veth1_macvtap: left promiscuous mode [ 393.382397][T26948] veth0_macvtap: left promiscuous mode [ 393.388401][T26948] veth0_macvtap: entered promiscuous mode [ 393.396081][T26948] geneve1: left promiscuous mode [ 393.402048][T26948] veth1_macvtap: entered promiscuous mode [ 393.491074][T26948] 8021q: adding VLAN 0 to HW filter on device bond1 [ 393.500720][T26948] 8021q: adding VLAN 0 to HW filter on device bond2 [ 393.511510][T26948] 8021q: adding VLAN 0 to HW filter on device bond3 [ 393.519597][T26948] 8021q: adding VLAN 0 to HW filter on device bond4 [ 393.532303][T26948] 8021q: adding VLAN 0 to HW filter on device bond5 [ 393.540534][T26948] geneve1: entered promiscuous mode [ 393.547948][T26948] 8021q: adding VLAN 0 to HW filter on device bond6 [ 393.607705][T26948] erspan0: entered promiscuous mode [ 393.614436][T26948] 8021q: adding VLAN 0 to HW filter on device bond7 [ 393.658202][T26948] 8021q: adding VLAN 0 to HW filter on device eth0 [ 393.670208][T26955] netlink: 240 bytes leftover after parsing attributes in process `syz.1.8355'. [ 393.683358][T26948] 8021q: adding VLAN 0 to HW filter on device eth1 [ 393.695038][T26948] 8021q: adding VLAN 0 to HW filter on device eth2 [ 393.709426][T26948] 8021q: adding VLAN 0 to HW filter on device eth3 [ 393.720065][T26948] 8021q: adding VLAN 0 to HW filter on device bond8 [ 393.732165][T26948] 8021q: adding VLAN 0 to HW filter on device bond9 [ 393.820772][T26946] bond14: (slave team_slave_1): making interface the new active one [ 393.838551][T26946] bond14: (slave team_slave_1): Enslaving as an active interface with an up link [ 393.903313][T26949] bond14 (unregistering): (slave team_slave_1): Releasing active interface [ 393.920561][T26949] bond14 (unregistering): Released all slaves [ 393.932288][T21542] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.940538][T21542] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.949185][T21542] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 44950 - 0 [ 393.958239][T21542] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.968303][T21542] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.977425][T21542] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 44950 - 0 [ 393.997448][T26953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.005635][T26953] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.015474][T26953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.046575][T26953] veth0_vlan: left promiscuous mode [ 394.053648][T26953] veth0_vlan: entered promiscuous mode [ 394.062683][T26953] veth1_macvtap: left promiscuous mode [ 394.068859][T26953] veth0_macvtap: left promiscuous mode [ 394.074899][T26953] veth0_macvtap: entered promiscuous mode [ 394.083953][T26953] veth1_macvtap: entered promiscuous mode [ 394.124470][T26953] 8021q: adding VLAN 0 to HW filter on device bond1 [ 394.156683][T26953] 8021q: adding VLAN 0 to HW filter on device bond2 [ 394.224082][T26953] 8021q: adding VLAN 0 to HW filter on device bond3 [ 394.266494][T26953] batman_adv: batadv0: Interface activated: gretap1 [ 394.284116][T26953] 8021q: adding VLAN 0 to HW filter on device bond4 [ 394.293706][T26953] erspan0: entered promiscuous mode [ 394.307583][T26953] 8021q: adding VLAN 0 to HW filter on device eth0 [ 394.316768][T26953] 8021q: adding VLAN 0 to HW filter on device eth1 [ 394.326548][T26953] 8021q: adding VLAN 0 to HW filter on device eth2 [ 394.336166][T26953] 8021q: adding VLAN 0 to HW filter on device eth3 [ 394.346521][T26953] 8021q: adding VLAN 0 to HW filter on device bond5 [ 394.356341][T26953] 8021q: adding VLAN 0 to HW filter on device bond6 [ 394.391972][T26969] syzkaller1: entered promiscuous mode [ 394.407263][T26969] syzkaller1: entered allmulticast mode [ 394.435110][T26977] xfrm1: entered allmulticast mode [ 394.543738][T26984] ip6gretap1: entered promiscuous mode [ 394.553276][T21542] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.561740][T21542] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.569937][T21542] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 44950 - 0 [ 394.579438][T21542] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.587946][T21542] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.596639][T21542] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 44950 - 0 [ 394.624294][T26997] ipip0: entered promiscuous mode [ 394.636026][T21542] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.657949][T21542] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.676480][T21542] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 256 - 0 [ 394.704386][T21542] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 394.716477][T27004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8378'. [ 394.726276][T21542] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.734887][T21542] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 256 - 0 [ 394.828477][ T28] audit: type=1400 audit(1783618439.503:2275): avc: denied { write } for pid=27006 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 394.901844][ T28] audit: type=1400 audit(1783618439.573:2276): avc: denied { write } for pid=27020 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.016615][T27005] vlan2: left promiscuous mode [ 395.027185][T27005] bridge0: left promiscuous mode [ 395.036886][T27005] ip6erspan0: left promiscuous mode [ 395.087470][T27005] bond1: left promiscuous mode [ 395.099321][T27005] veth9: left promiscuous mode [ 395.314481][T27029] netlink: 24 bytes leftover after parsing attributes in process `syz.7.8391'. [ 395.330243][T27030] netlink: 240 bytes leftover after parsing attributes in process `syz.8.8381'. [ 395.362969][T27002] bond8: (slave macvlan1): Releasing active interface [ 395.379611][T21542] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.388013][T21542] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.396512][T21542] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 256 - 0 [ 395.405125][T21542] bond9: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 395.415984][T27026] netlink: 'syz.3.8380': attribute type 3 has an invalid length. [ 395.423843][T27026] netlink: 'syz.3.8380': attribute type 3 has an invalid length. [ 395.456468][T21537] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 395.475201][T27039] netlink: 'syz.1.8382': attribute type 1 has an invalid length. [ 395.484567][T21537] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.505975][T21537] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 256 - 0 [ 395.521833][ T49] bond8: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 395.551403][ T49] bond8: (slave veth9): making interface the new active one [ 395.570487][ T49] bond8: active interface up! [ 395.598508][T27039] 8021q: adding VLAN 0 to HW filter on device bond1 [ 395.609440][ T28] audit: type=1400 audit(1783618440.283:2277): avc: denied { write } for pid=27045 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.646539][T27039] bond1 (unregistering): Released all slaves [ 395.673477][ T28] audit: type=1400 audit(1783618440.333:2278): avc: denied { write } for pid=27064 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 395.716701][T27053] team0: Port device team_slave_1 removed [ 395.786661][ T49] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 395.804117][ T49] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 395.811956][T10621] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 395.831966][ T28] audit: type=1326 audit(1783618440.503:2279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27079 comm="syz.3.8393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83566de59 code=0x7ffc0000 [ 395.857999][ T49] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 395.876035][ T49] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 395.883716][T10621] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 395.906489][ T28] audit: type=1326 audit(1783618440.503:2280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27079 comm="syz.3.8393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83566de59 code=0x7ffc0000 [ 395.918021][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 395.947399][T10621] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 395.959678][T27091] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8395'. [ 395.989962][ T49] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 395.995529][ T28] audit: type=1326 audit(1783618440.513:2281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27079 comm="syz.3.8393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83566de59 code=0x7ffc0000 [ 395.998198][T10621] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 396.039513][ T28] audit: type=1326 audit(1783618440.513:2282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27079 comm="syz.3.8393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd83566de59 code=0x7ffc0000 [ 396.041473][T27094] netlink: 132 bytes leftover after parsing attributes in process `syz.8.8396'. [ 396.089690][ T28] audit: type=1326 audit(1783618440.533:2283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=27079 comm="syz.3.8393" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd83566de59 code=0x7ffc0000 [ 396.788281][T27169] xfrm1: entered allmulticast mode [ 396.798569][T27169] ip6gretap1: entered promiscuous mode [ 397.632790][T27233] netlink: 'syz.3.8449': attribute type 1 has an invalid length. [ 397.645783][T27233] 8021q: adding VLAN 0 to HW filter on device bond10 [ 397.664213][T27233] bond10: (slave veth9): Enslaving as a backup interface with a down link [ 397.682022][T27233] bond10: (slave dummy0): Enslaving as a backup interface with an up link [ 397.692265][T27233] netlink: 'syz.3.8449': attribute type 10 has an invalid length. [ 397.700125][T27233] __nla_validate_parse: 6 callbacks suppressed [ 397.700138][T27233] netlink: 40 bytes leftover after parsing attributes in process `syz.3.8449'. [ 397.715372][T27233] dummy0: entered promiscuous mode [ 397.722751][T27233] bond10: (slave dummy0): Releasing backup interface [ 397.803343][ T28] kauditd_printk_skb: 37 callbacks suppressed [ 397.803357][ T28] audit: type=1400 audit(1783618442.483:2321): avc: denied { write } for pid=27236 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 397.839740][ T28] audit: type=1400 audit(1783618442.483:2322): avc: denied { write } for pid=27251 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 398.159115][T27278] netlink: 'syz.3.8461': attribute type 27 has an invalid length. [ 398.242253][T27278] dummy0: left promiscuous mode [ 398.290807][T27278] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.304369][T27278] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.825838][T27301] loop1: detected capacity change from 0 to 512 [ 398.835683][T27301] EXT4-fs: Ignoring removed nomblk_io_submit option [ 398.864861][T27301] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 398.886006][T27301] System zones: 0-2, 18-18, 34-34 [ 398.891294][T27301] EXT4-fs (loop1): orphan cleanup on readonly fs [ 398.912467][T27301] EXT4-fs error (device loop1): ext4_ext_check_inode:521: inode #4: comm syz.1.8469: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 398.937381][T27301] loop1: lost file I/O error report for ino 4 type 5 pos 0x0 len 0x0 error -117 [ 398.938254][T27301] EXT4-fs error (device loop1): ext4_quota_enable:7235: comm syz.1.8469: Bad quota inode: 4, type: 1 [ 398.947402][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 398.947420][ C1] EXT4-fs (loop1): last error at time 1783618443: ext4_ext_check_inode:521: inode 4 [ 398.974435][T27301] loop1: lost filesystem error report for type 5 error -117 [ 398.977427][T27301] EXT4-fs warning (device loop1): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 399.007323][T27301] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 399.019553][T27301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 399.097031][T25859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.181630][T27285] erspan0: left promiscuous mode [ 399.218801][T27285] 8021q: adding VLAN 0 to HW filter on device bond0 [ 399.237715][T27285] 8021q: adding VLAN 0 to HW filter on device team0 [ 399.251426][T27308] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8472'. [ 399.268470][T27285] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.302404][T27285] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.319096][T27285] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.330358][T27285] veth1_vlan: left promiscuous mode [ 399.336207][T27285] veth0_vlan: left promiscuous mode [ 399.342772][T27285] veth0_vlan: entered promiscuous mode [ 399.349948][T27285] veth1_vlan: entered promiscuous mode [ 399.358058][T27285] veth1_macvtap: left promiscuous mode [ 399.364145][T27285] veth0_macvtap: left promiscuous mode [ 399.370508][T27285] veth0_macvtap: entered promiscuous mode [ 399.379070][T27285] geneve1: left promiscuous mode [ 399.386119][T27285] veth1_macvtap: entered promiscuous mode [ 399.495248][T27285] 8021q: adding VLAN 0 to HW filter on device bond1 [ 399.505619][T27285] 8021q: adding VLAN 0 to HW filter on device bond2 [ 399.515462][T27285] 8021q: adding VLAN 0 to HW filter on device bond3 [ 399.523177][T27285] 8021q: adding VLAN 0 to HW filter on device bond4 [ 399.535380][T27285] 8021q: adding VLAN 0 to HW filter on device bond5 [ 399.543140][T27285] geneve1: entered promiscuous mode [ 399.550480][T27285] 8021q: adding VLAN 0 to HW filter on device bond6 [ 399.610444][T27285] erspan0: entered promiscuous mode [ 399.616779][T27285] 8021q: adding VLAN 0 to HW filter on device bond7 [ 399.649354][T27285] 8021q: adding VLAN 0 to HW filter on device eth0 [ 399.657454][T27285] 8021q: adding VLAN 0 to HW filter on device eth1 [ 399.665909][T27285] 8021q: adding VLAN 0 to HW filter on device eth2 [ 399.674054][T27285] 8021q: adding VLAN 0 to HW filter on device eth3 [ 399.682704][T27285] 8021q: adding VLAN 0 to HW filter on device bond8 [ 399.694419][T27285] 8021q: adding VLAN 0 to HW filter on device bond9 [ 399.763044][T27285] 8021q: adding VLAN 0 to HW filter on device bond10 [ 399.805518][T21539] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 44950 - 0 [ 399.814318][T21539] netdevsim netdevsim3 eth0: set [1, 2] type 2 family 0 port 39633 - 0 [ 399.823560][ T49] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 44950 - 0 [ 399.832737][ T49] netdevsim netdevsim3 eth1: set [1, 2] type 2 family 0 port 39633 - 0 [ 399.858779][T27312] bond9: (slave dummy0): Releasing active interface [ 399.866500][T27312] dummy0: left promiscuous mode [ 399.872855][T27312] bond9: (slave veth11): making interface the new active one [ 399.975242][T27312] bond3: (slave geneve4): Releasing active interface [ 399.989997][T27312] batman_adv: batadv0: Interface deactivated: gretap1 [ 399.998864][T27312] batman_adv: batadv0: Removing interface: gretap1 [ 400.055324][T27312] bond8: (slave veth9): Releasing active interface [ 400.094857][T27312] bond9: (slave veth11): Releasing active interface [ 400.109294][T21543] bond10: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 400.118886][T21543] bond10: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 400.139000][T21543] bond10: active interface up! [ 400.161439][ T49] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 44950 - 0 [ 400.177620][T27342] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8486'. [ 400.183393][ T49] netdevsim netdevsim3 eth2: set [1, 2] type 2 family 0 port 39633 - 0 [ 400.200368][T27342] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8486'. [ 400.213621][ T49] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 44950 - 0 [ 400.237016][ T49] netdevsim netdevsim3 eth3: set [1, 2] type 2 family 0 port 39633 - 0 [ 400.332776][T27359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8493'. [ 400.341869][T27359] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8493'. [ 400.479574][T27377] loop7: detected capacity change from 0 to 512 [ 400.486719][T27377] EXT4-fs: Ignoring removed nobh option [ 400.507047][T27377] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 400.525040][T27377] EXT4-fs (loop7): 1 truncate cleaned up [ 400.531272][T27377] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 400.545830][T27377] EXT4-fs (loop7): shut down requested (2) [ 400.552482][T27377] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 400.561746][T27377] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=12 [ 400.580285][T19620] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=11 [ 400.589298][T19620] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=11 [ 400.598412][T19620] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=11 [ 400.607438][T19620] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=11 [ 400.652212][T19620] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=11 [ 400.678203][T19620] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=11 [ 400.704789][T19620] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=11 [ 400.719467][T19620] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop7 ino=11 [ 400.728676][ T28] audit: type=1400 audit(1783618445.393:2323): avc: denied { write } for pid=19620 comm="syz-executor" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 400.827026][T25422] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 401.021011][ T23] ip6_tnl_xmit_ctl: 20 callbacks suppressed [ 401.021059][ T23] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 401.047037][ T23] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 401.602448][T27402] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.609570][T27402] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.617251][T27402] bridge_slave_0: entered allmulticast mode [ 401.623930][T27402] bridge_slave_0: entered promiscuous mode [ 401.630844][T27402] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.638016][T27402] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.645439][T27402] bridge_slave_1: entered allmulticast mode [ 401.652207][T27402] bridge_slave_1: entered promiscuous mode [ 401.671265][T27402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 401.682984][T27402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 401.703825][T27402] team0: Port device team_slave_0 added [ 401.710304][T27402] team0: Port device team_slave_1 added [ 401.727557][T27402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 401.734630][T27402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.761153][T27402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 401.772441][T27402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 401.779385][T27402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 401.805727][T27402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 401.843982][T27402] hsr_slave_0: entered promiscuous mode [ 401.850009][T27402] hsr_slave_1: entered promiscuous mode [ 401.857794][T27402] debugfs: 'hsr0' already exists in 'hsr' [ 401.864280][T27402] Cannot create hsr debugfs directory [ 401.971728][ T28] audit: type=1400 audit(1783618446.653:2324): avc: denied { write } for pid=27418 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 401.998514][ T28] audit: type=1400 audit(1783618446.673:2325): avc: denied { write } for pid=27429 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.056246][ T28] audit: type=1400 audit(1783618446.733:2326): avc: denied { write } for pid=27431 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.079884][ T28] audit: type=1400 audit(1783618446.733:2327): avc: denied { write } for pid=27442 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.139066][ T28] audit: type=1400 audit(1783618446.813:2328): avc: denied { write } for pid=27444 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.167623][ T28] audit: type=1400 audit(1783618446.813:2329): avc: denied { write } for pid=27455 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.214255][T27402] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 402.223011][T27402] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 402.234315][ T28] audit: type=1400 audit(1783618446.913:2330): avc: denied { write } for pid=27457 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.258133][T27402] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 402.266730][T27402] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 402.275495][T27402] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 402.284241][T27402] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 402.291906][T27402] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 402.300361][T27402] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 402.341845][T27402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.355705][T27402] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.365355][T21539] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.372443][T21539] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.387749][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.394918][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.416940][T27402] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 402.427756][T27402] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 402.548527][T27402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.673259][T27402] veth0_vlan: entered promiscuous mode [ 402.682568][T27402] veth1_vlan: entered promiscuous mode [ 402.703792][T27402] veth0_macvtap: entered promiscuous mode [ 402.715282][T27402] veth1_macvtap: entered promiscuous mode [ 402.729495][T27402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.745554][T27402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.758719][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.768042][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.777836][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.794984][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.911078][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 402.911093][ T28] audit: type=1400 audit(1783618447.593:2342): avc: denied { write } for pid=27563 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 402.964110][T27589] netlink: 240 bytes leftover after parsing attributes in process `syz.4.8514'. [ 402.975124][ T28] audit: type=1400 audit(1783618447.643:2343): avc: denied { write } for pid=27597 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.198859][ T28] audit: type=1400 audit(1783618447.873:2344): avc: denied { write } for pid=27600 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.254180][ T28] audit: type=1400 audit(1783618447.933:2345): avc: denied { write } for pid=27635 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.287124][T27632] loop1: detected capacity change from 0 to 1024 [ 403.299719][T27640] netlink: 'syz.4.8532': attribute type 10 has an invalid length. [ 403.339312][T27632] EXT4-fs: Ignoring removed oldalloc option [ 403.349831][T27640] netlink: 40 bytes leftover after parsing attributes in process `syz.4.8532'. [ 403.363460][T27632] EXT4-fs: Ignoring removed oldalloc option [ 403.374314][T27640] dummy0: entered promiscuous mode [ 403.379631][T27640] bridge0: port 3(dummy0) entered blocking state [ 403.388324][T27640] bridge0: port 3(dummy0) entered disabled state [ 403.396318][ T28] audit: type=1400 audit(1783618448.063:2346): avc: denied { write } for pid=27641 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.420004][T27640] dummy0: entered allmulticast mode [ 403.437437][T27632] EXT4-fs (loop1): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 403.448848][T27640] bridge0: port 3(dummy0) entered blocking state [ 403.449897][T27659] netlink: 24 bytes leftover after parsing attributes in process `syz.3.8536'. [ 403.455243][T27640] bridge0: port 3(dummy0) entered forwarding state [ 403.472619][ T28] audit: type=1400 audit(1783618448.123:2347): avc: denied { write } for pid=27655 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.498853][T27632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 403.501000][ C1] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 403.522259][T27659] netlink: 'syz.3.8536': attribute type 116 has an invalid length. [ 403.548919][ T28] audit: type=1400 audit(1783618448.213:2348): avc: denied { write } for pid=27631 comm="syz.1.8530" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 403.639487][ T28] audit: type=1400 audit(1783618448.313:2349): avc: denied { write } for pid=27665 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.692750][ T28] audit: type=1400 audit(1783618448.373:2350): avc: denied { write } for pid=27689 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 403.759485][T25859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 403.896819][T27713] loop4: detected capacity change from 0 to 128 [ 403.929134][T27713] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 403.953045][T27713] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 404.046240][ T28] audit: type=1400 audit(1783618448.723:2351): avc: denied { write } for pid=27712 comm="syz.4.8547" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 404.228813][T27402] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 404.282114][T27742] netlink: 64 bytes leftover after parsing attributes in process `syz.4.8560'. [ 404.308711][T27742] syzkaller1: entered promiscuous mode [ 404.314588][T27747] netlink: 9286 bytes leftover after parsing attributes in process `syz.8.8563'. [ 404.324183][T27742] syzkaller1: entered allmulticast mode [ 404.519240][T27764] loop1: detected capacity change from 0 to 512 [ 404.549385][T27764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 404.562993][T27764] ext4 filesystem being mounted at /85/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 404.607498][T27764] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 3: comm syz.1.8569: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 404.633411][T27764] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 12: comm syz.1.8569: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=5066064, rec_len=65536, size=2048 fake=0 [ 404.655314][T27764] EXT4-fs error (device loop1): ext4_readdir:265: inode #2: block 13: comm syz.1.8569: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=3653246737, rec_len=65536, size=2048 fake=0 [ 404.671736][T27773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8572'. [ 404.685213][T27773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8572'. [ 404.709057][T25859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 405.525171][T27782] tipc: Started in network mode [ 405.534711][T27782] tipc: Node identity 065816674d81, cluster identity 4711 [ 405.544486][T27782] tipc: Enabled bearer , priority 0 [ 405.584132][T27782] syzkaller0: entered promiscuous mode [ 405.589597][T27782] syzkaller0: entered allmulticast mode [ 405.596065][T27782] tipc: Resetting bearer [ 405.616359][T27779] tipc: Resetting bearer [ 405.633161][T27779] tipc: Disabling bearer [ 405.842858][T27815] netlink: 'syz.4.8590': attribute type 1 has an invalid length. [ 405.859272][T27815] bond1 (unregistering): Released all slaves [ 405.908241][T27822] bond1: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 405.919017][T27822] bond1 (unregistering): Released all slaves [ 406.116666][T27837] tipc: Enabling of bearer rejected, failed to enable media [ 407.081372][T27853] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8601'. [ 407.104279][T27854] netlink: 'syz.5.8602': attribute type 19 has an invalid length. [ 407.991609][ C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured! [ 407.999192][ C0] ip6_tunnel: ip6tnl4 xmit: Local address not yet configured! [ 408.226027][T19817] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.235121][T19817] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.254655][T19817] netdevsim netdevsim5 eth0: unset [1, 1] type 2 family 0 port 256 - 0 [ 408.276029][T19817] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.290762][T19817] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.306040][T19817] netdevsim netdevsim5 eth1: unset [1, 1] type 2 family 0 port 256 - 0 [ 408.330295][T27892] dummy0: left allmulticast mode [ 408.335534][T27892] bridge0: port 3(dummy0) entered disabled state [ 408.355413][T27892] bridge_slave_0: left allmulticast mode [ 408.361163][T27892] bridge_slave_0: left promiscuous mode [ 408.366800][T27892] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.380745][T27892] bridge_slave_1: left allmulticast mode [ 408.392625][T27892] bridge_slave_1: left promiscuous mode [ 408.409898][T27892] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.435541][T27892] bond0: (slave bond_slave_0): Releasing backup interface [ 408.451460][T27892] bond0: (slave bond_slave_1): Releasing backup interface [ 408.467154][T27892] team0: Port device team_slave_0 removed [ 408.488488][T27892] team0: Port device team_slave_1 removed [ 408.504511][T27892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.514059][T27892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.532048][T27892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.539526][T27892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.552992][T27892] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 408.587754][T19817] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.597746][T19817] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.613089][T19817] netdevsim netdevsim5 eth2: unset [1, 1] type 2 family 0 port 256 - 0 [ 408.630226][T19817] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 408.653235][T19817] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.665960][T19817] netdevsim netdevsim5 eth3: unset [1, 1] type 2 family 0 port 256 - 0 [ 408.907510][T27917] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8626'. [ 408.925516][T27917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8626'. [ 408.944256][T27917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8626'. [ 409.289180][T27926] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.300081][T27926] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.373677][T27931] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8632'. [ 409.397758][T27926] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.422493][T27926] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.437424][T27929] loop1: detected capacity change from 0 to 8192 [ 409.461193][T27931] bond10: entered promiscuous mode [ 409.472464][T27931] 8021q: adding VLAN 0 to HW filter on device bond10 [ 409.484925][T27932] bridge5: entered promiscuous mode [ 409.491041][T27932] bond10: (slave bridge5): Enslaving as an active interface with an up link [ 409.506207][T27926] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.537022][T27926] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.584923][T27926] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 409.595755][T27926] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.667349][T19817] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.675780][T19817] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.687092][T21537] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.695385][T21537] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.706677][T21543] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.715045][T21543] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.726584][T21537] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 409.734994][T21537] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.781674][T27941] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 409.965572][T27955] netlink: 12 bytes leftover after parsing attributes in process `syz.5.8640'. [ 410.011067][T27959] netlink: 'syz.5.8642': attribute type 4 has an invalid length. [ 410.019994][T27959] netlink: 'syz.5.8642': attribute type 4 has an invalid length. [ 410.082127][T27963] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8647'. [ 410.282453][T27984] netlink: 'syz.1.8656': attribute type 4 has an invalid length. [ 410.309174][T27984] netlink: 'syz.1.8656': attribute type 4 has an invalid length. [ 410.354967][T27987] netlink: 'syz.1.8657': attribute type 4 has an invalid length. [ 410.433559][T27987] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.440864][T27987] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.542605][T27987] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.566527][T27987] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.631690][T21543] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.647303][T21543] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.671609][T21543] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.686389][T21543] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 411.039781][ T28] audit: type=1326 audit(1783618455.703:2352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28017 comm="syz.8.8670" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb04b70de59 code=0x0 [ 411.700884][T28050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8683'. [ 411.718836][T28048] netlink: 20 bytes leftover after parsing attributes in process `syz.5.8682'. [ 411.752932][T28053] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8683'. [ 411.765621][T28052] netlink: 'syz.1.8684': attribute type 4 has an invalid length. [ 411.775143][T28052] netlink: 'syz.1.8684': attribute type 4 has an invalid length. [ 412.835328][T28095] loop1: detected capacity change from 0 to 512 [ 412.844673][T28095] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 412.857881][T28095] EXT4-fs (loop1): 1 truncate cleaned up [ 412.863056][T28099] netlink: 'syz.8.8703': attribute type 1 has an invalid length. [ 412.873622][T28095] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 412.923837][T28099] 8021q: adding VLAN 0 to HW filter on device bond14 [ 412.968042][ T28] audit: type=1400 audit(1783618457.643:2353): avc: denied { write } for pid=28087 comm="syz.1.8699" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 413.298861][T28087] syz.1.8699 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 413.311318][T28087] CPU: 1 UID: 0 PID: 28087 Comm: syz.1.8699 Not tainted syzkaller #0 PREEMPT(lazy) [ 413.311343][T28087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 413.311401][T28087] Call Trace: [ 413.311409][T28087] [ 413.311418][T28087] __dump_stack+0x1d/0x30 [ 413.311444][T28087] dump_stack_lvl+0x95/0xd0 [ 413.311474][T28087] dump_stack+0x15/0x1b [ 413.311493][T28087] dump_header+0x80/0x240 [ 413.311515][T28087] oom_kill_process+0x295/0x350 [ 413.311546][T28087] out_of_memory+0x981/0xbc0 [ 413.311618][T28087] try_charge_memcg+0x621/0xa00 [ 413.311656][T28087] charge_memcg+0x6d/0x120 [ 413.311681][T28087] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 413.311780][T28087] swap_cache_alloc_folio+0x47b/0x5e0 [ 413.311810][T28087] swap_cluster_readahead+0x2b1/0x460 [ 413.311903][T28087] swapin_readahead+0xd8/0x8a0 [ 413.311926][T28087] ? _raw_spin_unlock+0x9/0x30 [ 413.311945][T28087] ? swap_put_entries_cluster+0x49c/0x4c0 [ 413.311972][T28087] ? __entry_text_end+0x11218/0x102179 [ 413.312001][T28087] ? __rcu_read_unlock+0x4e/0x70 [ 413.312027][T28087] ? swap_cache_get_folio+0x1f7/0x200 [ 413.312077][T28087] do_swap_page+0x2a2/0x1ec0 [ 413.312101][T28087] ? __css_rstat_updated+0xbb/0x280 [ 413.312155][T28087] ? __rcu_read_lock+0x36/0x50 [ 413.312180][T28087] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 413.312241][T28087] handle_mm_fault+0xb3c/0x2da0 [ 413.312275][T28087] do_user_addr_fault+0x634/0x1060 [ 413.312330][T28087] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 413.312359][T28087] ? trace_page_fault_user+0x1f/0xa0 [ 413.312436][T28087] exc_page_fault+0x62/0xa0 [ 413.312471][T28087] asm_exc_page_fault+0x26/0x30 [ 413.312491][T28087] RIP: 0033:0x7fe24517b7d0 [ 413.312527][T28087] Code: c4 4c 0f 42 e0 83 3d fa c5 3b 00 00 0f 8e d9 fd ff ff e8 23 80 fe ff 49 39 c4 0f 82 82 00 00 00 66 2e 0f 1f 84 00 00 00 00 00 <69> 3d be 9e ee 00 e8 03 00 00 48 8d 1d bf a7 3b 00 e8 8a 31 13 00 [ 413.312545][T28087] RSP: 002b:00007ffeacfc8590 EFLAGS: 00010206 [ 413.312564][T28087] RAX: 0000000000064e46 RBX: 00007fe245537da0 RCX: 0000000000064d48 [ 413.312579][T28087] RDX: 00000000000000fe RSI: 00007ffeacfc8570 RDI: 0000000000000001 [ 413.312593][T28087] RBP: 00007fe245537da0 R08: 000000000f2d1dfc R09: 3fffffffffffffff [ 413.312610][T28087] R10: 4000000000000000 R11: 0000000000000246 R12: 0000000000064f96 [ 413.312666][T28087] R13: 00007fe24553609c R14: 0000000000064d9c R15: 00007fe245536090 [ 413.312687][T28087] [ 413.314148][T28087] memory: usage 307200kB, limit 307200kB, failcnt 130 [ 413.607895][T28087] memory+swap: usage 307720kB, limit 9007199254740988kB, failcnt 0 [ 413.630883][T28087] kmem: usage 275180kB, limit 9007199254740988kB, failcnt 0 [ 413.638193][T28087] Memory cgroup stats for /syz1: [ 413.638438][T28087] cache 20480 [ 413.646724][T28087] rss 0 [ 413.649477][T28087] shmem 0 [ 413.652443][T28087] mapped_file 0 [ 413.655893][T28087] dirty 0 [ 413.658832][T28087] writeback 4096 [ 413.691096][T28087] workingset_refault_anon 1364 [ 413.695882][T28087] workingset_refault_file 2 [ 413.700375][T28087] swap 532480 [ 413.703673][T28087] swapcached 11448320 [ 413.707645][T28087] pgpgin 101056 [ 413.730877][T28087] pgpgout 101050 [ 413.734453][T28087] pgfault 123256 [ 413.737992][T28087] pgmajfault 191 [ 413.742478][T28087] inactive_anon 0 [ 413.770883][T28087] active_anon 0 [ 413.774369][T28087] inactive_file 16384 [ 413.778397][T28087] active_file 4096 [ 413.782122][T28087] unevictable 0 [ 413.785567][T28087] hierarchical_memory_limit 314572800 [ 413.799177][T28087] hierarchical_memsw_limit 9223372036854771712 [ 413.805395][T28087] total_cache 20480 [ 413.809262][T28087] total_rss 0 [ 413.812610][T28087] total_shmem 0 [ 413.816069][T28087] total_mapped_file 0 [ 413.820036][T28087] total_dirty 0 [ 413.823537][T28087] total_writeback 4096 [ 413.827626][T28087] total_workingset_refault_anon 1364 [ 413.832971][T28087] total_workingset_refault_file 2 [ 413.837982][T28087] total_swap 532480 [ 413.841794][T28087] total_swapcached 11448320 [ 413.846293][T28087] total_pgpgin 101056 [ 413.850259][T28087] total_pgpgout 101050 [ 413.854413][T28087] total_pgfault 123256 [ 413.858498][T28087] total_pgmajfault 191 [ 413.862571][T28087] total_inactive_anon 0 [ 413.866771][T28087] total_active_anon 0 [ 413.870735][T28087] total_inactive_file 16384 [ 413.875320][T28087] total_active_file 4096 [ 413.879547][T28087] total_unevictable 0 [ 413.883645][T28087] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz1,task_memcg=/syz1,task=syz.1.8699,pid=28087,uid=0 [ 413.898628][T28087] Memory cgroup out of memory: Killed process 28087 (syz.1.8699) total-vm:94180kB, anon-rss:1240kB, file-rss:22480kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 416.349876][T25859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 416.521458][T28165] bond1: entered allmulticast mode [ 416.536606][T28165] ip6gre1: entered promiscuous mode [ 416.566479][T28165] ip6gre1: entered allmulticast mode [ 416.595945][T28165] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 416.623897][T28165] bond1: (slave ip6gre1): Error -95 calling set_mac_address [ 416.719049][T28184] netlink: 'syz.4.8729': attribute type 1 has an invalid length. [ 416.737099][T28184] 8021q: adding VLAN 0 to HW filter on device bond2 [ 416.766765][T28184] bond2: (slave gretap1): making interface the new active one [ 416.784039][T28184] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 417.592848][T28297] xt_hashlimit: size too large, truncated to 1048576 [ 417.965694][ T5870] kernel read not supported for file inotify (pid: 5870 comm: kworker/0:10) [ 418.086982][T28340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.099430][T28340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.412201][T28358] netlink: 24 bytes leftover after parsing attributes in process `syz.5.8759'. [ 419.147518][T28398] netlink: 55631 bytes leftover after parsing attributes in process `syz.8.8774'. [ 419.178176][ T28] audit: type=1400 audit(1783618463.853:2354): avc: denied { create } for pid=28402 comm="syz.8.8776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 419.552595][T28414] netlink: 'syz.8.8779': attribute type 2 has an invalid length. [ 419.566664][T28414] netlink: 'syz.8.8779': attribute type 8 has an invalid length. [ 419.578171][T28414] netlink: 132 bytes leftover after parsing attributes in process `syz.8.8779'. [ 419.589441][T28416] loop4: detected capacity change from 0 to 512 [ 419.597075][T28414] netlink: 'syz.8.8779': attribute type 2 has an invalid length. [ 419.605884][T28414] netlink: 'syz.8.8779': attribute type 8 has an invalid length. [ 419.613768][T28416] EXT4-fs (loop4): blocks per group (255) and clusters per group (8192) inconsistent [ 419.623733][T28414] netlink: 132 bytes leftover after parsing attributes in process `syz.8.8779'. [ 419.638914][T28416] loop4: detected capacity change from 0 to 512 [ 419.647311][T28416] EXT4-fs: Ignoring removed bh option [ 419.654823][T28416] EXT4-fs: Mount option(s) incompatible with ext3 [ 420.028990][T28432] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 420.226790][T28445] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=28445 comm=syz.4.8792 [ 420.273294][ T28] audit: type=1326 audit(1783618464.953:2355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28446 comm="syz.8.8793" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb04b70de59 code=0x0 [ 420.308433][T28454] bond3: entered allmulticast mode [ 420.317586][T28454] macvlan0: entered promiscuous mode [ 420.324233][T28454] macvlan0: entered allmulticast mode [ 420.330177][T28454] bond3: (slave macvlan0): Opening slave failed [ 420.832868][T28475] netlink: 'syz.5.8804': attribute type 1 has an invalid length. [ 420.855459][T28475] bond11: (slave dummy0): making interface the new active one [ 420.864542][T28475] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 420.876107][T28475] bond11: entered promiscuous mode [ 420.881371][T28475] dummy0: entered promiscuous mode [ 420.887286][T28474] bond11: left promiscuous mode [ 420.892729][T28474] dummy0: left promiscuous mode [ 421.165030][T28484] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8807'. [ 421.181555][T28484] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8807'. [ 421.393237][T28492] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8811'. [ 421.614896][T28486] netlink: 24 bytes leftover after parsing attributes in process `syz.8.8808'. [ 421.625504][T28504] netlink: 'syz.3.8815': attribute type 10 has an invalid length. [ 421.653775][T28504] bond0: (slave batadv0): Error -22 calling dev_set_mtu [ 421.724881][T28504] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.786169][T28504] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.824216][T28504] bond0 (unregistering): (slave team0): Releasing backup interface [ 421.846807][T28504] bond0 (unregistering): Released all slaves [ 421.868861][T28511] netlink: 12 bytes leftover after parsing attributes in process `syz.8.8818'. [ 421.919347][T28514] loop4: detected capacity change from 0 to 128 [ 421.949291][T28514] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 422.001705][T28514] ext4 filesystem being mounted at /65/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 422.111634][T27402] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 422.163344][T28528] netlink: 3 bytes leftover after parsing attributes in process `syz.4.8824'. [ 422.425872][ T28] audit: type=1400 audit(1783618467.093:2356): avc: denied { audit_write } for pid=28545 comm="syz.4.8831" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 422.448986][ T28] audit: type=1107 audit(1783618467.093:2357): pid=28545 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 423.079409][T28602] loop4: detected capacity change from 0 to 128 [ 423.097124][T28602] FAT-fs (loop4): data area starts beyond volume (33 > 0) [ 423.106501][T28602] FAT-fs (loop4): Can't find a valid FAT filesystem [ 423.571274][ T28] audit: type=1326 audit(1783618468.253:2358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28629 comm="syz.4.8866" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc31566de59 code=0x0 [ 424.682142][T28666] netlink: 44 bytes leftover after parsing attributes in process `syz.4.8881'. [ 424.715709][T28666] ipvlan0: entered promiscuous mode [ 424.785641][ T5872] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0 [ 424.793388][ T5872] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0 [ 424.806215][ T5872] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0 [ 424.814183][ T5872] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0 [ 424.821978][ T5872] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0 [ 424.829867][ T5872] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0 [ 424.837589][ T5872] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0 [ 424.845568][ T5872] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0 [ 424.853723][ T5872] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0 [ 424.868288][ T5872] hid-generic 0006:0008:0008.0009: unknown main item tag 0x0 [ 424.877961][ T5872] hid-generic 0006:0008:0008.0009: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 424.953674][T28676] fido_id[28676]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 424.997284][T28683] netlink: 152 bytes leftover after parsing attributes in process `syz.3.8885'. [ 425.027393][ T28] audit: type=1400 audit(1783618725.700:2359): avc: denied { create } for pid=28681 comm="syz.5.8887" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_dnrt_socket permissive=1 [ 425.085819][T28689] 8021q: adding VLAN 0 to HW filter on device team0 [ 425.123631][T28689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.494495][T28707] loop1: detected capacity change from 0 to 512 [ 425.508851][T28707] EXT4-fs (loop1): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 425.552642][ T28] audit: type=1400 audit(1783618726.230:2360): avc: denied { read } for pid=28706 comm="syz.1.8895" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 425.591327][T28707] EXT4-fs (loop1): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 425.639828][ T28] audit: type=1400 audit(1783618726.230:2361): avc: denied { open } for pid=28706 comm="syz.1.8895" path="/138/file0/file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 425.653729][T28714] team0: Port device vlan1 added [ 425.707425][ T28] audit: type=1326 audit(1783618726.360:2362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28711 comm="syz.4.8897" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31566de59 code=0x7ffc0000 [ 425.749684][ T28] audit: type=1326 audit(1783618726.360:2363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28711 comm="syz.4.8897" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31566de59 code=0x7ffc0000 [ 425.785389][ T28] audit: type=1326 audit(1783618726.360:2364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28711 comm="syz.4.8897" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31566de59 code=0x7ffc0000 [ 425.834393][ T28] audit: type=1326 audit(1783618726.360:2365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28711 comm="syz.4.8897" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fc31566de59 code=0x7ffc0000 [ 425.867870][ T28] audit: type=1326 audit(1783618726.360:2366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28711 comm="syz.4.8897" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31566de59 code=0x7ffc0000 [ 425.916755][ T28] audit: type=1326 audit(1783618726.360:2368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28711 comm="syz.4.8897" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=219 compat=0 ip=0x7fc31566de59 code=0x7ffc0000 [ 425.942890][ T28] audit: type=1326 audit(1783618726.360:2369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=28711 comm="syz.4.8897" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc31566de59 code=0x7ffc0000 [ 425.945089][T28736] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8908'. [ 426.005078][T28741] IPv6: NLM_F_CREATE should be specified when creating new route [ 426.258548][T28774] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8922'. [ 426.443959][T28788] loop4: detected capacity change from 0 to 8192 [ 426.523780][T28788] ================================================================== [ 426.531880][T28788] BUG: KCSAN: data-race in fat16_ent_put / fat_mirror_bhs [ 426.538978][T28788] [ 426.541282][T28788] write to 0xffff8881235f7324 of 2 bytes by task 28797 on cpu 0: [ 426.548987][T28788] fat16_ent_put+0x28/0x60 [ 426.553390][T28788] fat_ent_write+0x6c/0xe0 [ 426.557879][T28788] fat_chain_add+0x174/0x4a0 [ 426.562448][T28788] fat_get_block+0x468/0x5e0 [ 426.567033][T28788] __block_write_begin_int+0x400/0xf90 [ 426.572486][T28788] cont_write_begin+0x5bf/0x920 [ 426.577342][T28788] fat_write_begin+0x52/0xe0 [ 426.581919][T28788] generic_perform_write+0x186/0x490 [ 426.587196][T28788] __generic_file_write_iter+0x9e/0x120 [ 426.592755][T28788] generic_file_write_iter+0x77/0x1f0 [ 426.598114][T28788] do_iter_readv_writev+0x4f6/0x5a0 [ 426.603561][T28788] vfs_writev+0x2d1/0x8b0 [ 426.608057][T28788] __se_sys_pwritev2+0xfc/0x1c0 [ 426.612895][T28788] __x64_sys_pwritev2+0x67/0x80 [ 426.617734][T28788] x64_sys_call+0xe07/0x3020 [ 426.622316][T28788] do_syscall_64+0x136/0x3c0 [ 426.626901][T28788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.632781][T28788] [ 426.635089][T28788] read to 0xffff8881235f7200 of 512 bytes by task 28788 on cpu 1: [ 426.642876][T28788] fat_mirror_bhs+0x1df/0x330 [ 426.647551][T28788] fat_ent_write+0xd0/0xe0 [ 426.651967][T28788] fat_chain_add+0x174/0x4a0 [ 426.656544][T28788] fat_add_cluster+0x77/0xe0 [ 426.661130][T28788] fat_fallocate+0x11e/0x1c0 [ 426.665715][T28788] vfs_fallocate+0x3ac/0x400 [ 426.670294][T28788] file_ioctl+0x4e1/0x5b0 [ 426.674610][T28788] do_vfs_ioctl+0x7c4/0xe50 [ 426.679100][T28788] __se_sys_ioctl+0x82/0x140 [ 426.683673][T28788] __x64_sys_ioctl+0x43/0x50 [ 426.688247][T28788] x64_sys_call+0x1563/0x3020 [ 426.692916][T28788] do_syscall_64+0x136/0x3c0 [ 426.697504][T28788] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.703383][T28788] [ 426.705689][T28788] Reported by Kernel Concurrency Sanitizer on: [ 426.711823][T28788] CPU: 1 UID: 0 PID: 28788 Comm: syz.4.8926 Not tainted syzkaller #0 PREEMPT(lazy) [ 426.721180][T28788] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 426.731223][T28788] ==================================================================