last executing test programs: 6m58.628329822s ago: executing program 32 (id=183): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) 6m51.442456484s ago: executing program 33 (id=311): r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x2, @perf_config_ext={0x7, 0x100}, 0x205, 0x648, 0x43a1bd76, 0x8, 0x109, 0x6, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="015915bd7000fb0000251c00000018000180140002006c6f"], 0x2c}, 0x1, 0x0, 0x0, 0x90}, 0x40006) 6m39.670410173s ago: executing program 34 (id=253): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x50, 0x10, 0x439, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0xb881}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00'}, @IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}]}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x24008006}, 0x4040844) sendto$packet(r0, &(0x7f0000000640)="e8b77052a9", 0x28, 0x40, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x0, 0x6, @local}, 0x14) 6m37.281046773s ago: executing program 35 (id=519): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020692500000000002060207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000002d00000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000005c0)={r0}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x6) setsockopt$inet_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8) setsockopt$inet_tcp_int(r1, 0x6, 0x19, &(0x7f0000000140)=0x80000001, 0x4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r0}, 0xc) 5m42.100647313s ago: executing program 36 (id=1281): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x7}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="050000000109"], 0x80}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000005c0)=ANY=[@ANYRES16=r0], 0x48}}, 0x40800) 5m36.32426545s ago: executing program 5 (id=1462): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="91f8a9849519def2f8eb48d9173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc5393de25000000000000000000f38a6a4cb6b275ee91bd0196db0af38f2665cbbb4e66534143d02eac997657cf0a3df3cc8df5281ca813b255039632532f021a46b78fb7892513e4d3307f2dc6eca9986be03dfdd7dea5a59b3af0f59c39d0edaaf273933db78b8653e664f28ca6a3f8803662958348e8bef4a1370e5fc0c803eeb3e1154bab13b3", 0xbc}, {&(0x7f0000001000)="44900000000056ee66", 0x9}], 0x2}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001e00)="03deba91c2599577", 0x8}], 0x1}}], 0x2, 0x4000900) syz_emit_ethernet(0x19, &(0x7f0000000280)={@broadcast, @remote, @val, {@llc={0x8100, {@llc={0xbc, 0xf8, 'J'}}}}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x1, 0x0, 0x0, 0x0) 5m36.249527081s ago: executing program 5 (id=1466): socket$unix(0x1, 0x2, 0x0) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c01803003a000b12d25a80648c2594f90224fc60100c034002dd0100fedc82c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 5m36.100589045s ago: executing program 5 (id=1469): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000100)={0x1, 0x2, 0x2a000000}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 5m35.872875681s ago: executing program 5 (id=1478): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) mount$bpf(0x200000002000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x80000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) 5m35.813752952s ago: executing program 5 (id=1481): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0xfffffffc}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @remote, 0x1}}, 0x0, 0x0, 0x0, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0xa15f}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) close(0x3) 5m35.442272161s ago: executing program 5 (id=1483): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) ftruncate(r0, 0x3) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c032, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 5m35.410343243s ago: executing program 37 (id=1483): r0 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) ftruncate(r0, 0x3) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000e, 0x6c032, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 5m26.700076463s ago: executing program 6 (id=1582): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r0, &(0x7f0000002140)={0xa, 0x4e25, 0x1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000005980)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000900)=""/223, 0xdf}], 0x1}}], 0x1, 0x200, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 5m26.482657989s ago: executing program 6 (id=1589): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0xf}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4000, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x4e24, 0x4e20, 0xffffffffffffffef, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa845942824251d7d17b5191584bcd4fbe40a23424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfb5ae2193c0fb3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="e33110495bfd00000000000086dd6c00000000082c"], 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x3, &(0x7f0000000200)=@framed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000080)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0xa, 0x1, 0x353a, 0x1}}, 0x20) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) 5m26.114332469s ago: executing program 6 (id=1596): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x1000040, &(0x7f00000002c0)={[{@barrier}, {@nodioread_nolock}, {@noquota}, {@oldalloc}, {@errors_remount}, {@nodioread_nolock}, {@bh}]}, 0xfe, 0x59c, &(0x7f0000001840)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') writev(r1, &(0x7f00000002c0)=[{0x0}, {&(0x7f0000000080)='-', 0x1}], 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r2 = gettid() process_vm_writev(r2, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) 5m25.890982534s ago: executing program 6 (id=1600): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./mnt\x00', 0x2200054, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@bh}]}, 0x1, 0x236, &(0x7f0000000300)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) unlink(&(0x7f0000000100)='./file1\x00') 5m25.030590446s ago: executing program 6 (id=1611): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd000000000000044e690085000000a000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000004c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000300), &(0x7f0000000700)=r0}, 0x20) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 5m24.792723182s ago: executing program 6 (id=1617): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x9}, {0x0, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) 5m24.759090033s ago: executing program 38 (id=1617): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000180)=@newtfilter={0x44, 0x2c, 0x401, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x9}, {0x0, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT_MASK={0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x4010) 4m41.612459847s ago: executing program 3 (id=2438): unshare(0x5e000980) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c0000000206010800000000000c000000000000050005000a000000050001000700000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="74000000090601020000000000000000030000000900020073797a310000000005000100070000004c0007801800018014000240fe8000000000000000000000000000aa1800148014000240fc000000000000000000000000000000060004404e1f0000050007008400000006000540"], 0x74}, 0x1, 0x0, 0x0, 0x10040003}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xc) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 4m38.111188696s ago: executing program 3 (id=2445): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f0000000440)='4', 0x1}], 0x1}}], 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r1, 0x0}]) shutdown(r0, 0x1) 4m37.855723652s ago: executing program 3 (id=2486): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f00005a4000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x840) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) r1 = io_uring_setup(0x28fe, &(0x7f0000000080)={0x0, 0x0, 0x1000}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r1, 0x11, &(0x7f00000002c0), 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4m37.671217127s ago: executing program 3 (id=2490): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124) write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) 4m35.531553841s ago: executing program 3 (id=2528): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0xffffffffffffff2d, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0xf3f, 0x30bd29, 0x25dfd3f5, {0x0, 0x0, 0x0, r2, {0x1}, {}, {0x7, 0x4}}, [@filter_kind_options=@f_flower={{0xb}, {0x58, 0x2, [@TCA_FLOWER_ACT={0x54, 0x3, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x63a4, 0x4, 0x6, 0x4, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x20005891}, 0x0) 4m32.346710982s ago: executing program 3 (id=2537): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x27, 0xad, 0x9}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) 4m32.346576202s ago: executing program 39 (id=2537): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x27, 0xad, 0x9}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @local, 0x7}}, 0x0, 0x0, 0x3a, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) 3m21.490707869s ago: executing program 0 (id=3594): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6024b}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x18}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) 3m21.034468731s ago: executing program 0 (id=3596): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) 3m20.988726862s ago: executing program 0 (id=3600): r0 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000900)='./file1\x00', 0x3000000) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r2, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 3m20.723533479s ago: executing program 0 (id=3602): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0) mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b100a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000001ac0)='./file0/file0\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) umount2(&(0x7f00000003c0)='./file0\x00', 0xa) 3m20.65881465s ago: executing program 0 (id=3603): pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000500)=[{&(0x7f0000000080)="c2", 0x1}], 0x1) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$cgroup_pid(r4, &(0x7f0000000000), 0xffffff98) splice(r0, 0x0, r4, 0x0, 0x1f, 0xa) write(r2, 0x0, 0x0) 3m20.258691041s ago: executing program 0 (id=3606): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x7}, @window={0x3, 0x0, 0xfffe}, @mss={0x2, 0xf}, @window={0x3, 0x0, 0x401}, @timestamp, @sack_perm, @mss, @window={0x3, 0xcd, 0x9}], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 3m20.258468601s ago: executing program 40 (id=3606): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x7}, @window={0x3, 0x0, 0xfffe}, @mss={0x2, 0xf}, @window={0x3, 0x0, 0x401}, @timestamp, @sack_perm, @mss, @window={0x3, 0xcd, 0x9}], 0x8) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='highspeed', 0x9) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 2m17.753611716s ago: executing program 1 (id=4553): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="38000000550001002bbd70000200000007000000", @ANYRES32=r4, @ANYBLOB="20000100", @ANYRES32=r1, @ANYBLOB="0002020000000000000000000000ffffac1414bb86dd"], 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x40080c0) 2m17.619354109s ago: executing program 1 (id=4556): pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r2 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) write(r2, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) r3 = dup3(r1, r0, 0x0) fchdir(r3) creat(&(0x7f0000000040)='./bus\x00', 0xa) 2m17.518678872s ago: executing program 1 (id=4557): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000640)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x0, 0x4, 0xb, 0x59, 0x88, 0xfe, 0x0, 0x2a}, 0xe) shutdown(r0, 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000000)=0x21ea, 0x4) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 2m17.262977978s ago: executing program 1 (id=4560): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21089c, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124) write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) setxattr$trusted_overlay_nlink(&(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, 0x0, 0x2) 2m15.872485554s ago: executing program 1 (id=4578): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}}}, 0x10) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x1, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000400)={0x42, 0x3, 0x3}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20003}}}, 0x10) bind$tipc(r0, 0x0, 0x0) 2m14.577190107s ago: executing program 1 (id=4595): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0xfffffffd}, {0x2, 0x0, 0xffffeffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc) 2m14.486852798s ago: executing program 41 (id=4595): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x2, 0x4e24, @private=0xa010102}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="b7", 0x1}], 0x1}, 0x20008050) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0xfffffffd}, {0x2, 0x0, 0xffffeffc, 0x8}]}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x10, &(0x7f0000000000)=r3, 0xc) 3.985378422s ago: executing program 7 (id=7050): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) fallocate(r1, 0x0, 0x0, 0x8800000) pwritev2(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x5000, 0x0, 0x3) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 3.546559204s ago: executing program 8 (id=7043): bpf$ENABLE_STATS(0x20, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x4, 0x400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc097, 0x2, @perf_config_ext={0x288}, 0x10a216, 0x6, 0x11000, 0x4, 0x9487, 0x2001, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x3) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) socket$inet_mptcp(0x2, 0x1, 0x106) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r1, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.261175672s ago: executing program 2 (id=7049): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x8000f28, 0x0) splice(r2, 0x0, r1, 0x0, 0x7f, 0xe) write(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x4012831, 0xffffffffffffffff, 0x0) munmap(&(0x7f0000002000/0x4000)=nil, 0x4000) r4 = syz_open_procfs$pagemap(0x0, &(0x7f0000000240)) ioctl$PAGEMAP_SCAN(r4, 0xc0606610, &(0x7f00000004c0)={0x60, 0x0, &(0x7f000023d000/0x4000)=nil, &(0x7f00004fa000/0x4000)=nil, 0x0, &(0x7f00000021c0), 0x4f, 0x3}) syz_open_procfs(0x0, 0x0) 3.113709816s ago: executing program 8 (id=7051): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f0000000b40)=[{&(0x7f00000000c0)="dc", 0x1}, {&(0x7f0000000000)='v', 0x1}, {&(0x7f0000000480)="eb", 0x1}, {&(0x7f0000000a80)='`', 0x1}, {&(0x7f0000000080)="cb", 0x1}, {&(0x7f00000011c0)="b4", 0x1}, {&(0x7f0000000340)='t', 0x1}, {&(0x7f0000000180)="a2", 0x1}, {&(0x7f0000000580)="fa", 0x1}, {&(0x7f0000000640)="c0", 0x1}, {&(0x7f0000000700)="ad", 0x1}, {&(0x7f0000000740)="b1", 0x1}, {&(0x7f0000000200)="c5", 0x1}, {&(0x7f0000000880)="e5", 0x1}, {&(0x7f0000000940)="c5", 0x1}, {&(0x7f0000000a40)="94", 0x1}], 0x10, 0x3) close(r1) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r1) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x48c8}, 0x4011) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 3.112342016s ago: executing program 9 (id=7052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x74, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0xa}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x44, 0x2, [@TCA_BASIC_POLICE={0x40, 0x4, [@TCA_POLICE_TBF={0x3c, 0x1, {0xfffffff9, 0x6, 0x1, 0x4, 0x9, {0x40, 0x0, 0xf93, 0x9, 0x1}, {0x5, 0x1, 0x80, 0x0, 0x15a0, 0x3f89b1d6}, 0x9, 0x6}}]}]}}]}, 0x74}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20) 3.005111589s ago: executing program 9 (id=7053): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone3(&(0x7f0000000180)={0x800000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) write$P9_RGETLOCK(r1, &(0x7f0000000380)=ANY=[], 0x200002e6) fcntl$setpipe(r1, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 2.313117467s ago: executing program 7 (id=7064): pipe2$9p(&(0x7f00000001c0), 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000691000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0}, 0x68) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20040810) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prlimit64(0x0, 0x1, &(0x7f0000000140)={0x5, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x4, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.312596507s ago: executing program 8 (id=7055): signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x84ab]}, 0x8, 0x80800) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, &(0x7f0000000140)='^', 0x1, 0x0, 0x0, 0x0) listen(r0, 0xda90) accept4(r0, 0x0, 0x0, 0x800) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000040)={0x0, 0x10, 0x4, 0x2, 0x5, 0x10, 0x4c4}, 0x0, 0x0, 0x0, 0x0) 2.248436429s ago: executing program 7 (id=7056): r0 = gettid() perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r1, 0x2) r2 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x2) flock(r2, 0x1) 2.142540002s ago: executing program 2 (id=7057): r0 = socket(0x2, 0x1, 0x0) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080)=@int=0x7, 0x4) 1.904842068s ago: executing program 9 (id=7058): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3c30, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x3000408, &(0x7f0000000440)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") mkdir(&(0x7f0000000140)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000020000000000000000", @ANYRES32, @ANYBLOB="da0f000000", @ANYRES32], 0x50) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) 1.904672238s ago: executing program 2 (id=7059): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000002380)=""/4107, &(0x7f00000000c0)=0x1012) 1.374251772s ago: executing program 7 (id=7061): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xb, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001900)=ANY=[@ANYBLOB="14000000030301"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) recvmmsg(r2, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001640)=""/230, 0xe6}, {&(0x7f00000004c0)=""/196, 0xc4}, {&(0x7f00000002c0)=""/20, 0x14}], 0x3}, 0x44}], 0x1, 0x20, 0x0) 1.374112523s ago: executing program 8 (id=7062): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4800}, 0x2000c0d4) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x100, 0x20000, 0x0, 0x5, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x2d, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$sock_int(r1, 0x1, 0x1, &(0x7f0000000000)=0x3, 0x4) bind$xdp(r0, &(0x7f0000000080)={0x2d, 0x0, 0x0, 0xc}, 0x10) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x7, 0x0, 0x0, 0x0, 0xa, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xb}, 0x10ecc8, 0x1225, 0xfdffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) process_vm_writev(0x0, &(0x7f0000c22000)=[{&(0x7f000034afa4)=""/1, 0x1f80}], 0x310, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x2034afa5}], 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb01011800000000000000240000002400000000000010100000000500000001000084f7ffffff03000000010000000000000000005f5f2e612e000000000000000000"], 0x0, 0x44}, 0x28) 1.373988372s ago: executing program 2 (id=7063): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x100, 0xf, 0x0, 0x6, 0x0, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x2b, 0x80801, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x2, @empty}, 0x1c) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000001540)=0x100, 0x4) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0xf) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448e2, &(0x7f0000000140)) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d80)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@enum={0x0, 0x0, 0x0, 0x13}]}}, 0x0, 0x26}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000003c0)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, r2, 0x1, 0x1}, 0x48) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)=0x20) 1.373152083s ago: executing program 9 (id=7065): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r0, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x208e24b) mknodat$loop(0xffffffffffffff9c, 0x0, 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x20) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1.252308066s ago: executing program 2 (id=7066): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000100), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f00000017c0)="$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") r1 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x195) fallocate(r1, 0x0, 0x0, 0x8800000) pwritev2(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0x5000, 0x0, 0x3) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 1.252085795s ago: executing program 4 (id=7067): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioperm(0x0, 0x7, 0x80006) iopl(0x2) clock_getres(0x6, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0xc004}, 0x80c0) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001080)={0x20, 0x0, 0x7, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000019}, 0x8080) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000001500)={0x14, 0x3, 0x7, 0x201, 0x0, 0x0, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x80) 1.251815335s ago: executing program 7 (id=7068): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = inotify_init1(0x80000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x185d, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x1, 0x800000c1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000200)=""/32, 0x20}], 0x1) shutdown(r0, 0x0) 863.657496ms ago: executing program 9 (id=7069): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, 0x0, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x2000000000000020, 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x34, r2, 0x1, 0x1070bd2c, 0x4, {0x5}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x4}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xea8}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008000}, 0x30) 863.510166ms ago: executing program 8 (id=7070): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x482, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x0, 0x83, "00000000000000000000ffff00000000000002"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$XFS_IOC_SCRUBV_METADATA(r2, 0xc0285840, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000000203010100000000000000ffffff7f000800034000000000080004400000000008000540000000000900020000000000070000000800010001"], 0x40}}, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 863.394576ms ago: executing program 4 (id=7071): socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000fea000/0x1000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xccdb, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x29, 0xfa00, {0x1, 0x0, 0x111, 0x9}}, 0x20) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 790.735898ms ago: executing program 8 (id=7072): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone3(&(0x7f0000000180)={0x800000, 0x0, 0x0, 0x0, {0x11}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) write$P9_RGETLOCK(r1, &(0x7f0000000380)=ANY=[], 0x200002e6) fcntl$setpipe(r1, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 370.705419ms ago: executing program 7 (id=7073): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3c30, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x3000408, &(0x7f0000000440)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") mkdir(&(0x7f0000000140)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000020000000000000000", @ANYRES32, @ANYBLOB="da0f000000", @ANYRES32], 0x50) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) 370.544359ms ago: executing program 4 (id=7075): set_mempolicy(0x4005, &(0x7f0000000040)=0x16, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x4, r1}, 0x10) 369.361909ms ago: executing program 9 (id=7076): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xf, &(0x7f0000000000)=ANY=[@ANYRESDEC, @ANYBLOB="0000000000000000b70200001400001e219999dcade5b2c9f000b7030000008900000000000031"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffffa4}, 0x90) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd6317ce2200"], 0xfdef) perf_event_open(&(0x7f00000007c0)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x4, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 239.182003ms ago: executing program 4 (id=7077): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x2080) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff00000085000000a800000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x36, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000340)={r3}, 0xc) 106.608326ms ago: executing program 4 (id=7078): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ed6a", 0x14, 0x2c, 0x0, @remote, @local, {[], {{0x1100, 0x3, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x0, 0x4}}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r1, 0x9c3fa077fa966179, 0x2, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) 39.301328ms ago: executing program 4 (id=7079): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) 0s ago: executing program 2 (id=7080): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0xb, 0x1}, 0x0, 0x0, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000007060108e8ff000000000000000000000500010006"], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001880)={&(0x7f0000001900)=ANY=[@ANYBLOB="14000000030301"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) recvmmsg(r2, &(0x7f00000047c0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001640)=""/230, 0xe6}, {&(0x7f00000004c0)=""/196, 0xc4}, {&(0x7f00000002c0)=""/20, 0x14}], 0x3}, 0x44}], 0x1, 0x20, 0x0) kernel console output (not intermixed with test programs): 6][T19261] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 338.628246][T19233] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000. [ 338.706276][T18283] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 338.766978][ T28] audit: type=1400 audit(38263343.436:2834): avc: denied { write } for pid=19267 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 338.844254][ T28] audit: type=1400 audit(38263343.516:2835): avc: denied { write } for pid=19288 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.004436][ T28] audit: type=1400 audit(38263343.676:2836): avc: denied { write } for pid=19293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.084556][ T28] audit: type=1400 audit(38263343.706:2837): avc: denied { write } for pid=19305 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 339.251062][T19319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4875'. [ 339.281070][T19319] netlink: 'syz.4.4875': attribute type 30 has an invalid length. [ 339.298505][T19319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4875'. [ 339.323922][T19319] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4875'. [ 339.344103][T19323] netlink: 'syz.9.4877': attribute type 10 has an invalid length. [ 339.356564][T19319] netlink: 'syz.4.4875': attribute type 30 has an invalid length. [ 339.372501][T19323] batman_adv: batadv0: Adding interface: veth0 [ 339.392901][T19319] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4875'. [ 339.408368][T19323] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 339.468459][T19323] batman_adv: batadv0: Not using interface veth0 (retrying later): interface not active [ 340.110406][T19362] netlink: 12 bytes leftover after parsing attributes in process `syz.8.4893'. [ 341.171257][T19420] syz.2.4913(19420): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 341.731496][T19443] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4923'. [ 343.512565][T19513] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4954'. [ 343.603545][T19513] 8021q: adding VLAN 0 to HW filter on device bond8 [ 343.626404][T19513] bond7: (slave bond8): Enslaving as an active interface with an up link [ 343.641386][T19513] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4954'. [ 343.655049][T19513] 8021q: adding VLAN 0 to HW filter on device bond7 [ 343.713616][T19528] tipc: Started in network mode [ 343.733071][T19528] tipc: Node identity ac141441, cluster identity 4711 [ 343.745292][T19526] netlink: 'syz.8.4968': attribute type 10 has an invalid length. [ 343.759733][T19528] tipc: Enabled bearer , priority 10 [ 343.773171][T19526] batman_adv: batadv0: Adding interface: veth0 [ 343.789965][T19526] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 343.832957][T19526] batman_adv: batadv0: Not using interface veth0 (retrying later): interface not active [ 343.915437][T19544] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 344.283584][T19560] xt_hashlimit: max too large, truncated to 1048576 [ 344.298160][T19560] No such timeout policy "syz1" [ 344.464238][T19571] netlink: 'syz.2.4980': attribute type 10 has an invalid length. [ 344.475594][T19571] batman_adv: batadv0: Adding interface: veth0 [ 344.482912][T19571] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 344.510046][T19571] batman_adv: batadv0: Not using interface veth0 (retrying later): interface not active [ 344.537247][T19573] bridge0: adding interface bridge_slave_0 with same address as a received packet (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 344.585651][T19573] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 344.767972][T17525] tipc: Node number set to 2886997057 [ 345.007217][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 345.007232][ T28] audit: type=1326 audit(38263349.676:2840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19600 comm="syz.7.4991" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3620e019 code=0x7ffc0000 [ 345.058575][T19603] netlink: 'syz.4.4993': attribute type 10 has an invalid length. [ 345.077250][ T28] audit: type=1326 audit(38263349.676:2841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19600 comm="syz.7.4991" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3620e019 code=0x7ffc0000 [ 345.100543][T19603] batman_adv: batadv0: Adding interface: veth0 [ 345.123670][T19603] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.138226][T19609] loop7: detected capacity change from 0 to 512 [ 345.178032][ T28] audit: type=1326 audit(38263349.676:2842): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19600 comm="syz.7.4991" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f3f3620e019 code=0x7ffc0000 [ 345.198027][T19603] batman_adv: batadv0: Not using interface veth0 (retrying later): interface not active [ 345.240388][T19609] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 345.247989][ T28] audit: type=1326 audit(38263349.676:2843): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19600 comm="syz.7.4991" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3620e019 code=0x7ffc0000 [ 345.310549][ T28] audit: type=1326 audit(38263349.716:2844): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19600 comm="syz.7.4991" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3620e019 code=0x7ffc0000 [ 345.368005][ T28] audit: type=1326 audit(38263349.716:2845): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19600 comm="syz.7.4991" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3620e019 code=0x7ffc0000 [ 345.406217][T19619] loop7: detected capacity change from 512 to 0 [ 345.423063][ C1] I/O error, dev loop7, sector 84 op 0x1:(WRITE) flags 0x803800 phys_seg 1 prio class 2 [ 345.423309][T19622] EXT4-fs error (device loop7): ext4_lookup:1785: inode #12: comm syz.7.4996: iget: bad i_size value: 2533274857506816 [ 345.432897][ C1] buffer_io_error: 5 callbacks suppressed [ 345.432912][ C1] Buffer I/O error on dev loop7, logical block 21, lost sync page write [ 345.470975][T19609] EXT4-fs error (device loop7): ext4_ext_insert_extent:2210: inode #16: block 21: comm syz.7.4996: IO error syncing itable block [ 345.485861][T19624] netlink: 'syz.8.5009': attribute type 1 has an invalid length. [ 345.497016][ T28] audit: type=1326 audit(38263349.716:2846): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19600 comm="syz.7.4991" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3620e019 code=0x7ffc0000 [ 345.511080][T19622] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 345.546174][T19629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5001'. [ 345.559622][T19624] bond6: entered promiscuous mode [ 345.564836][T19629] netlink: 'syz.2.5001': attribute type 30 has an invalid length. [ 345.565515][T19622] EXT4-fs (loop7): I/O error while writing superblock [ 345.573113][T19609] EXT4-fs (loop7): previous I/O error to superblock detected [ 345.587363][T19624] 8021q: adding VLAN 0 to HW filter on device bond6 [ 345.606226][ T28] audit: type=1326 audit(38263349.716:2847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19600 comm="syz.7.4991" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3620e019 code=0x7ffc0000 [ 345.633233][T19629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5001'. [ 345.654409][T19609] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 345.668309][T19629] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5001'. [ 345.701052][T19629] netlink: 'syz.2.5001': attribute type 30 has an invalid length. [ 345.715899][T19609] EXT4-fs (loop7): I/O error while writing superblock [ 345.725840][T19624] bond6: (slave veth11): making interface the new active one [ 345.728285][ T28] audit: type=1326 audit(38263349.716:2848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19600 comm="syz.7.4991" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f3f3620e019 code=0x7ffc0000 [ 345.744878][T19624] veth11: entered promiscuous mode [ 345.760208][T19629] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5001'. [ 345.782284][T19609] EXT4-fs error (device loop7): ext4_check_bdev_write_error:227: comm syz.7.4996: Error while async write back metadata [ 345.797351][T19609] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 345.805962][ T28] audit: type=1326 audit(38263349.716:2849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19600 comm="syz.7.4991" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f3620e019 code=0x7ffc0000 [ 345.831748][T19641] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5004'. [ 345.841489][T19624] bond6: (slave veth11): Enslaving as an active interface with an up link [ 345.843103][T19609] EXT4-fs (loop7): I/O error while writing superblock [ 345.857322][T19609] EXT4-fs error (device loop7): ext4_check_bdev_write_error:227: comm syz.7.4996: Error while async write back metadata [ 345.892114][T19609] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 345.904968][T19609] EXT4-fs (loop7): I/O error while writing superblock [ 345.916340][T19609] EXT4-fs error (device loop7): ext4_check_bdev_write_error:227: comm syz.7.4996: Error while async write back metadata [ 345.930388][T19609] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 345.938964][T19609] EXT4-fs (loop7): I/O error while writing superblock [ 345.955048][T19609] EXT4-fs error (device loop7): ext4_check_bdev_write_error:227: comm syz.7.4996: Error while async write back metadata [ 346.026298][T19609] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 346.066019][T19609] EXT4-fs (loop7): I/O error while writing superblock [ 346.093094][T19609] EXT4-fs error (device loop7): ext4_check_bdev_write_error:227: comm syz.7.4996: Error while async write back metadata [ 346.118618][T19609] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 346.135166][T19609] EXT4-fs (loop7): I/O error while writing superblock [ 346.153900][T19609] EXT4-fs error (device loop7): ext4_check_bdev_write_error:227: comm syz.7.4996: Error while async write back metadata [ 346.176060][T19609] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 346.186196][T19609] EXT4-fs (loop7): I/O error while writing superblock [ 346.199236][T19609] EXT4-fs error (device loop7): ext4_check_bdev_write_error:227: comm syz.7.4996: Error while async write back metadata [ 346.220895][T19609] Buffer I/O error on dev loop7, logical block 0, lost sync page write [ 346.235556][T19609] EXT4-fs error (device loop7): ext4_ext_rm_leaf:2770: inode #16: block 21: comm syz.7.4996: IO error syncing itable block [ 346.259366][T19609] EXT4-fs warning (device loop7): ext4_end_bio:372: I/O error 10 writing to inode 16 starting block 38) [ 346.277242][T19609] buffer_io_error: 22 callbacks suppressed [ 346.277261][T19609] Buffer I/O error on device loop7, logical block 38 [ 346.289977][T19609] Buffer I/O error on device loop7, logical block 39 [ 346.311702][T19609] Buffer I/O error on device loop7, logical block 40 [ 346.318691][T19609] Buffer I/O error on device loop7, logical block 41 [ 346.341162][T19609] EXT4-fs warning (device loop7): ext4_end_bio:372: I/O error 10 writing to inode 16 starting block 42) [ 346.358825][T19609] EXT4-fs warning (device loop7): ext4_end_bio:372: I/O error 10 writing to inode 16 starting block 45) [ 346.380504][T19609] Buffer I/O error on device loop7, logical block 45 [ 346.395489][T19609] Buffer I/O error on device loop7, logical block 42 [ 346.409086][T19609] EXT4-fs warning (device loop7): ext4_end_bio:372: I/O error 10 writing to inode 16 starting block 48) [ 346.433680][T19609] Buffer I/O error on device loop7, logical block 48 [ 346.440649][T19609] Buffer I/O error on device loop7, logical block 49 [ 346.460743][T19609] EXT4-fs warning (device loop7): ext4_end_bio:372: I/O error 10 writing to inode 16 starting block 52) [ 346.483711][T19609] Buffer I/O error on device loop7, logical block 52 [ 346.490444][T19609] Buffer I/O error on device loop7, logical block 53 [ 346.508363][T19609] EXT4-fs warning (device loop7): ext4_end_bio:372: I/O error 10 writing to inode 16 starting block 56) [ 346.527284][T19609] EXT4-fs warning (device loop7): ext4_end_bio:372: I/O error 10 writing to inode 16 starting block 60) [ 346.559783][T19609] EXT4-fs warning (device loop7): ext4_end_bio:372: I/O error 10 writing to inode 16 starting block 64) [ 346.587737][T19609] EXT4-fs warning (device loop7): ext4_end_bio:372: I/O error 10 writing to inode 16 starting block 22) [ 346.616329][T19609] EXT4-fs warning (device loop7): ext4_end_bio:372: I/O error 10 writing to inode 16 starting block 46) [ 347.315901][T19693] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 347.518910][T19710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.552747][T19710] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.590296][T19710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 347.628875][T19710] batman_adv: batadv0: Interface activated: veth0 [ 347.699657][T19710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.717532][T19710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.728711][T19710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 347.739452][T19710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.751532][T19710] veth1_vlan: left promiscuous mode [ 347.763442][T19710] veth0_vlan: left promiscuous mode [ 347.772020][T19710] veth0_vlan: entered promiscuous mode [ 347.778961][T19710] veth1_vlan: entered promiscuous mode [ 347.790177][T19710] veth1_macvtap: left promiscuous mode [ 347.796445][T19710] veth0_macvtap: left promiscuous mode [ 347.804997][T19710] veth0_macvtap: entered promiscuous mode [ 347.811894][T19710] veth1_macvtap: entered promiscuous mode [ 347.821976][T19710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 347.830758][T19710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 347.839720][T19710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 347.848732][T19710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 347.859752][T19710] 8021q: adding VLAN 0 to HW filter on device bond1 [ 347.907133][ T3833] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.914258][ T3833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.943578][ T3833] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.950830][ T3833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.092250][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 348.106807][T19723] ieee802154 phy0 wpan0: encryption failed: -22 [ 348.138031][ T3816] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.149776][ T3816] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.728056][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 349.218013][T19747] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5046'. [ 349.889977][ T3796] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.926203][ C0] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 349.989216][ T3833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.012064][ T3796] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.038759][ T28] kauditd_printk_skb: 111 callbacks suppressed [ 350.038772][ T28] audit: type=1326 audit(38263354.706:2961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19765 comm="syz.4.5054" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff74d70e019 code=0x0 [ 350.105309][ T3796] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.123806][ T28] audit: type=1400 audit(38263354.796:2962): avc: denied { firmware_load } for pid=19761 comm="syz.2.5051" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 350.173648][T19695] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.189514][T19695] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.200135][ T28] audit: type=1326 audit(38263354.826:2963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19773 comm="syz.9.5056" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f075a65e019 code=0x0 [ 350.207612][T19695] bridge_slave_0: entered allmulticast mode [ 350.258617][T19695] bridge_slave_0: entered promiscuous mode [ 350.275960][T19695] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.287989][T19695] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.295321][T19695] bridge_slave_1: entered allmulticast mode [ 350.301974][T19695] bridge_slave_1: entered promiscuous mode [ 350.312283][ T3796] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.341542][T19695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.359741][T19695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.404237][T19780] tipc: Enabled bearer , priority 10 [ 350.438042][ T3833] netdevsim netdevsim7 eth18: set [1, 0] type 2 family 0 port 20001 - 0 [ 350.446779][ T3833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.468308][T19695] team0: Port device team_slave_0 added [ 350.475163][T19695] team0: Port device team_slave_1 added [ 350.500983][ T3796] bridge_slave_1: left allmulticast mode [ 350.510902][ T3796] bridge_slave_1: left promiscuous mode [ 350.517822][ T3796] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.526119][ T3796] bridge_slave_0: left allmulticast mode [ 350.533161][ T3796] bridge_slave_0: left promiscuous mode [ 350.539982][ T3796] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.600659][ T3796] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.610840][ T3796] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.621200][ T3796] bond0 (unregistering): Released all slaves [ 350.629563][T19695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.636932][T19695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.664913][T19695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.678489][ T3836] netdevsim netdevsim7 eth20: set [1, 0] type 2 family 0 port 20001 - 0 [ 350.695995][T19695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.703584][T19695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 350.730186][T19695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.747244][ T3796] hsr_slave_0: left promiscuous mode [ 350.760988][ T3796] hsr_slave_1: left promiscuous mode [ 350.770259][ T3796] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.796221][ T3796] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.810130][ T3796] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.826509][ T3796] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.847618][ T3796] veth1_macvtap: left promiscuous mode [ 350.858375][ T3796] veth0_macvtap: left promiscuous mode [ 350.867054][ T28] audit: type=1400 audit(38263355.536:2964): avc: denied { write } for pid=19792 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.895171][ T3796] veth1_vlan: left promiscuous mode [ 350.899046][ T28] audit: type=1400 audit(38263355.556:2965): avc: denied { write } for pid=19805 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.908198][ T3796] veth0_vlan: left promiscuous mode [ 350.996977][ T3796] team0 (unregistering): Port device team_slave_1 removed [ 351.019589][ T3796] team0 (unregistering): Port device team_slave_0 removed [ 351.092320][ T3018] 8021q: adding VLAN 0 to HW filter on device eth17 [ 351.117373][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 351.131760][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 351.170121][T19695] hsr_slave_0: entered promiscuous mode [ 351.176932][T19695] hsr_slave_1: entered promiscuous mode [ 351.186864][T19695] debugfs: 'hsr0' already exists in 'hsr' [ 351.193506][T19695] Cannot create hsr debugfs directory [ 351.248114][ T3802] netdevsim netdevsim7 eth17: set [1, 0] type 2 family 0 port 20001 - 0 [ 351.263895][ T3802] netdevsim netdevsim7 eth19: set [1, 0] type 2 family 0 port 20001 - 0 [ 351.395759][T19833] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5067'. [ 351.412069][ T28] audit: type=1400 audit(38263356.086:2966): avc: denied { write } for pid=19816 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.458125][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 351.498073][ T28] audit: type=1400 audit(38263356.166:2967): avc: denied { write } for pid=19837 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.527260][T19695] netdevsim netdevsim7 eth20 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 351.589081][ T3018] 8021q: adding VLAN 0 to HW filter on device eth18 [ 351.603937][T19846] bond3: entered allmulticast mode [ 351.615246][T19846] vti0: entered allmulticast mode [ 351.649010][T19846] bond3: left allmulticast mode [ 351.654071][T19846] vti0: left allmulticast mode [ 351.681698][T19695] netdevsim netdevsim7 eth19 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 351.796355][T19695] netdevsim netdevsim7 eth18 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 351.904996][T19695] netdevsim netdevsim7 eth17 (unregistering): unset [1, 0] type 2 family 0 port 20001 - 0 [ 351.935593][ T28] audit: type=1400 audit(38263356.606:2968): avc: denied { write } for pid=19856 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.050416][ T28] audit: type=1400 audit(38263356.726:2969): avc: denied { write } for pid=19870 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.086437][T19695] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 352.112713][T19695] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 352.141068][T19695] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 352.151417][T19695] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 352.176903][T19695] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 352.204375][T19695] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 352.225613][T19695] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 352.248533][T19695] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 352.363773][T19695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.402398][T19695] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.425786][ T3816] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.433054][ T3816] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.467847][ T3816] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.475057][ T3816] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.487985][ T28] audit: type=1400 audit(38263357.156:2970): avc: denied { write } for pid=19886 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.571449][T19911] netlink: 6 bytes leftover after parsing attributes in process `syz.2.5081'. [ 352.616087][T19911] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 352.664102][T19915] netlink: 'syz.8.5084': attribute type 5 has an invalid length. [ 352.814489][T19695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.045872][T19695] veth0_vlan: entered promiscuous mode [ 353.070888][T19695] veth1_vlan: entered promiscuous mode [ 353.120358][T19695] veth0_macvtap: entered promiscuous mode [ 353.151366][T19695] veth1_macvtap: entered promiscuous mode [ 353.200744][T19695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.226309][T19695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.251711][T19982] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 353.337998][ T3800] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.358944][ T3800] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.418039][ T3802] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.459845][ T3802] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.572382][T20002] tipc: Started in network mode [ 353.599838][T20002] tipc: Node identity , cluster identity 4711 [ 353.627160][T20002] tipc: Failed to set node id, please configure manually [ 353.658420][T20002] tipc: Enabling of bearer rejected, failed to enable media [ 354.336208][T20059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.370598][T20059] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.428669][T20059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.485690][T20059] batman_adv: batadv0: Interface activated: veth0 [ 354.645894][T20059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 354.671660][T20059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 354.713696][T20059] veth1_vlan: left promiscuous mode [ 354.736025][T20059] veth0_vlan: left promiscuous mode [ 354.759056][T20059] veth0_vlan: entered promiscuous mode [ 354.779932][T20059] veth1_vlan: entered promiscuous mode [ 354.804929][T20059] veth1_macvtap: left promiscuous mode [ 354.822773][T20059] veth0_macvtap: left promiscuous mode [ 354.828787][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 354.843858][T20059] veth0_macvtap: entered promiscuous mode [ 354.851611][T20059] veth1_macvtap: entered promiscuous mode [ 354.861609][T20059] 8021q: adding VLAN 0 to HW filter on device bond1 [ 354.871072][T20059] 8021q: adding VLAN 0 to HW filter on device bond2 [ 354.882173][T20059] 8021q: adding VLAN 0 to HW filter on device eth0 [ 354.890928][T20059] 8021q: adding VLAN 0 to HW filter on device eth1 [ 354.899457][T20059] 8021q: adding VLAN 0 to HW filter on device eth2 [ 354.932540][T20059] 8021q: adding VLAN 0 to HW filter on device eth3 [ 354.944732][T20059] 8021q: adding VLAN 0 to HW filter on device bond3 [ 354.979235][T20059] 8021q: adding VLAN 0 to HW filter on device bond5 [ 354.991794][ T3402] bridge0: entered promiscuous mode [ 355.008139][ T3800] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.015224][ T3800] bridge0: port 1(bridge_slave_0) entered listening state [ 355.056713][ T3800] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.063907][ T3800] bridge0: port 2(bridge_slave_1) entered listening state [ 355.168290][ T3800] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.183967][ T3800] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.260223][ T3816] ip6_tunnel: $ xmit: Local address not yet configured! [ 355.308541][ T3816] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.317474][ T3816] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.348014][ T3816] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.366935][ T3816] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.398170][ T3816] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 355.408296][ T3816] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.443519][T20091] netlink: 'syz.2.5132': attribute type 1 has an invalid length. [ 355.459107][T20091] 8021q: adding VLAN 0 to HW filter on device bond4 [ 356.044309][T20091] bond4: (slave syz_tun): Enslaving as a backup interface with an up link [ 356.095850][ T28] kauditd_printk_skb: 10 callbacks suppressed [ 356.095867][ T28] audit: type=1326 audit(38263360.766:2981): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20098 comm="syz.9.5134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075a65e019 code=0x7ffc0000 [ 356.188798][ T28] audit: type=1326 audit(38263360.806:2982): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20098 comm="syz.9.5134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075a65e019 code=0x7ffc0000 [ 356.251860][ T28] audit: type=1326 audit(38263360.806:2983): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20098 comm="syz.9.5134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075a65e019 code=0x7ffc0000 [ 356.310938][ T28] audit: type=1326 audit(38263360.806:2984): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20098 comm="syz.9.5134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f075a65e019 code=0x7ffc0000 [ 356.337294][ T28] audit: type=1326 audit(38263360.856:2985): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20098 comm="syz.9.5134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075a65e019 code=0x7ffc0000 [ 356.378757][T20119] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5142'. [ 356.397564][ T28] audit: type=1326 audit(38263360.856:2986): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20098 comm="syz.9.5134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f075a65dd82 code=0x7ffc0000 [ 356.423856][ T28] audit: type=1326 audit(38263360.856:2987): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20098 comm="syz.9.5134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f075a65de17 code=0x7ffc0000 [ 356.472292][ T28] audit: type=1326 audit(38263360.856:2988): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20098 comm="syz.9.5134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f075a61ad11 code=0x7ffc0000 [ 356.498588][ T28] audit: type=1326 audit(38263360.856:2989): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20098 comm="syz.9.5134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f075a65ee09 code=0x7ffc0000 [ 356.543169][ T28] audit: type=1326 audit(38263360.856:2990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20098 comm="syz.9.5134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f075a61ad7b code=0x7ffc0000 [ 356.640074][T20135] netlink: 'syz.8.5149': attribute type 3 has an invalid length. [ 356.649041][T20135] netlink: 'syz.8.5149': attribute type 3 has an invalid length. [ 356.793256][T20150] bond0: entered promiscuous mode [ 356.799896][T20150] bond_slave_0: entered promiscuous mode [ 356.809062][T20150] bond_slave_1: entered promiscuous mode [ 356.819483][T20150] batadv0: entered promiscuous mode [ 356.826316][T20150] batadv0: left promiscuous mode [ 356.831973][T20150] bond0: left promiscuous mode [ 356.837020][T20150] bond_slave_0: left promiscuous mode [ 356.843788][T20150] bond_slave_1: left promiscuous mode [ 357.701844][T20216] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5183'. [ 357.731857][T20216] netlink: 'syz.4.5183': attribute type 7 has an invalid length. [ 357.756121][T20216] netlink: 'syz.4.5183': attribute type 8 has an invalid length. [ 357.777237][T20216] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5183'. [ 357.870388][T20223] SELinux: Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped). [ 358.183325][T20230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5189'. [ 358.194469][T20230] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5189'. [ 359.308344][ C1] ip6_tunnel: $ xmit: Local address not yet configured! [ 359.522579][T20338] netlink: 'syz.4.5235': attribute type 3 has an invalid length. [ 359.534591][T20338] netlink: 'syz.4.5235': attribute type 3 has an invalid length. [ 360.433997][T20388] tipc: Failed to remove unknown binding: 66,1,1/2886997057:3362308414/3362308416 [ 360.796767][T20417] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5269'. [ 361.022313][T20426] netlink: 'syz.7.5275': attribute type 1 has an invalid length. [ 361.260405][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 361.260420][ T28] audit: type=1326 audit(38263365.936:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20440 comm="syz.4.5279" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74d70e019 code=0x7ffc0000 [ 361.363995][ T28] audit: type=1326 audit(38263365.976:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20440 comm="syz.4.5279" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff74d70e019 code=0x7ffc0000 [ 361.465885][ T28] audit: type=1326 audit(38263365.976:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20440 comm="syz.4.5279" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74d70e019 code=0x7ffc0000 [ 361.552189][ T28] audit: type=1326 audit(38263365.976:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20440 comm="syz.4.5279" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff74d70e019 code=0x7ffc0000 [ 361.605979][ T28] audit: type=1326 audit(38263365.976:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20440 comm="syz.4.5279" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74d70e019 code=0x7ffc0000 [ 361.698213][ T28] audit: type=1326 audit(38263365.976:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20440 comm="syz.4.5279" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=196 compat=0 ip=0x7ff74d70e019 code=0x7ffc0000 [ 361.803800][ T28] audit: type=1326 audit(38263365.976:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20440 comm="syz.4.5279" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74d70e019 code=0x7ffc0000 [ 361.892975][ T28] audit: type=1326 audit(38263365.976:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20440 comm="syz.4.5279" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74d70e019 code=0x7ffc0000 [ 362.028265][ C1] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:1c, vlan:0) [ 363.166975][ T28] audit: type=1326 audit(38263367.836:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20555 comm="syz.4.5331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74d70e019 code=0x7ffc0000 [ 363.261837][ T28] audit: type=1326 audit(38263367.866:3029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20555 comm="syz.4.5331" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff74d70e019 code=0x7ffc0000 [ 363.495410][T20580] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5342'. [ 364.184242][T20626] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5362'. [ 364.646744][T20648] loop7: detected capacity change from 0 to 512 [ 364.982923][T20665] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5379'. [ 364.997440][T20665] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5379'. [ 365.695660][T20691] netlink: 105084 bytes leftover after parsing attributes in process `syz.4.5392'. [ 365.713552][T20691] netlink: 31 bytes leftover after parsing attributes in process `syz.4.5392'. [ 366.129822][T20707] netlink: 'syz.2.5398': attribute type 13 has an invalid length. [ 366.380320][T20707] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.388131][T20707] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.496291][T20709] ieee802154 phy0 wpan0: encryption failed: -22 [ 366.530790][T20707] batman_adv: batadv0: Interface deactivated: veth0 [ 366.876127][T20707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.933988][T20707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.083630][T20729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5408'. [ 367.116645][T20729] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5408'. [ 367.563533][T20707] tipc: Resetting bearer [ 367.584451][T20735] netlink: 64 bytes leftover after parsing attributes in process `syz.4.5410'. [ 367.748759][T20738] ieee802154 phy0 wpan0: encryption failed: -22 [ 367.788248][ C1] ip6_tunnel: $ xmit: Local address not yet configured! [ 368.045635][T20722] sit0: left promiscuous mode [ 368.051082][T20722] macvtap1: left promiscuous mode [ 368.057847][T20722] macvtap1: left allmulticast mode [ 368.069325][T20722] bond2: left promiscuous mode [ 368.083238][T20722] vti0: left promiscuous mode [ 368.100136][T20722] bond4: left promiscuous mode [ 368.111930][T20722] bond6: left promiscuous mode [ 368.122542][T20722] veth11: left promiscuous mode [ 368.168089][ T3796] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.179240][ T3796] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.201343][ T3816] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.215248][ T3816] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.480462][T20768] netlink: 6 bytes leftover after parsing attributes in process `syz.8.5421'. [ 368.489651][T20768] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 368.712948][T20775] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.740357][T20775] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.846565][T20775] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.905187][T20775] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.928664][T20781] netlink: 12 bytes leftover after parsing attributes in process `syz.8.5427'. [ 368.951633][T20779] loop7: detected capacity change from 0 to 512 [ 369.037288][T20779] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 369.062067][T20779] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 369.083571][T20775] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.098603][T20779] System zones: 0-1, 15-15, 18-18, 34-34 [ 369.106248][T20775] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.118925][T20779] EXT4-fs (loop7): orphan cleanup on readonly fs [ 369.135301][T20779] __quota_error: 23 callbacks suppressed [ 369.135416][T20779] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 369.161131][T20779] EXT4-fs warning (device loop7): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 369.200505][T20775] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 369.225153][T20775] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.237584][T20779] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 369.249544][T20779] EXT4-fs error (device loop7): ext4_orphan_get:1425: comm syz.7.5426: bad orphan inode 16 [ 369.262362][T20779] loop7: lost filesystem error report for type 5 error -117 [ 369.263725][T20779] ext4_test_bit(bit=15, block=18) = 1 [ 369.271308][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 369.271356][ C1] EXT4-fs (loop7): initial error at time 38263373: ext4_orphan_get:1425 [ 369.271478][ C1] EXT4-fs (loop7): last error at time 38263373: ext4_orphan_get:1425 [ 369.309060][T20779] is_bad_inode(inode)=0 [ 369.317625][T20779] NEXT_ORPHAN(inode)=0 [ 369.322552][T20779] max_ino=32 [ 369.345404][T20779] i_nlink=2 [ 369.348039][ T3816] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.362042][T20779] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 369.378053][ T3816] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.410536][ T3816] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.440114][ T28] audit: type=1400 audit(38263374.116:3053): avc: denied { read } for pid=20778 comm="syz.7.5426" name="file2" dev="loop7" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 369.442092][ T3816] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.489792][T19695] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 369.535168][ T3816] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.561509][ T3816] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.608064][ T3816] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 369.636532][ T3816] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.798136][T20823] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5443'. [ 369.858606][T20827] netlink: 11575 bytes leftover after parsing attributes in process `syz.7.5445'. [ 369.861467][T20823] netlink: 24 bytes leftover after parsing attributes in process `syz.8.5443'. [ 369.881316][T20827] netlink: 116 bytes leftover after parsing attributes in process `syz.7.5445'. [ 371.352884][T20840] loop7: detected capacity change from 0 to 512 [ 371.388515][T20840] EXT4-fs: Invalid want_extra_isize 1969 [ 371.506680][T20840] loop7: detected capacity change from 0 to 1024 [ 371.569623][T20840] EXT4-fs (loop7): Can't support bigalloc feature without extents feature [ 371.569623][T20840] [ 371.596281][T20840] EXT4-fs (loop7): couldn't mount as ext3 due to feature incompatibilities [ 371.773374][T20858] netlink: 'syz.2.5457': attribute type 5 has an invalid length. [ 371.815894][ T28] audit: type=1400 audit(38263376.486:3054): avc: denied { map } for pid=20861 comm="syz.8.5460" path="pipe:[60160]" dev="pipefs" ino=60160 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 371.923808][T20850] loop7: detected capacity change from 0 to 1024 [ 371.950731][T20867] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.980849][T20850] EXT4-fs: Ignoring removed mblk_io_submit option [ 372.005042][T20850] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 372.027857][T20850] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 372.040495][T20850] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 372.166660][T20850] EXT4-fs (loop7): journal inode is deleted [ 372.183058][ T28] audit: type=1326 audit(38263376.856:3055): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20881 comm="syz.2.5467" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526923e019 code=0x7ffc0000 [ 372.285700][ T28] audit: type=1326 audit(38263376.886:3056): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20881 comm="syz.2.5467" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526923e019 code=0x7ffc0000 [ 372.389241][ T28] audit: type=1326 audit(38263376.886:3057): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20881 comm="syz.2.5467" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526923e019 code=0x7ffc0000 [ 372.471487][ T28] audit: type=1326 audit(38263376.886:3058): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20881 comm="syz.2.5467" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f526923e019 code=0x7ffc0000 [ 372.547173][ T28] audit: type=1326 audit(38263376.946:3059): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20881 comm="syz.2.5467" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526923e019 code=0x7ffc0000 [ 372.609053][T20904] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5475'. [ 372.628382][ T28] audit: type=1326 audit(38263376.946:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20881 comm="syz.2.5467" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f526923dd82 code=0x7ffc0000 [ 372.698878][ T28] audit: type=1326 audit(38263376.946:3061): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20881 comm="syz.2.5467" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f526923de17 code=0x7ffc0000 [ 372.965112][T20919] netlink: 24 bytes leftover after parsing attributes in process `syz.7.5481'. [ 373.020064][T20923] netlink: 15187 bytes leftover after parsing attributes in process `syz.8.5483'. [ 373.161832][T20936] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 373.183418][T20936] SET target dimension over the limit! [ 373.260901][T20944] ip6gre1: entered promiscuous mode [ 373.280123][T20944] ip6gre1: entered allmulticast mode [ 373.474989][T20956] : renamed from bond0 (while UP) [ 373.786229][T20978] netlink: 256 bytes leftover after parsing attributes in process `syz.4.5504'. [ 373.808542][T20978] unsupported nlmsg_type 40 [ 373.994392][T20988] netlink: 'syz.4.5509': attribute type 1 has an invalid length. [ 374.118265][T20988] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.290579][T21012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5518'. [ 374.346491][T21012] team0: Port device team_slave_0 removed [ 374.372480][T21021] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5520'. [ 374.383552][T21021] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5520'. [ 374.443952][T21026] loop7: detected capacity change from 0 to 512 [ 374.456436][T21026] EXT4-fs (loop7): external journal device major/minor numbers have changed [ 374.474929][T21028] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5524'. [ 374.480119][T21026] EXT4-fs (loop7): failed to open journal device unknown-block(8,0) -EBUSY [ 374.510462][T21026] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5523'. [ 374.539383][T21026] bond0: (slave bond_slave_1): Releasing backup interface [ 374.786165][T21038] loop7: detected capacity change from 0 to 1024 [ 374.811077][T21038] EXT4-fs: Ignoring removed mblk_io_submit option [ 374.833516][T21038] EXT4-fs (loop7): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 374.845104][T21038] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (29254!=20869) [ 374.864483][T21038] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 374.884153][T21038] EXT4-fs (loop7): journal inode is deleted [ 376.135375][T21115] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5563'. [ 376.183939][T21115] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5563'. [ 376.223000][T21115] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5563'. [ 376.503158][T21154] sctp: [Deprecated]: syz.4.5578 (pid 21154) Use of struct sctp_assoc_value in delayed_ack socket option. [ 376.503158][T21154] Use struct sctp_sack_info instead [ 376.556327][T21158] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5580'. [ 376.581651][T21156] netlink: 16 bytes leftover after parsing attributes in process `syz.7.5579'. [ 376.597434][ T28] kauditd_printk_skb: 190 callbacks suppressed [ 376.597450][ T28] audit: type=1400 audit(38263381.266:3252): avc: denied { name_connect } for pid=21159 comm="syz.9.5581" dest=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 376.708082][T21167] netlink: 'syz.2.5585': attribute type 4 has an invalid length. [ 376.729307][T21167] netlink: 'syz.2.5585': attribute type 1 has an invalid length. [ 376.766485][T21174] ip_tables: iptables: counters copy to user failed while replacing table [ 376.873116][ T28] audit: type=1400 audit(38263381.546:3253): avc: denied { mount } for pid=21178 comm="syz.2.5590" name="/" dev="rpc_pipefs" ino=61868 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 377.753720][T21219] loop7: detected capacity change from 0 to 512 [ 377.780659][T21219] EXT4-fs: Ignoring removed orlov option [ 377.803010][T21219] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 overlaps block group descriptors [ 377.837886][T21219] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 not in group (block 2)! [ 377.858098][T21219] EXT4-fs (loop7): group descriptors corrupted! [ 378.099979][T21239] tipc: Failed to remove unknown binding: 66,1,1/0:556763266/556763268 [ 378.970161][ T28] audit: type=1400 audit(38263383.646:3254): avc: denied { accept } for pid=21287 comm="syz.4.5633" laddr=255.255.255.255 lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 379.080939][ T28] audit: type=1400 audit(38263383.756:3255): avc: denied { bind } for pid=21291 comm="syz.2.5636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 379.120812][T21296] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 379.139388][T21296] batman_adv: batadv0: Adding interface: gretap2 [ 379.159505][T21296] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 379.218023][T21296] batman_adv: batadv0: Interface activated: gretap2 [ 379.228711][T21298] SELinux: security_context_str_to_sid ('|àkºÎ€|ËìL.å ) failed with errno=-22 [ 379.243804][T21294] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.316104][T21294] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.362724][T21294] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.451658][T21294] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 379.527151][ T3799] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.551091][ T3796] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.560250][ T3796] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.569381][ T3796] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.603113][T21318] __nla_validate_parse: 4 callbacks suppressed [ 379.603131][T21318] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5648'. [ 379.643610][T21320] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5649'. [ 379.679955][T21323] netlink: 'syz.8.5651': attribute type 20 has an invalid length. [ 379.704519][T21323] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5651'. [ 379.730514][T21323] netlink: 'syz.8.5651': attribute type 20 has an invalid length. [ 379.747898][T21323] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5651'. [ 379.748157][ T3802] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.759859][ T3802] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.776982][ T3802] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.830042][ T3802] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.233583][ T28] audit: type=1326 audit(38263384.906:3256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21351 comm="syz.7.5662" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479c05e019 code=0x7ffc0000 [ 380.290827][ T28] audit: type=1326 audit(38263384.906:3257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21351 comm="syz.7.5662" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f479c05e019 code=0x7ffc0000 [ 380.550553][ T28] audit: type=1326 audit(38263385.216:3258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21351 comm="syz.7.5662" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479c05e019 code=0x7ffc0000 [ 380.593685][ T28] audit: type=1326 audit(38263385.216:3259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21351 comm="syz.7.5662" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f479c05e019 code=0x7ffc0000 [ 380.893348][T21361] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.932524][T21368] loop7: detected capacity change from 0 to 512 [ 380.956148][T21368] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.5668: bg 0: block 5: invalid block bitmap [ 380.978416][T21368] loop7: lost filesystem error report for type 5 error -117 [ 380.979584][T21368] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 380.979666][T21361] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.987962][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 381.011868][ C0] EXT4-fs (loop7): initial error at time 38263385: ext4_validate_block_bitmap:432 [ 381.018382][T21368] loop7: lost filesystem error report for type 5 error -117 [ 381.021218][ C0] EXT4-fs (loop7): last error at time 38263385: ext4_validate_block_bitmap:432 [ 381.021513][T21368] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #11: comm syz.7.5668: invalid indirect mapped block 3 (level 2) [ 381.028667][ C0] [ 381.068361][T21368] loop7: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 381.068655][T21368] EXT4-fs (loop7): 1 orphan inode deleted [ 381.084944][T21368] EXT4-fs (loop7): 1 truncate cleaned up [ 381.091670][T21368] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 381.106047][T21368] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 381.120473][T21361] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.199270][T21361] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.221025][ T28] audit: type=1400 audit(38263385.896:3260): avc: denied { read } for pid=21382 comm="syz.7.5673" path="socket:[62312]" dev="sockfs" ino=62312 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 381.263109][ T3800] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.272337][ T3800] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.281575][ T3800] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.293749][ T3800] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 381.307985][ T28] audit: type=1400 audit(38263385.966:3261): avc: denied { write } for pid=21382 comm="syz.7.5673" path="socket:[62312]" dev="sockfs" ino=62312 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 381.393523][T21386] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.401014][T21386] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.443245][T21386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 381.453490][T21386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 381.492811][T21386] ip6gre1: left promiscuous mode [ 381.498746][T21386] ip6gre1: left allmulticast mode [ 381.507967][ T3816] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.526689][ T3816] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.568624][ T3800] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.577392][ T3800] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.578844][T21393] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5677'. [ 381.670292][ T28] audit: type=1400 audit(38263386.346:3262): avc: denied { getopt } for pid=21396 comm="syz.7.5679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 381.788654][ T3833] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.803967][ T3833] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.834892][ T3833] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.839540][T21416] netlink: 'syz.9.5688': attribute type 1 has an invalid length. [ 381.860144][ T3833] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 381.906613][T21416] 8021q: adding VLAN 0 to HW filter on device bond4 [ 381.967335][T21416] bond4: (slave geneve2): making interface the new active one [ 381.997155][T21416] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 382.038663][ T3796] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.048798][ T3796] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.079314][ T3796] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.111131][ T3796] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.727102][T21428] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.734835][T21428] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.954465][T21428] batman_adv: batadv0: Interface deactivated: veth0 [ 382.981413][T21474] netlink: 9286 bytes leftover after parsing attributes in process `syz.7.5711'. [ 383.148142][ C1] ip6_tunnel: $ xmit: Local address not yet configured! [ 383.212197][T21428] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 383.260929][T21428] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 383.438473][T21428] ip6gre1: left promiscuous mode [ 383.450673][T21428] ip6gre1: left allmulticast mode [ 383.457617][T21428] gretap1: left allmulticast mode [ 383.470089][T21428] bond3: left promiscuous mode [ 383.476383][T21428] vti0: left promiscuous mode [ 383.504702][T21428] bond4: left promiscuous mode [ 383.509778][T21428] xfrm1: left promiscuous mode [ 383.527956][ T3802] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.536739][ T3802] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.589397][ T3800] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.611188][ T3800] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.709978][ T3833] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.734304][ T3833] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.769714][ T3833] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 383.798026][ T3833] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.052564][T21541] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=21541 comm=syz.7.5731 [ 384.082217][T21540] bond1: left promiscuous mode [ 384.091881][T21540] ip6gre3: left promiscuous mode [ 384.103508][T21540] bridge1: left promiscuous mode [ 384.115227][T21540] bridge1: left allmulticast mode [ 384.126344][T21540] bond2: left promiscuous mode [ 384.136912][T21540] vti0: left promiscuous mode [ 384.143759][T21540] gretap1: left promiscuous mode [ 384.162862][T21540] batman_adv: batadv0: Interface deactivated: gretap2 [ 384.187994][ T3833] netdevsim netdevsim9 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.201063][ T3833] netdevsim netdevsim9 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.233702][ T3833] netdevsim netdevsim9 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.260314][ T3833] netdevsim netdevsim9 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.365117][ T28] audit: type=1400 audit(38263389.036:3263): avc: denied { shutdown } for pid=21545 comm="syz.4.5733" lport=57467 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 384.540325][T21566] netlink: 105084 bytes leftover after parsing attributes in process `syz.8.5741'. [ 384.575948][T21566] netlink: 31 bytes leftover after parsing attributes in process `syz.8.5741'. [ 386.207138][T21723] netlink: 6 bytes leftover after parsing attributes in process `syz.9.5759'. [ 386.232080][T21723] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.274530][T21727] netlink: 128 bytes leftover after parsing attributes in process `syz.4.5762'. [ 386.306394][T21727] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 386.462442][T21742] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5770'. [ 386.732236][T21750] netlink: 12 bytes leftover after parsing attributes in process `syz.9.5784'. [ 387.180299][T21780] netlink: 'syz.9.5782': attribute type 13 has an invalid length. [ 387.261269][ T28] audit: type=1400 audit(38263391.936:3264): avc: denied { bind } for pid=21781 comm="syz.2.5785" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 387.362764][T21784] gretap2: entered promiscuous mode [ 388.321418][T21841] netlink: 'syz.4.5808': attribute type 1 has an invalid length. [ 388.352197][T21841] 8021q: adding VLAN 0 to HW filter on device bond9 [ 388.401141][T21841] bond9: (slave geneve2): making interface the new active one [ 388.445583][T21841] bond9: (slave geneve2): Enslaving as an active interface with an up link [ 388.488108][ T3833] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.504756][ T3833] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.538694][ T3833] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.555069][ T3833] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.720668][ T28] audit: type=1400 audit(38263393.396:3265): avc: denied { ioctl } for pid=21857 comm="syz.9.5825" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=64781 ioctlcmd=0x586b scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 388.944995][ T28] audit: type=1400 audit(38263393.616:3266): avc: denied { create } for pid=21861 comm="syz.9.5817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 388.969059][T21862] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 388.996781][T21862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.091536][T21869] netlink: 'syz.8.5820': attribute type 1 has an invalid length. [ 389.122281][T21869] 8021q: adding VLAN 0 to HW filter on device bond7 [ 389.626810][T21928] tipc: Resetting bearer [ 389.642347][T21928] bond1: left promiscuous mode [ 389.647237][T21928] vti0: left promiscuous mode [ 389.656971][T21928] bond2: left promiscuous mode [ 389.662360][T21928] xfrm1: left promiscuous mode [ 389.675465][T21928] bond3: left promiscuous mode [ 389.688605][T21928] gretap2: left promiscuous mode [ 389.744116][T21935] loop7: detected capacity change from 0 to 1024 [ 389.796906][T21935] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 389.830652][ T28] audit: type=1400 audit(38263394.506:3267): avc: denied { write } for pid=21934 comm="syz.7.5845" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 389.907687][ T28] audit: type=1400 audit(38263394.536:3268): avc: denied { execute } for pid=21934 comm="syz.7.5845" path="/131/file1/file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 389.989764][ T28] audit: type=1400 audit(38263394.616:3269): avc: denied { append } for pid=21934 comm="syz.7.5845" name="file1" dev="loop7" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 390.121181][T19695] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 390.181014][T21959] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 390.364833][T21971] netlink: 15187 bytes leftover after parsing attributes in process `syz.9.5856'. [ 390.489937][T21982] netlink: 'syz.8.5861': attribute type 13 has an invalid length. [ 390.527096][T21980] netlink: 127592 bytes leftover after parsing attributes in process `syz.9.5860'. [ 390.538020][T21985] netlink: 'syz.4.5862': attribute type 1 has an invalid length. [ 390.672729][T21985] 8021q: adding VLAN 0 to HW filter on device bond10 [ 390.751325][T21995] bond10: (slave geneve3): making interface the new active one [ 390.788582][T21995] bond10: (slave geneve3): Enslaving as an active interface with an up link [ 390.927604][T22006] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5868'. [ 391.224237][T22011] SET target dimension over the limit! [ 391.385547][T22035] : renamed from bond0 [ 391.527765][T22056] tipc: Enabling of bearer rejected, already enabled [ 392.457384][T22085] netlink: 256 bytes leftover after parsing attributes in process `syz.7.5902'. [ 392.522983][T22082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5901'. [ 392.536209][T22082] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5901'. [ 392.567640][T22095] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5908'. [ 392.598548][T22095] team0: Port device team_slave_0 removed [ 392.687162][T22105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5912'. [ 392.727126][T22105] : (slave bond_slave_1): Releasing backup interface [ 392.752828][ T28] audit: type=1326 audit(38263397.426:3270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22108 comm="syz.9.5915" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f075a65e019 code=0x0 [ 392.789128][T22101] loop7: detected capacity change from 0 to 512 [ 392.800811][T22113] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5916'. [ 392.814400][T22101] EXT4-fs: Ignoring removed mblk_io_submit option [ 392.835542][T22101] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 392.854898][ T28] audit: type=1326 audit(38263397.526:3271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22108 comm="syz.9.5915" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075a65e019 code=0x7ffc0000 [ 392.881409][T22101] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e02c, mo2=0002] [ 392.900492][ T28] audit: type=1326 audit(38263397.526:3272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22108 comm="syz.9.5915" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075a65e019 code=0x7ffc0000 [ 392.930584][ T28] audit: type=1326 audit(38263397.526:3273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22108 comm="syz.9.5915" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075a65e019 code=0x7ffc0000 [ 392.956226][ T28] audit: type=1326 audit(38263397.526:3274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22108 comm="syz.9.5915" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f075a65e019 code=0x7ffc0000 [ 392.960958][T22101] System zones: [ 392.981835][ T28] audit: type=1326 audit(38263397.526:3275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22108 comm="syz.9.5915" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f075a65e019 code=0x7ffc0000 [ 392.981887][ T28] audit: type=1326 audit(38263397.606:3276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22108 comm="syz.9.5915" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f075a61e84e code=0x7ffc0000 [ 392.981968][ T28] audit: type=1326 audit(38263397.636:3277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22108 comm="syz.9.5915" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f075a61e84e code=0x7ffc0000 [ 393.054381][ T28] audit: type=1326 audit(38263397.726:3278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22108 comm="syz.9.5915" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f075a61e84e code=0x7ffc0000 [ 393.129324][ T28] audit: type=1326 audit(38263397.726:3279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22108 comm="syz.9.5915" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f075a61e84e code=0x7ffc0000 [ 393.168123][T22101] 1-12 [ 393.173051][T22101] EXT4-fs (loop7): orphan cleanup on readonly fs [ 393.201084][T22101] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.5910: bg 0: block 361: padding at end of block bitmap is not set [ 393.225370][T22101] loop7: lost filesystem error report for type 5 error -117 [ 393.226384][T22101] EXT4-fs (loop7): Remounting filesystem read-only [ 393.234556][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 393.234685][ C1] EXT4-fs (loop7): initial error at time 38263397: ext4_validate_block_bitmap:441 [ 393.234756][ C1] EXT4-fs (loop7): last error at time 38263397: ext4_validate_block_bitmap:441 [ 393.303945][T22101] EXT4-fs (loop7): 1 truncate cleaned up [ 393.332825][T22101] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 393.334097][T22128] netlink: 127592 bytes leftover after parsing attributes in process `syz.4.5921'. [ 393.454094][T19695] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 393.517293][T22136] loop7: detected capacity change from 0 to 512 [ 393.543663][T22136] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 393.659506][T19695] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 394.092598][T22163] netlink: 127592 bytes leftover after parsing attributes in process `syz.8.5933'. [ 394.637656][T22199] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 394.689517][T22199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.669886][T22243] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 395.698083][T22243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.970489][T22269] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5974'. [ 396.680660][T22311] bond6: (slave syz_tun): Removing an active aggregator [ 396.697288][T22311] bond6: (slave syz_tun): Releasing backup interface [ 396.952861][T22334] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 396.995138][T22334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.605490][T22419] bond2: entered allmulticast mode [ 397.632001][T22419] vti0: entered allmulticast mode [ 397.671757][T22418] bond2: left allmulticast mode [ 397.684106][T22418] vti0: left allmulticast mode [ 397.791892][T22440] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 397.822760][T22440] batman_adv: batadv0: Adding interface: gretap2 [ 397.843801][T22440] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 397.872896][T22440] batman_adv: batadv0: Interface activated: gretap2 [ 398.196602][T22469] : renamed from bond0 (while UP) [ 398.620538][T22493] SELinux: security_context_str_to_sid ('|àkºÎ€|ËìL.å ) failed with errno=-22 [ 399.165587][T22528] loop7: detected capacity change from 0 to 512 [ 399.189005][T22528] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 399.235320][T22536] : (slave bond_slave_0): Releasing backup interface [ 399.245873][ T28] kauditd_printk_skb: 247 callbacks suppressed [ 399.245887][ T28] audit: type=1400 audit(38263403.926:3527): avc: denied { write } for pid=22527 comm="syz.7.6040" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 399.426776][T19695] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 399.473777][T22549] batman_adv: batadv0: Removing interface: veth0 [ 399.498565][T22549] bridge_slave_0: left allmulticast mode [ 399.516312][T22549] bridge_slave_0: left promiscuous mode [ 399.544423][T22549] bridge0: port 1(bridge_slave_0) entered disabled state [ 399.579132][T22549] bridge_slave_1: left allmulticast mode [ 399.619620][T22549] bridge_slave_1: left promiscuous mode [ 399.625927][T22549] bridge0: port 2(bridge_slave_1) entered disabled state [ 399.642554][T22549] : (slave bond_slave_0): Releasing backup interface [ 399.654369][T22549] : (slave bond_slave_1): Releasing backup interface [ 399.670277][T22549] team0: Port device team_slave_0 removed [ 399.677184][T22549] team0: Port device team_slave_1 removed [ 399.689443][T22549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.707492][T22549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 399.717879][T22549] bond1: (slave gretap1): Releasing active interface [ 399.729257][T22549] bond2: (slave gretap2): Releasing active interface [ 399.737500][T22549] bond3: (slave vti0): Releasing backup interface [ 399.753663][T22549] bond4: (slave xfrm1): Releasing backup interface [ 399.762934][T22549] bond7: (slave bond8): Releasing backup interface [ 399.772640][T22549] bond9: (slave geneve2): Releasing active interface [ 399.789274][T22549] bond10: (slave geneve3): Releasing active interface [ 399.811702][T22552] team0: Mode changed to "loadbalance" [ 399.828606][ T3799] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.858009][ T3833] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.867104][ T3833] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.892289][ T3833] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.270063][T22579] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6058'. [ 400.301397][T22579] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6058'. [ 400.870070][ T28] audit: type=1326 audit(38263405.546:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22590 comm="syz.2.6065" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526923e019 code=0x7ffc0000 [ 400.916393][ T28] audit: type=1326 audit(38263405.576:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22590 comm="syz.2.6065" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f526923e019 code=0x7ffc0000 [ 400.979390][ T28] audit: type=1326 audit(38263405.586:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22590 comm="syz.2.6065" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526923e019 code=0x7ffc0000 [ 401.048651][ T28] audit: type=1326 audit(38263405.586:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=22590 comm="syz.2.6065" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526923e019 code=0x7ffc0000 [ 402.271427][T22658] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6090'. [ 402.381039][T22665] : renamed from bond0 (while UP) [ 402.846974][T22681] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6101'. [ 402.870905][T22681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6101'. [ 402.891391][T22681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6101'. [ 404.255360][ T28] audit: type=1400 audit(38263408.926:3532): avc: denied { create } for pid=22710 comm="syz.4.6113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 404.291748][ T28] audit: type=1400 audit(38263408.956:3533): avc: denied { write } for pid=22710 comm="syz.4.6113" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 404.347299][T22717] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6116'. [ 404.561617][ T28] audit: type=1400 audit(38263409.236:3534): avc: denied { write } for pid=22725 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 404.626340][ T28] audit: type=1400 audit(38263409.296:3535): avc: denied { write } for pid=22750 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 404.719690][T22757] netlink: 'syz.7.6126': attribute type 1 has an invalid length. [ 404.759764][T22757] bond1: entered promiscuous mode [ 404.799382][T22757] 8021q: adding VLAN 0 to HW filter on device bond1 [ 404.860215][T22771] bond1: (slave ip6gre1): refused to change device type [ 405.044458][T22783] netlink: 'syz.7.6128': attribute type 4 has an invalid length. [ 405.058117][ T28] audit: type=1400 audit(38263409.726:3536): avc: denied { write } for pid=22773 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 405.117841][ T28] audit: type=1400 audit(38263409.786:3537): avc: denied { write } for pid=22786 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 405.337721][ T28] audit: type=1400 audit(38263410.006:3538): avc: denied { write } for pid=22791 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 405.421921][ T28] audit: type=1400 audit(38263410.096:3539): avc: denied { write } for pid=22810 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 405.594111][T22823] bond4: (slave syz_tun): Removing an active aggregator [ 405.602487][T22823] bond4: (slave syz_tun): Releasing backup interface [ 405.616157][T22823] batman_adv: batadv0: Removing interface: veth0 [ 405.625722][T22823] bridge_slave_0: left allmulticast mode [ 405.640215][T22823] bridge_slave_0: left promiscuous mode [ 405.659595][T22823] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.672576][T22823] bridge_slave_1: left allmulticast mode [ 405.679956][T22823] bridge_slave_1: left promiscuous mode [ 405.686063][T22823] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.722206][T22823] team0: Port device team_slave_1 removed [ 405.733789][T22823] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.760817][T22823] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.773675][T22823] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 405.877882][ T28] audit: type=1400 audit(38263410.546:3540): avc: denied { audit_read } for pid=22832 comm="syz.4.6139" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 405.923857][T22838] netlink: 'syz.4.6141': attribute type 1 has an invalid length. [ 405.981435][T22838] 8021q: adding VLAN 0 to HW filter on device bond11 [ 406.063123][T22838] bond11: (slave gretap3): making interface the new active one [ 406.110447][T22838] bond11: (slave gretap3): Enslaving as an active interface with an up link [ 406.208867][T22859] loop7: detected capacity change from 0 to 256 [ 406.229975][T22859] msdos: Bad value for 'check' [ 406.833286][T22896] netlink: 56 bytes leftover after parsing attributes in process `syz.8.6161'. [ 407.385479][T22912] netlink: 'syz.9.6169': attribute type 39 has an invalid length. [ 408.031410][T22946] bond0: entered allmulticast mode [ 408.120214][T22946] macvlan2: entered promiscuous mode [ 408.144560][T22946] macvlan2: entered allmulticast mode [ 408.174548][T22946] bond0: (slave macvlan2): Opening slave failed [ 408.217387][T22910] Set syz1 is full, maxelem 65536 reached [ 408.375509][T22953] bridge_slave_0: left allmulticast mode [ 408.389448][T22953] bridge_slave_0: left promiscuous mode [ 408.402496][T22953] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.438361][T22953] bridge_slave_1: left allmulticast mode [ 408.444108][T22953] bridge_slave_1: left promiscuous mode [ 408.450241][T22953] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.482676][T22953] bond0: (slave bond_slave_0): Releasing backup interface [ 408.504741][T22953] team0: Port device team_slave_0 removed [ 408.528234][T22953] team0: Port device team_slave_1 removed [ 408.534400][T22953] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.559881][T22953] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.568634][T22953] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 408.591496][T22958] team0: Mode changed to "loadbalance" [ 408.807350][T22975] ªªªªªª: renamed from vlan0 [ 408.907364][T22994] netlink: 'syz.7.6199': attribute type 1 has an invalid length. [ 408.922184][T22995] netlink: 168 bytes leftover after parsing attributes in process `syz.8.6200'. [ 409.026043][ T28] audit: type=1400 audit(38263413.696:3541): avc: denied { connect } for pid=23004 comm="syz.7.6207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 409.047201][T23010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6209'. [ 409.082067][T23010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6209'. [ 409.110727][T23018] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6212'. [ 409.314322][T23045] ref_ctr increment failed for inode: 0xa5d offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888125aaaa00 [ 409.747784][T23067] netlink: 16 bytes leftover after parsing attributes in process `syz.4.6236'. [ 409.870538][T23077] bond3: (slave syz_tun): Removing an active aggregator [ 409.888279][T23077] bond3: (slave syz_tun): Releasing backup interface [ 409.897450][T23077] batman_adv: batadv0: Removing interface: veth0 [ 409.907199][T23077] : (slave bond_slave_0): Releasing backup interface [ 409.916890][T23077] : (slave bond_slave_1): Releasing backup interface [ 409.934114][T23077] team0: Port device team_slave_1 removed [ 409.940550][T23077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.948503][T23077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.956315][T23077] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 409.977646][ T28] audit: type=1400 audit(38263414.646:3542): avc: denied { write } for pid=23071 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.042636][T23081] team0: No ports can be present during mode change [ 410.047837][ T28] audit: type=1400 audit(38263414.666:3543): avc: denied { write } for pid=23089 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 410.277755][T23104] netlink: 'syz.7.6245': attribute type 1 has an invalid length. [ 410.304099][T23104] 8021q: adding VLAN 0 to HW filter on device bond1 [ 410.374486][T23104] bond1: (slave geneve2): making interface the new active one [ 410.418649][T23104] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 410.458059][ T3800] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.478067][ T3800] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.490784][ T3800] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.556131][ T28] audit: type=1400 audit(38263415.226:3544): avc: denied { write } for pid=23113 comm="syz.7.6249" name="functions" dev="configfs" ino=9584 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 410.579150][ T3800] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.443823][T23155] netlink: 'syz.9.6274': attribute type 10 has an invalid length. [ 411.456225][T23155] team0 (unregistering): Port device bridge1 removed [ 411.510546][T23163] bond3: (slave dummy0): Releasing backup interface [ 411.548820][T23163] bond1: (slave batadv0): Removing an active aggregator [ 411.564340][T23163] bond1: (slave batadv0): Releasing backup interface [ 411.585347][T23163] batman_adv: batadv0: Removing interface: veth0 [ 411.603565][T23163] bridge_slave_0: left allmulticast mode [ 411.616971][T23163] bridge_slave_0: left promiscuous mode [ 411.635400][T23163] bridge0: port 1(bridge_slave_0) entered disabled state [ 411.657879][T23163] bridge_slave_1: left allmulticast mode [ 411.670009][T23163] bridge_slave_1: left promiscuous mode [ 411.683693][T23163] bridge0: port 2(bridge_slave_1) entered disabled state [ 411.704142][T23163] : (slave bond_slave_0): Releasing backup interface [ 411.721419][T23163] : (slave bond_slave_1): Releasing backup interface [ 411.740529][T23163] team0: Port device team_slave_0 removed [ 411.750609][T23163] team0: Port device team_slave_1 removed [ 411.756561][T23163] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.765765][T23163] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 411.778349][T23163] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 411.795653][T23166] team0: Mode changed to "loadbalance" [ 411.869463][T23179] netlink: 128 bytes leftover after parsing attributes in process `syz.9.6272'. [ 411.881720][T23179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 412.269228][ T28] audit: type=1400 audit(38263416.946:3545): avc: denied { read } for pid=23191 comm="syz.7.6278" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 412.323666][ T28] audit: type=1400 audit(38263416.946:3546): avc: denied { open } for pid=23191 comm="syz.7.6278" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 413.224645][T23238] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6298'. [ 413.345911][T23244] netlink: 'syz.7.6301': attribute type 13 has an invalid length. [ 413.800789][T23290] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6320'. [ 414.645565][ T28] audit: type=1326 audit(38263419.316:3547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23320 comm="syz.8.6334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe526d0e019 code=0x7ffc0000 [ 414.716241][ T28] audit: type=1326 audit(38263419.316:3548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23320 comm="syz.8.6334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe526d0e019 code=0x7ffc0000 [ 414.783870][T23331] tipc: Started in network mode [ 414.793241][ T28] audit: type=1326 audit(38263419.316:3549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23320 comm="syz.8.6334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe526d0e019 code=0x7ffc0000 [ 414.829474][T23331] tipc: Node identity 66b9fa586501, cluster identity 4711 [ 414.858485][T23331] tipc: Enabled bearer , priority 0 [ 414.889793][ T28] audit: type=1326 audit(38263419.316:3550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23320 comm="syz.8.6334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe526d0e019 code=0x7ffc0000 [ 414.954873][T23349] netlink: 4 bytes leftover after parsing attributes in process `syz.4.6346'. [ 414.969767][ T28] audit: type=1326 audit(38263419.326:3551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23320 comm="syz.8.6334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=22 compat=0 ip=0x7fe526d0e019 code=0x7ffc0000 [ 414.978261][T23337] syzkaller0: entered promiscuous mode [ 415.023094][ T28] audit: type=1326 audit(38263419.326:3552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23320 comm="syz.8.6334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe526d0e019 code=0x7ffc0000 [ 415.038877][T23337] syzkaller0: entered allmulticast mode [ 415.050246][T23353] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6346'. [ 415.088332][T23337] tipc: Resetting bearer [ 415.099345][ T28] audit: type=1326 audit(38263419.326:3553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23320 comm="syz.8.6334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe526d0e019 code=0x7ffc0000 [ 415.140008][ T3833] tipc: Resetting bearer [ 415.158304][T23330] tipc: Resetting bearer [ 415.169829][ T28] audit: type=1326 audit(38263419.326:3554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23320 comm="syz.8.6334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe526d0e019 code=0x7ffc0000 [ 415.176066][T23330] tipc: Disabling bearer [ 415.247051][ T28] audit: type=1326 audit(38263419.326:3555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23320 comm="syz.8.6334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fe526d0e019 code=0x7ffc0000 [ 415.324775][ T28] audit: type=1326 audit(38263419.326:3556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23320 comm="syz.8.6334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe526d0e019 code=0x7ffc0000 [ 415.408605][ T28] audit: type=1326 audit(38263419.326:3557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23320 comm="syz.8.6334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe526d0e019 code=0x7ffc0000 [ 415.444233][T23379] netlink: 20 bytes leftover after parsing attributes in process `syz.7.6358'. [ 415.473807][ T28] audit: type=1326 audit(38263419.326:3558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23320 comm="syz.8.6334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe526d0e019 code=0x7ffc0000 [ 415.538721][ T28] audit: type=1326 audit(38263419.436:3559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=23320 comm="syz.8.6334" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe526d0e019 code=0x7ffc0000 [ 415.566810][ T28] audit: type=1400 audit(38263419.986:3560): avc: denied { create } for pid=23367 comm="syz.9.6355" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 415.611598][ T28] audit: type=1400 audit(38263420.036:3561): avc: denied { unlink } for pid=8040 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=5417 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 416.135742][T23400] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6367'. [ 416.194168][T23404] netlink: 'syz.2.6370': attribute type 1 has an invalid length. [ 416.238165][T23404] 8021q: adding VLAN 0 to HW filter on device bond5 [ 416.275198][T23413] netlink: 'syz.4.6372': attribute type 10 has an invalid length. [ 416.335692][T23404] bond5: (slave geneve2): making interface the new active one [ 416.361911][T23404] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 416.428365][ T3833] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.436821][ T3833] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.458026][ T3833] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.512411][ T3833] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.705528][T23440] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6383'. [ 417.642241][T23474] netlink: 'syz.7.6392': attribute type 10 has an invalid length. [ 418.199159][T23521] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6415'. [ 418.236464][T23521] bond12: entered promiscuous mode [ 418.270931][T23521] 8021q: adding VLAN 0 to HW filter on device bond12 [ 418.316524][T23527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.359572][T23527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.378306][T23523] bridge4: entered promiscuous mode [ 418.404874][T23523] bond12: (slave bridge4): Enslaving as an active interface with an up link [ 418.426038][T23530] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6418'. [ 418.475622][T23532] netlink: 172 bytes leftover after parsing attributes in process `syz.4.6419'. [ 418.522331][T23534] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 419.562565][T23574] netlink: 'syz.2.6434': attribute type 1 has an invalid length. [ 419.600958][T23574] 8021q: adding VLAN 0 to HW filter on device bond6 [ 419.621956][T23574] bond6: (slave geneve3): making interface the new active one [ 419.631309][T23574] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 420.578152][T23606] netlink: 4 bytes leftover after parsing attributes in process `syz.7.6449'. [ 420.606545][T23606] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6449'. [ 420.710969][T23614] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6452'. [ 420.984603][T23629] bond0: (slave ip6gretap0): making interface the new active one [ 421.004814][T23629] bond0: (slave ip6gretap0): Enslaving as an active interface with an up link [ 421.059642][T23629] bond0 (unregistering): (slave ip6gretap0): Releasing active interface [ 421.107694][T23629] bond0 (unregistering): Released all slaves [ 421.703558][T23676] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6479'. [ 422.122118][T23704] netlink: 12 bytes leftover after parsing attributes in process `syz.7.6488'. [ 422.759746][T23715] 8021q: adding VLAN 0 to HW filter on device bond7 [ 422.778282][T23715] team0: Failed to send port change of device bond7 via netlink (err -105) [ 422.787214][T23715] team0: Failed to send options change via netlink (err -105) [ 422.795023][T23715] team0: Port device bond7 added [ 422.948908][T23730] netlink: 'syz.8.6499': attribute type 1 has an invalid length. [ 422.995135][T23718] loop7: detected capacity change from 0 to 512 [ 422.998323][T23730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.038105][T23718] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.6492: bg 0: block 393: padding at end of block bitmap is not set [ 423.057330][T23718] loop7: lost filesystem error report for type 5 error -117 [ 423.057820][T23718] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 423.057908][ C0] EXT4-fs (loop7): error count since last fsck: 1 [ 423.057970][ C0] EXT4-fs (loop7): initial error at time 38263683: ext4_validate_block_bitmap:441 [ 423.058050][ C0] EXT4-fs (loop7): last error at time 38263683: ext4_validate_block_bitmap:441 [ 423.104736][T23735] bond0: (slave gretap3): making interface the new active one [ 423.169947][T23735] bond0: (slave gretap3): Enslaving as an active interface with an up link [ 423.184642][T23718] loop7: lost filesystem error report for type 5 error -117 [ 423.186920][T23718] EXT4-fs (loop7): 2 truncates cleaned up [ 423.241671][T23718] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 423.287872][ T28] kauditd_printk_skb: 209 callbacks suppressed [ 423.294499][ T28] audit: type=1400 audit(38263683.954:3771): avc: denied { write } for pid=23717 comm="syz.7.6492" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 423.336988][ T28] audit: type=1400 audit(38263683.994:3772): avc: denied { create } for pid=23717 comm="syz.7.6492" name=E91F7189591E9233614B scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 423.367622][T19695] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 423.409809][ T28] audit: type=1400 audit(38263683.994:3773): avc: denied { write } for pid=23717 comm="syz.7.6492" name=E91F7189591E9233614B dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 423.556120][ T28] audit: type=1400 audit(38263684.224:3774): avc: denied { ioctl } for pid=23765 comm="syz.8.6511" path="socket:[68524]" dev="sockfs" ino=68524 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 423.835857][T23776] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 424.044536][T23787] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 424.511933][T23806] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6528'. [ 424.732634][T23824] ieee802154 phy0 wpan0: encryption failed: -22 [ 424.964265][T23850] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6553'. [ 425.217453][T23870] netlink: 140 bytes leftover after parsing attributes in process `syz.8.6561'. [ 425.850529][T23894] netlink: 168 bytes leftover after parsing attributes in process `syz.4.6563'. [ 426.148006][T23915] netlink: 'syz.9.6581': attribute type 1 has an invalid length. [ 426.209068][T23915] 8021q: adding VLAN 0 to HW filter on device bond6 [ 426.948461][ T3800] netdevsim netdevsim7 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.957806][ T3800] netdevsim netdevsim7 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.991953][ T3800] netdevsim netdevsim7 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.020253][ T3800] netdevsim netdevsim7 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 427.393256][T23968] netlink: 68 bytes leftover after parsing attributes in process `syz.4.6594'. [ 427.796529][T23993] ref_ctr increment failed for inode: 0x1636 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888142c28e00 [ 427.881770][T23997] netlink: 'syz.4.6608': attribute type 1 has an invalid length. [ 427.915094][T23997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 428.049635][T24016] netlink: 'syz.4.6608': attribute type 10 has an invalid length. [ 428.059548][T24016] netlink: 40 bytes leftover after parsing attributes in process `syz.4.6608'. [ 428.104235][T23997] bond0: (slave veth5): Enslaving as a backup interface with a down link [ 428.120192][T24015] loop7: detected capacity change from 0 to 2048 [ 428.128105][ T3833] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 428.148844][T24011] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 428.158330][T24016] dummy0: entered promiscuous mode [ 428.180503][T24015] Alternate GPT is invalid, using primary GPT. [ 428.188296][T24015] loop7: p2 p3 p7 [ 428.202221][T24016] bond0: (slave dummy0): Removing an active aggregator [ 428.236298][T24016] bond0: (slave dummy0): Releasing backup interface [ 428.463420][ T3796] tipc: Subscription rejected, illegal request [ 429.134787][T24095] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6629'. [ 429.184385][T24095] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6629'. [ 429.426929][T24129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6636'. [ 429.509218][T24129] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6636'. [ 430.074373][ T7477] Bluetooth: hci0: Frame reassembly failed (-84) [ 431.684034][T24209] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6668'. [ 431.706866][T24209] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6668'. [ 432.108005][T24157] Bluetooth: hci0: command 0x1003 tx timeout [ 432.114048][ T3507] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 432.212415][ T3833] tipc: Subscription rejected, illegal request [ 432.276696][T24253] netlink: 16 bytes leftover after parsing attributes in process `syz.8.6687'. [ 432.308758][T24253] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6687'. [ 432.324211][T24253] netlink: 52 bytes leftover after parsing attributes in process `syz.8.6687'. [ 432.349670][T24253] netlink: 56 bytes leftover after parsing attributes in process `syz.8.6687'. [ 432.389450][T24260] netlink: 24 bytes leftover after parsing attributes in process `syz.7.6691'. [ 432.470523][ T28] audit: type=1400 audit(38263693.144:3775): avc: denied { lock } for pid=24263 comm="syz.7.6693" path="socket:[70505]" dev="sockfs" ino=70505 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 432.865359][T24292] bond2: entered allmulticast mode [ 432.881359][T24292] vti0: entered allmulticast mode [ 432.917608][T24291] bond2: left allmulticast mode [ 432.927978][T24291] vti0: left allmulticast mode [ 433.744296][ T28] audit: type=1400 audit(38263694.414:3776): avc: denied { read } for pid=24320 comm="syz.7.6717" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 433.867220][T24349] tipc: Enabling of bearer rejected, already enabled [ 434.007630][T24362] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6730'. [ 434.024473][T24364] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6740'. [ 434.053725][T24364] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6740'. [ 434.660667][ T28] audit: type=1326 audit(38263695.334:3777): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24394 comm="syz.9.6743" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f075a65e019 code=0x0 [ 436.189076][ T28] audit: type=1400 audit(38263696.864:3778): avc: denied { listen } for pid=24457 comm="syz.2.6766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 436.251462][ T28] audit: type=1400 audit(38263696.864:3779): avc: denied { accept } for pid=24457 comm="syz.2.6766" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 437.115751][ T28] audit: type=1400 audit(38263697.784:3780): avc: denied { nlmsg_write } for pid=24499 comm="syz.4.6783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 437.187052][ T28] audit: type=1400 audit(38263697.784:3781): avc: denied { audit_write } for pid=24499 comm="syz.4.6783" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 437.246083][ T28] audit: type=1107 audit(38263697.784:3782): pid=24499 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 437.279486][T24520] __nla_validate_parse: 3 callbacks suppressed [ 437.279568][T24520] netlink: 4 bytes leftover after parsing attributes in process `syz.8.6791'. [ 437.308105][T24524] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 437.541628][T24549] tipc: Enabled bearer , priority 0 [ 437.611048][T24553] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6806'. [ 437.645806][T24553] bond7: entered promiscuous mode [ 437.655254][T24553] 8021q: adding VLAN 0 to HW filter on device bond7 [ 437.756547][T24553] bridge8: entered promiscuous mode [ 437.763015][T24553] bond7: (slave bridge8): Enslaving as an active interface with an up link [ 438.267646][T24579] tipc: Enabled bearer , priority 0 [ 438.870262][T24608] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 438.902541][T24610] loop7: detected capacity change from 0 to 1024 [ 438.910775][T24608] team0: Unable to change to the same mode the team is in [ 438.934412][T24610] EXT4-fs: Ignoring removed bh option [ 438.943731][T24608] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6828'. [ 438.964463][T24608] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6828'. [ 438.986142][T24610] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 439.041224][ T28] audit: type=1400 audit(38263699.694:3783): avc: denied { write } for pid=24609 comm="syz.7.6829" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 439.065629][T24605] SELinux: security_context_str_to_sid ('|àkºÎ€|ËìL.å ) failed with errno=-22 [ 439.097604][T19695] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 439.160544][ T28] audit: type=1400 audit(38263699.704:3784): avc: denied { watch watch_reads } for pid=24609 comm="syz.7.6829" path="/283/file1" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 439.206458][ T28] audit: type=1400 audit(38263699.704:3785): avc: denied { write } for pid=24609 comm="syz.7.6829" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 439.230779][ T28] audit: type=1400 audit(38263699.704:3786): avc: denied { write } for pid=24609 comm="syz.7.6829" name="file0" dev="loop7" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 439.478616][T24638] SELinux: security_context_str_to_sid ('|àkºÎ€|ËìL.å ) failed with errno=-22 [ 439.726490][T24660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6847'. [ 440.048505][ T28] audit: type=1326 audit(38263700.724:3787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24678 comm="syz.8.6857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe526d0e019 code=0x7ffc0000 [ 440.107858][ T28] audit: type=1326 audit(38263700.754:3788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24678 comm="syz.8.6857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe526d0e019 code=0x7ffc0000 [ 440.164112][ T28] audit: type=1326 audit(38263700.754:3789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24678 comm="syz.8.6857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe526d0e019 code=0x7ffc0000 [ 440.222511][ T28] audit: type=1326 audit(38263700.754:3790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24678 comm="syz.8.6857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe526d0e019 code=0x7ffc0000 [ 440.275592][ T28] audit: type=1326 audit(38263700.754:3791): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24678 comm="syz.8.6857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe526d0e019 code=0x7ffc0000 [ 440.331809][ T28] audit: type=1326 audit(38263700.754:3792): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24678 comm="syz.8.6857" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe526d0e019 code=0x7ffc0000 [ 441.115306][T24691] loop7: detected capacity change from 0 to 512 [ 441.179785][T24691] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 441.339025][T24691] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.471357][T24691] SELinux: security_context_str_to_sid ('|àkºÎ€|ËìL.å ) failed with errno=-22 [ 441.706676][T19695] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.353727][T24745] macsec1: entered promiscuous mode [ 443.124836][T24807] SELinux: security_context_str_to_sid ('|àkºÎ€|ËìL.å ) failed with errno=-22 [ 443.346955][T24863] netlink: 12 bytes leftover after parsing attributes in process `syz.9.6899'. [ 443.385875][T24823] loop7: detected capacity change from 0 to 512 [ 443.395014][T24823] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 443.422556][T24823] EXT4-fs (loop7): 1 truncate cleaned up [ 443.433216][T24823] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 443.554184][T19695] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 444.607033][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 444.607047][ T28] audit: type=1107 audit(38263705.274:3816): pid=24922 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 444.728974][T24931] netlink: 'syz.4.6926': attribute type 1 has an invalid length. [ 444.759099][T24935] SELinux: Context u:r:untrusted_app:s0:c512,c768 is not valid (left unmapped). [ 444.763029][T24931] bond13: entered promiscuous mode [ 444.774163][T24931] 8021q: adding VLAN 0 to HW filter on device bond13 [ 444.788644][ T28] audit: type=1400 audit(38263705.444:3817): avc: denied { relabelto } for pid=24934 comm="syz.7.6928" name="305" dev="tmpfs" ino=1596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 444.933842][T24931] bond13: (slave bridge5): making interface the new active one [ 444.943405][ T28] audit: type=1400 audit(38263705.464:3818): avc: denied { associate } for pid=24934 comm="syz.7.6928" name="305" dev="tmpfs" ino=1596 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="u:r:untrusted_app:s0:c512,c768" [ 444.979794][T24931] bridge5: entered promiscuous mode [ 444.999718][T24931] bond13: (slave bridge5): Enslaving as an active interface with an up link [ 445.039544][ T28] audit: type=1400 audit(38263705.554:3819): avc: denied { write } for pid=19695 comm="syz-executor" name="305" dev="tmpfs" ino=1596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 445.119382][ T28] audit: type=1400 audit(38263705.554:3820): avc: denied { remove_name } for pid=19695 comm="syz-executor" name="binderfs" dev="tmpfs" ino=1600 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 445.168112][ T28] audit: type=1400 audit(38263705.554:3821): avc: denied { write } for pid=19695 comm="syz-executor" name="305" dev="tmpfs" ino=1596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 445.260699][ T28] audit: type=1400 audit(38263705.554:3822): avc: denied { write } for pid=19695 comm="syz-executor" name="305" dev="tmpfs" ino=1596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 445.331073][ T28] audit: type=1400 audit(38263705.554:3823): avc: denied { write } for pid=19695 comm="syz-executor" name="305" dev="tmpfs" ino=1596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 445.400871][T24969] syzkaller0: port 1(veth0) entered blocking state [ 445.410311][T24969] syzkaller0: port 1(veth0) entered disabled state [ 445.425523][ T28] audit: type=1400 audit(38263705.554:3824): avc: denied { rmdir } for pid=19695 comm="syz-executor" name="305" dev="tmpfs" ino=1596 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="u:r:untrusted_app:s0:c512,c768" [ 445.455978][T24969] veth0: entered allmulticast mode [ 445.475559][T24969] veth0: entered promiscuous mode [ 445.591280][T24974] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 445.920321][ T28] audit: type=1326 audit(38263706.594:3825): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=24999 comm="syz.2.6964" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f526923e019 code=0x7ffc0000 [ 446.165815][T25014] netlink: 830 bytes leftover after parsing attributes in process `syz.4.6958'. [ 446.261092][T25018] sctp: [Deprecated]: syz.4.6960 (pid 25018) Use of struct sctp_assoc_value in delayed_ack socket option. [ 446.261092][T25018] Use struct sctp_sack_info instead [ 446.360981][T25024] loop7: detected capacity change from 0 to 512 [ 446.402191][T25024] EXT4-fs: Ignoring removed i_version option [ 446.455901][T25024] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.109123][T19695] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.637313][T25060] dummy0: left promiscuous mode [ 447.784571][T25060] bond12: left promiscuous mode [ 447.790036][T25060] bridge4: left promiscuous mode [ 447.848030][T25060] bond13: left promiscuous mode [ 447.852997][T25060] bridge5: left promiscuous mode [ 448.070409][T25087] tipc: Resetting bearer [ 448.454922][T25105] netlink: 'syz.8.6991': attribute type 1 has an invalid length. [ 448.930717][T25131] netlink: 180 bytes leftover after parsing attributes in process `syz.8.7003'. [ 449.011509][T25137] netlink: 40 bytes leftover after parsing attributes in process `syz.7.7009'. [ 449.302216][T25147] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7013'. [ 449.537251][T25154] netlink: 28 bytes leftover after parsing attributes in process `syz.7.7016'. [ 449.661522][T25158] loop7: detected capacity change from 0 to 256 [ 449.690889][T25158] msdos: Bad value for 'check' [ 449.932937][T25163] netlink: 'syz.4.7019': attribute type 13 has an invalid length. [ 450.190950][T25172] netlink: 6 bytes leftover after parsing attributes in process `syz.4.7023'. [ 450.218146][T25170] loop7: detected capacity change from 0 to 1764 [ 450.219493][T25172] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 450.795685][T25186] netlink: 'syz.9.7038': attribute type 1 has an invalid length. [ 450.861348][T25186] 8021q: adding VLAN 0 to HW filter on device bond8 [ 452.594057][T25193] bond8: (slave veth19): Enslaving as an active interface with a down link [ 452.649933][T25211] netlink: 68 bytes leftover after parsing attributes in process `syz.7.7035'. [ 452.661863][T25186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.689972][T25186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 452.701602][T25186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 452.715550][T25186] veth1_vlan: left promiscuous mode [ 452.722624][T25186] veth0_vlan: left promiscuous mode [ 452.731046][T25186] veth0_vlan: entered promiscuous mode [ 452.762094][T25186] veth1_vlan: entered promiscuous mode [ 452.789402][T25186] veth1_macvtap: left promiscuous mode [ 452.797469][T25186] veth0_macvtap: left promiscuous mode [ 452.804904][T25186] veth0_macvtap: entered promiscuous mode [ 452.836187][T25186] veth1_macvtap: entered promiscuous mode [ 452.854228][T25186] 8021q: adding VLAN 0 to HW filter on device bond1 [ 452.918634][T25186] 8021q: adding VLAN 0 to HW filter on device bond2 [ 452.963364][T25186] 8021q: adding VLAN 0 to HW filter on device bond3 [ 453.012644][T25186] 8021q: adding VLAN 0 to HW filter on device eth0 [ 453.043993][T25186] 8021q: adding VLAN 0 to HW filter on device eth1 [ 453.066907][T25186] 8021q: adding VLAN 0 to HW filter on device eth2 [ 453.093473][T25186] 8021q: adding VLAN 0 to HW filter on device eth3 [ 453.112756][T25186] batman_adv: batadv0: Interface activated: gretap2 [ 453.124131][T25186] 8021q: adding VLAN 0 to HW filter on device bond4 [ 453.219934][T25186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.242196][T25186] 8021q: adding VLAN 0 to HW filter on device bond5 [ 453.290700][T25204] syzkaller0: Caught tx_queue_len zero misconfig [ 453.371560][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 453.371575][ T28] audit: type=1400 audit(38263714.044:3852): avc: denied { setopt } for pid=25234 comm="syz.9.7044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 453.490628][ T3833] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.524279][ T3833] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.565771][ T28] audit: type=1400 audit(38263714.234:3853): avc: denied { bind } for pid=25241 comm="syz.2.7048" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 453.599394][ T7478] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.630494][ T7478] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.658527][ T3796] bond8: (slave veth19): link status definitely up, 10000 Mbps full duplex [ 453.667928][ T3796] bond8: (slave veth19): making interface the new active one [ 453.697770][ T3796] bond8: active interface up! [ 453.733447][ T7478] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 453.764418][ T7478] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 453.772557][ T3402] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 453.808050][ T3796] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.820040][ T3796] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.856127][ T3796] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 453.892533][ T3796] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 454.178333][ T3402] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 454.194185][T25226] loop7: detected capacity change from 0 to 4096 [ 454.325658][T25226] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.402982][ T28] audit: type=1400 audit(38263715.074:3854): avc: denied { write } for pid=25225 comm="syz.7.7050" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 454.465755][T19695] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 454.715434][T25273] sctp: [Deprecated]: syz.2.7057 (pid 25273) Use of int in max_burst socket option deprecated. [ 454.715434][T25273] Use struct sctp_assoc_value instead [ 454.748574][ T3402] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 455.561092][ T28] audit: type=1400 audit(38263716.224:3855): avc: denied { setopt } for pid=25293 comm="syz.8.7062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 456.704519][T25319] loop7: detected capacity change from 0 to 512 [ 456.753340][T25319] EXT4-fs: Invalid want_extra_isize 4 [ 456.837480][ T28] audit: type=1400 audit(38263717.494:3856): avc: denied { mounton } for pid=25318 comm="syz.7.7073" path="/336/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 458.877105][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 458.896470][ T3402] ================================================================== [ 458.904791][ T3402] BUG: KCSAN: data-race in kick_pool / wq_worker_running [ 458.911813][ T3402] [ 458.914122][ T3402] read-write to 0xffff888237c2a8e4 of 4 bytes by task 1040 on cpu 0: [ 458.922183][ T3402] wq_worker_running+0x9b/0x120 [ 458.927028][ T3402] synchronize_rcu_expedited+0x67c/0x770 [ 458.932736][ T3402] synchronize_rcu+0x35/0x2e0 [ 458.937405][ T3402] xfrm_state_gc_task+0x98/0x590 [ 458.942342][ T3402] process_scheduled_works+0x4d4/0x9a0 [ 458.947804][ T3402] worker_thread+0x569/0x750 [ 458.952400][ T3402] kthread+0x221/0x270 [ 458.956518][ T3402] ret_from_fork+0x146/0x330 [ 458.961153][ T3402] ret_from_fork_asm+0x1a/0x30 [ 458.965913][ T3402] [ 458.968381][ T3402] read to 0xffff888237c2a8e4 of 4 bytes by task 3402 on cpu 1: [ 458.976030][ T3402] kick_pool+0x49/0x2d0 [ 458.980632][ T3402] __queue_work+0x8e9/0xb90 [ 458.985138][ T3402] queue_work_on+0xa9/0x140 [ 458.989629][ T3402] process_srcu+0xa39/0xd90 [ 458.994116][ T3402] process_scheduled_works+0x4d4/0x9a0 [ 458.999604][ T3402] worker_thread+0x569/0x750 [ 459.004194][ T3402] kthread+0x221/0x270 [ 459.008270][ T3402] ret_from_fork+0x146/0x330 [ 459.012854][ T3402] ret_from_fork_asm+0x1a/0x30 [ 459.017862][ T3402] [ 459.020177][ T3402] value changed: 0x00000000 -> 0x00000001 [ 459.025869][ T3402] [ 459.028174][ T3402] Reported by Kernel Concurrency Sanitizer on: [ 459.034511][ T3402] CPU: 1 UID: 0 PID: 3402 Comm: kworker/1:5 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 459.045534][ T3402] Tainted: [W]=WARN [ 459.049445][ T3402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 459.059882][ T3402] Workqueue: rcu_gp process_srcu [ 459.065015][ T3402] ================================================================== [ 467.628521][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!