last executing test programs: 8m57.982614374s ago: executing program 32 (id=1031): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x6, 0xa, 0x4, 0x1, 0x6, 0x0, 0x0, 0x8, 0x80, 0x8}, 0xe) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}}, &(0x7f0000000200)=0x84) 8m39.273793239s ago: executing program 33 (id=1470): sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) ioctl$sock_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 8m32.089041085s ago: executing program 34 (id=1644): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@init_itable_val={'init_itable', 0x3d, 0x6}}, {}, {@nojournal_checksum}, {@norecovery}, {@noload}, {@grpjquota}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x40343}}]}, 0xfd, 0x574, &(0x7f0000000cc0)="$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") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000140)=""/53, 0x35) getdents64(r0, 0xfffffffffffffffe, 0x29) 8m0.315432264s ago: executing program 35 (id=2408): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1401000900000000000000050000c30200030000006514b260cfe614cbbb00001100018d2aa0ad00ed7aa6b895feb05536853ac66abc57963fac826b933bbcfdee2221a9c01b97326b3ad719662f9232edd5cff7f09e9e3b2d629cf0d4c34f0676bb560a24f8cf1cd802d44dc4276ef4912b5924f2339ca3fc7d0317fd47625d952f139146f20a84a0de1bcf129dfb07ffa5d3436dd2c6fc66dc4c8e7e106cd2b5636ce160da14ac2a65482ec3f6714204991c415fc7ffdf001095ff14d9b4b107561dc8fd634c281800"], 0x28}, 0x1, 0x0, 0x0, 0x4010}, 0x40804) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) io_cancel(0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x6a, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0, r0}, 0x0) 5m29.248427717s ago: executing program 36 (id=5512): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x4, 0x7}, {0xe, 0xffff}}}, 0x24}}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x22, &(0x7f0000000000)=0x40d, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 5m20.710963012s ago: executing program 37 (id=5877): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x10040, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x2, 0x20000}, 0x1, 0x0, 0x0, 0x6, 0x7, 0x1, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x3b}}, 0x10, 0x0}, 0x3000c085) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 4m40.808934257s ago: executing program 38 (id=6604): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0005"], 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @loopback}], 0x1c) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m27.092454115s ago: executing program 3 (id=8067): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 3m26.195852304s ago: executing program 3 (id=8072): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xfff3, 0xc}, {}, {0xa, 0xfff3}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x34, 0x2, [@TCA_CGROUP_EMATCHES={0x30, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x20, 0x1, 0x0, 0x0, {{0xe38, 0x9, 0x2}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x84}, 0x40010) 3m26.094588516s ago: executing program 3 (id=8074): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000740)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$eJzs3c9qY1UYAPDvpkkaLZIsXIngXczCjWUyWxdmkApiV0oW/gEdnBkYmjDQQGBUDF35BC5c+B7uXLlR3PgGgg/gziKFIze5TWKbpk1rWun8fpsezvm+nO/k3PYuLvf0s1f7ew+fDh4ffPV7NBpZVDrRicMsWlGJY6kUAMCtcJhS/Hmp+3u1sq6aAID1mrv/184I2Tzd9da6ywIA1uiDDz967/7u7s77ed6I6H8z7GYx+TkZv/84nkQvHsXdaMbR7FlASpP2O+/u7kQ1L7TiTn807BaZ/U9/nX9sUOS3oxmtxfntfGIufzTs1uLFiCyLeNIpCrkXzXj5VH4xvnNvQX506/F6o1xkMf92NOO3z+Np9OLh+JnGbP6v23n+dvr2ry8/LoKL/Gw07G6O42bSxnXvDQAAAAAAAAAAAAAAAAAAAAAAt9d2PtWKO/2iqzx/Z+NoPL79r/Hx+TqV8fgkP4uojxsnzgcapfj++Hydu3mep2wSPzvfpxqvVKN6YwsHAAAAAAAAAAAAAAAAAACA/5HBsy/2HvR6j/b/k0b5kv/0tf7Lfk5nrue1WB68udJcsVGGF7WejGn//El/2lMsYvXiD18a1vKIZTXXTvW8UNRz/hR/p5RSlkVcbZtqF5nrnMbW8pjiC/7xu6039h5k532HjeON+2F+qB77g2cn9jSyovHTLxfb7rTS5VdfElMvr5gLfc7WFX+J3vxjMlnZk62wilrZiLMuv8ZK1/M1/QECAAAAAAAAAAAAAAAAAACmZi/9Lhg8WJpaWVtRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDNZv//f4XGqExeHJNSGk176rE/uOElAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bz4JwAA///l5m1V") r2 = open(&(0x7f0000000040)='.\x00', 0x20000, 0x50) getdents64(r2, &(0x7f0000000fc0)=""/224, 0xe0) 3m25.965197699s ago: executing program 3 (id=8075): syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000180)='./file1\x00', 0xa0c406, &(0x7f0000000480)=ANY=[@ANYBLOB="646f747300000000732c646d6173a594e5e0d4ff303030303032fd33a1ddfe6717c3d234022f30303030302c6e6f606f74732cb7f973636172642c6e66733d6e6f738f176d945097ec0dd5eadb028dfd7ea6ef584b372f5d74d4250c9b6f8f839859f3492898b4b06691432b63bab01154fdffffffffffffff5b47720a85ad56c37ed0", @ANYRESHEX=0x0, @ANYBLOB="2c646f733178666c6f70707900000000000000003030ffffffff3030303030313737373737373737f9909fdfd4291a9ccfbbdb0556c0f39fdb37372c004c0f1208ec0c34b7df4ba1b5e6b76697434de7574db9bcaef6a61212c3f260bebc7ac5b1b113e1119b83f1cf9f686b3dc422c2ddbcefe94e5c255b5e8c90613e6b598b3b7a2c05de53dab7acab1c2e7b6a547f8120c12a14b06fb302b8adb87fa67ab868940868fee39f0796736ccd4adf62186a216263c1322da47b156791f49bf9e904cf364616ba0d1bf1"], 0x1, 0x291, &(0x7f0000000740)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x40040, 0x6ab858183a7ef6ba) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x0) 3m25.562530648s ago: executing program 3 (id=8079): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) syz_io_uring_setup(0x4b6, &(0x7f0000000100)={0x0, 0x0, 0x400, 0x1, 0x5}, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r1, &(0x7f0000004040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e00)=""/255, 0xff}, 0x4080}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/32, 0x20}, 0xacf4}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003f80)=""/144, 0x90}, 0x8000}], 0x6, 0x40000002, 0x0) accept4$x25(r0, 0x0, 0x0, 0x80000) 3m25.44242948s ago: executing program 3 (id=8094): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r0, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000080)='%+9llu \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m25.406408421s ago: executing program 39 (id=8094): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000bc0)={{r0, 0xffffffffffffffff}, &(0x7f0000000c00), &(0x7f0000000080)='%+9llu \x00'}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r1, r0}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x16, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000341200007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x0, 0xe, 0x0, &(0x7f0000000040)="f4b84de4115d64244a0e839e8971", 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m48.469291092s ago: executing program 0 (id=8642): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x2c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x1b, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000546439f08500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000017000000180100002020690000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, r3, 0x25, 0x0, @val=@perf_event}, 0x18) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x125d, &(0x7f0000000c80)=ANY=[], 0x0) 2m48.394608593s ago: executing program 0 (id=8644): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r0, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000000)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@remote, 0x4e23, 0x6, 0x4e22, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x7, 0x7, 0x5, 0x95d, 0xfffffffffffffffb, 0x0, 0x0, 0x5c2}, {0xe, 0x5, 0xb1b}, 0x401, 0x0, 0x2, 0x1, 0x2, 0x2}, {{@in6=@empty, 0x4d4, 0x2a}, 0x39573c4e467c4e, @in=@loopback, 0x3502, 0x4, 0x0, 0x40, 0x9, 0x30, 0x7}}, 0xe8) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x40, &(0x7f0000000080)="8c5d7b87b32ecae06ac8cfe890364ab911d8c33439477a7591f6914e91c6821ee7163f8ae1896184d48797997716158aad89f66dd67480ce8ff178ef748cfcdcf54127d5ff95cbcaebf10a3b7cddafa2c0fa6aa2eaef0d457680203c02d0c623", 0x7590) 2m48.356208514s ago: executing program 0 (id=8647): pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000180)=0x1, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x14, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x200, @local}, 0x10) sendto$inet(r1, &(0x7f0000000200)="e11100050000", 0x6, 0x20000850, 0x0, 0x0) splice(r1, 0x0, r0, 0x0, 0x5, 0xa) 2m48.326596324s ago: executing program 0 (id=8648): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x80471a, &(0x7f00000000c0)={[{@bh}]}, 0x82, 0x4a8, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x51) r1 = openat(r0, &(0x7f0000000040)='.\x00', 0x0, 0x51) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000080)={0x8}) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000300)={[{@norecovery}, {@nobarrier}, {@noauto_da_alloc}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@noload}, {@noblock_validity}, {@stripe={'stripe', 0x3d, 0x9}}, {@data_ordered}, {@noquota}]}, 0x81, 0xbe0, &(0x7f0000001040)="$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") ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8, 0xffffffff, 0xfffff7bd, 0xfffffffd}) 2m48.248608936s ago: executing program 0 (id=8650): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000100)=0x1800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_link_settings={0x2, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x20, 0x8, [0x0, 0x0, 0x0, 0x100, 0x5, 0xfffffffc, 0x0, 0x2]}}) 2m48.005861952s ago: executing program 0 (id=8654): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) recvmmsg(r0, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/21, 0x15}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) 2m48.005638762s ago: executing program 40 (id=8654): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x8, &(0x7f0000000180)=0x8, 0x4) recvmmsg(r0, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001ac0)=""/21, 0x15}, 0x5}], 0x1, 0x45833af92e4b39ff, 0x0) 2m29.63404278s ago: executing program 1 (id=8987): r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, 0x0, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='cmdline\x00') preadv(r1, &(0x7f0000000680)=[{&(0x7f0000001180)=""/4113, 0x1011}], 0x1, 0x16, 0xfffffff9) 2m29.565448271s ago: executing program 1 (id=8988): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000006c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x5, 0x3, 0x6, "b0bf2ebb48c849ac0000000003000018bfff40"}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000140)=0x12) 2m28.880348796s ago: executing program 1 (id=9007): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x1, 0x400}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf}) ioctl$int_in(r0, 0x5452, &(0x7f0000002480)=0x3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) close(r0) 2m28.861668346s ago: executing program 1 (id=9000): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f00000005c0)={[{@block_validity}, {}, {@sysvgroups}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x577, &(0x7f0000000640)="$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") mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000240)={0x0, 0x0, 0x0, 0xacdd, 0x1000, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208280ff18f2ff0000000000000000000000008000", [0x4, 0x4]}) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 2m28.600889822s ago: executing program 1 (id=9012): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000080)='./bus\x00', 0x2810000, &(0x7f00000001c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c73686f72746e616d653d77696e6e742c756e695f786c6174653d302c756e695f786c6174653d312c757466383d312c757466383d312c646973636172642c757466383d302c756e695f786c6174653d302c666c7573682c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c646f733178666c6f7070792c73686f72746e616d653d77696e6e742c73686f72746e616d653d6c6f7765722c757466382c0014697a7960fb374b723f64329787434c6c9f891d2e309efaf1d4e529e1ba0f697fedffb095592bc19d5a8f8141ee9bf46262f3a2b1452bf206c0e2ae8a465e6e1be6eeb5d588035a24458d476fc1f9a234cdc4ba352a4185614cc47df4870bff796357ee95fffb99cde9"], 0x1, 0x2c5, &(0x7f0000000600)="$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") openat(0xffffffffffffff9c, 0x0, 0x105042, 0x1c3) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x3c, r0, 0x1, 0x70bd27, 0x0, {0x54}, [{{@nsim={{0x1d}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb8, 0x1}}}]}, 0x3c}}, 0xc084) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 2m28.314057368s ago: executing program 1 (id=9018): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x0, {0x2, 0x1, 0x4}, 0x2b1775bfda5fcbf0}, 0x18) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, 0x0) 2m28.305177849s ago: executing program 41 (id=9018): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000001c0)="b875a1431a05b9319c", 0x9}], 0x1}}], 0xa19afd5e7047374e, 0x4) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x0, {0x2, 0x1, 0x4}, 0x2b1775bfda5fcbf0}, 0x18) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, 0x0) 2m23.61822535s ago: executing program 8 (id=9067): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x20, 0x400000, 0x0, 0x0, 0x0, 0xf}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@id, 0x10) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x101d0) 2m23.1424496s ago: executing program 8 (id=9075): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5931, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x4, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$sock(0xffffffffffffffff, 0x0, 0x4040080) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) 2m22.995150714s ago: executing program 8 (id=9078): socket$nl_generic(0x10, 0x3, 0x10) r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$binfmt_elf64(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRES64=r1], 0x1873) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x5], 0x0, 0x0, 0x1}}, 0x40) 2m22.766230038s ago: executing program 8 (id=9080): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000240)={[{@acl}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80000}}, {@quota}]}, 0x1, 0x4ff, &(0x7f0000000ac0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m22.623719772s ago: executing program 8 (id=9083): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x7, 0x2b23}, 0x11ecca, 0x1224, 0xfffffffb, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000cc0), r1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000012c0), r1) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x701, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2m20.271626372s ago: executing program 8 (id=9119): socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 2m20.195762754s ago: executing program 42 (id=9119): socket$inet6_sctp(0xa, 0x1, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x4, @perf_bp={0x0, 0x8}, 0x4, 0x0, 0xfff, 0x0, 0x2, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x18000000000002a0, 0x5ee, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1m49.797503913s ago: executing program 2 (id=9622): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m49.760810744s ago: executing program 2 (id=9624): perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 1m49.154543457s ago: executing program 2 (id=9638): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r3, &(0x7f0000001900)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002540)="955232d6c924037daed352087a08237337131faef13945bfaaa58d01e5f858e96271cde18577054eb145e62abd8150646072c75137606c9eca87c894182ee54fa975990ac5f7b8f2ced1bc37588f08efcfba84054e1bf5de3ae4fe95d64222f92b12be73478c249144accca8d10df2f204b2905167cb97972c40265e6b4af404adc8f6cf85253346cfeb6eb585e3f0692ab9d35d7850e3d62a947f009b", 0x9d}, {&(0x7f00000001c0)="96607e121729ff5ba084660914fc7202e7b54c2be7983a4e4e11a8906105f36f652d7135bda20b939abb9b959973ca1f755aa9e545c8fb8876d07fa49e24824ff9719993882242846b", 0x49}, {&(0x7f0000000500)="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", 0xffffff1d}, {&(0x7f00000007c0)="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", 0xde6}], 0x4}}, {{0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000480)="d353", 0x2}], 0x1}}], 0x2, 0x4044805) splice(r2, 0x0, r1, 0x0, 0x10000008ebc, 0x0) splice(r0, 0x0, r3, 0x0, 0x8000000000025a5, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m48.959330301s ago: executing program 2 (id=9640): syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000040)='./file0\x00', 0x100c404, &(0x7f0000000080)={[{@fat=@umask={'umask', 0x3d, 0x7}}, {@fat=@usefree}, {@fat=@uid}, {@fat=@uid={'uid', 0x3d, 0xee00}}, {@dots}, {@fat=@check_strict}, {@fat=@nfs}, {@nodots}, {@dots}, {@dots}, {@nodots}, {@nodots}, {@nodots}, {@fat=@debug}, {@fat=@tz_utc}, {@nodots}, {@fat=@flush}, {@dots}, {@fat=@flush}, {@dots}, {@dots}, {@dots}, {@fat=@showexec}, {@dots}, {@nodots}, {}]}, 0x1, 0x1f5, &(0x7f0000000600)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x8000000, &(0x7f0000000200), 0x0, 0x0, &(0x7f0000000340), 0x0) ftruncate(r0, 0x4a8e) 1m48.832628204s ago: executing program 2 (id=9642): openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$cgroup_devices(r0, &(0x7f0000000000)=ANY=[], 0x9) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getdents64(r1, &(0x7f0000000280)=""/153, 0x99) 1m47.457622294s ago: executing program 2 (id=9662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b2c00128014000180090001006c6173740000000004003da3664001800c000100636f756e7465720004000280080003400000013014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 1m47.424559814s ago: executing program 43 (id=9662): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a70000000090a010400000000000000000a0000040900020073797a310000000008000a40fffffffc0900010073797a3100000000080005400000000b2c00128014000180090001006c6173740000000004003da3664001800c000100636f756e7465720004000280080003400000013014000000110001"], 0x98}, 0x1, 0x0, 0x0, 0x4044050}, 0x40) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 6.464243933s ago: executing program 9 (id=11053): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'bridge0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x4000040) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x204, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x2, 0x2}, 0x3830, 0x7f, 0xbd6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x2, 0x1943}, 0x3a, 0x8, 0x1000, 0x1, 0x7fff, 0x7fffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x2040, 0x100) fcntl$setlease(r0, 0x400, 0x0) 6.081936901s ago: executing program 6 (id=11060): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1007f}, 0x94) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0xfdef, 0xfecc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x57) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.081550331s ago: executing program 9 (id=11061): pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x3f9) ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0x9360, 0x0) 6.006120822s ago: executing program 9 (id=11062): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x830, 0x2, 0xfffffffe, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x19, 0xfd3649826d894c67, 0x70bd28, 0x0, {{@in6=@empty, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x800000, 0x0, 0xfffffffffffffffc}, {0x0, 0xacb0, 0x400000000, 0xffffffffffffffff}, 0xfffd}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x4c050) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 5.368560276s ago: executing program 6 (id=11068): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, 0x0, 0x0) getsockname$tipc(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="2c0000003900070101000000fbdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x24000005}, 0x2400c004) 5.311276727s ago: executing program 9 (id=11071): bpf$MAP_CREATE(0x0, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0xfffc, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$iso9660(&(0x7f0000000100), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[], 0xff, 0x692, &(0x7f00000011c0)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x15}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) syz_clone3(&(0x7f0000000040)={0x21000080, 0x0, 0x0, 0x0, {0x16}, 0x0, 0x0, 0x0, 0x0}, 0x58) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', 0x0}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x88080, 0x0) 4.864013597s ago: executing program 7 (id=11080): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000003940)=ANY=[@ANYBLOB="210000000000000000000000000010000004"], 0x48) listen(0xffffffffffffffff, 0x5) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3000001, 0x11, r0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000850}, 0x40) process_vm_readv(0x0, &(0x7f0000008400)=[{0x0}], 0x1, 0x0, 0x0, 0x0) 4.099599393s ago: executing program 9 (id=11085): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000040)='GPL\x00'}, 0x94) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@random="4be88fa3027b", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x8, 0x3a, 0xff, @local, @loopback, {[], @echo_request={0x80, 0x0, 0x0, 0x71, 0x7}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.995442425s ago: executing program 6 (id=11088): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000180)="a1", 0x1}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$char_usb(r0, &(0x7f00000001c0)="64e9", 0x2) write$selinux_create(r0, &(0x7f0000000440)=@access={'system_u:object_r:mail_spool_t:s0', 0x20, '/usr/sbin/cups-browsed', 0x20, 0x1ff}, 0x4e) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)=[0x2], 0x0, 0x0, 0x1}}, 0x40) 3.836808778s ago: executing program 6 (id=11095): r0 = syz_clone(0x2b00b100, 0x0, 0x0, &(0x7f0000000140), 0x0, 0x0) ptrace(0x4206, r0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x1c79, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x8, 0x23}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) wait4(r0, 0x0, 0x2, 0x0) 3.461149557s ago: executing program 9 (id=11097): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x2, 0x3, 0x8, 0x7}, 0x10, 0x23c6a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000610a680000000000060000000000000095001b0000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000013000/0x2000)=nil, &(0x7f0000016000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000016000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x40007718, 0x1f480, 0x4, 0x397}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003800)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x3}}, 0x1c, 0x0}}], 0x1, 0x5c) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 3.461006077s ago: executing program 44 (id=11097): openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200), 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x2, 0x3, 0x8, 0x7}, 0x10, 0x23c6a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7ff}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b400000000000000610a680000000000060000000000000095001b0000000000"], &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000013000/0x2000)=nil, &(0x7f0000016000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000016000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x40007718, 0x1f480, 0x4, 0x397}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003800)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x2, @private1={0xfc, 0x1, '\x00', 0x3}}, 0x1c, 0x0}}], 0x1, 0x5c) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 3.32299016s ago: executing program 6 (id=11099): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=@newtfilter={0xfc, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xf, 0xf}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0xfef6, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x5}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x4}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x9, 0x4}}, @TCA_MATCHALL_ACT={0xa4, 0x2, [@m_skbedit={0xa0, 0xe, 0x0, 0x0, {{0xc}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18, 0x2, {0x80000000, 0x6, 0xffffffffffffffff, 0x3, 0x8}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x5, 0xfff3}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x7, 0xfff3}}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8, 0xfff1}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x7ff}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x50e}]}, {0x34, 0x6, "4451f677e1feba51f0ca936c35676af75510a35c3d1e76db91483b29378a9cfebc4ed602044c88674ebdcbd0ed1f7310"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.935818268s ago: executing program 7 (id=11103): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c060000a13f010828bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000004200400140014007465616d5f736c6176655f300000000008"], 0x3c}}, 0x80) openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x60880, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r2 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000480)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r2, 0x58, &(0x7f00000002c0)}, 0x10) 2.775453241s ago: executing program 7 (id=11105): r0 = io_uring_setup(0x667, &(0x7f0000000000)={0x0, 0xa14a, 0x1000, 0xfffffffe, 0x39b}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) close_range(r0, 0xffffffffffffffff, 0x0) 2.744267592s ago: executing program 6 (id=11107): unshare(0x6a040000) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe0200108500000007"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x76, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f80)={0x34, r1, 0x701, 0x70bd2b, 0x25dfdbfc, {0x34}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000004}, 0x0) 2.685347063s ago: executing program 7 (id=11109): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r1 = socket(0x10, 0x2, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) recvmmsg(r1, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 2.598873295s ago: executing program 7 (id=11110): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x30bd, 0xc000, 0x8, 0x40000183}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendto$unix(r0, &(0x7f00000002c0)='\v:', 0xfffffcd3, 0x40000095, 0x0, 0xfffffe86) 2.577197606s ago: executing program 7 (id=11111): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x11c0, 0x4080000) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', &(0x7f0000000000)={0x80, 0x0, 0x4}, 0x18) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file4\x00', 0x0, 0x0) 1.740634954s ago: executing program 4 (id=11113): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) unshare(0xa000200) semtimedop(0x0, &(0x7f0000000040)=[{0x0, 0x5, 0x1800}], 0x1, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='fdinfo/3\x00') read$eventfd(r1, &(0x7f0000000200), 0x8) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x8000000) 1.673169565s ago: executing program 4 (id=11115): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) sendmsg$unix(r1, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f00000009c0)=[@rights={{0x10}}], 0x10, 0x4000}, 0x80) 1.054578508s ago: executing program 5 (id=11118): sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, 0x0, 0x4040084) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2c000010) socket$nl_xfrm(0x10, 0x3, 0x6) syz_pidfd_open(0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) sendmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x99410d0da4a1a8c7) 937.11594ms ago: executing program 5 (id=11119): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x21, 0x2, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffff00}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x4004045) r0 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0x24d34f, 0x1f480, 0x1, 0x94}) syz_emit_ethernet(0x22, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaa"], 0x0) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 887.043171ms ago: executing program 5 (id=11120): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) perf_event_open(0x0, 0x0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000b80)={{0xeb9f, 0x1, 0x0, 0xfc5f, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0xfc5f}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x28, 0x107, 0x70bd2c, 0x0, {0x3, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0x8004) 822.560113ms ago: executing program 5 (id=11121): sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x40000) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000050000000000000000000000000a20000000000a01000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010010000900010073797a30000000000900030073797a3000000000140004800800024000000000080001400000000571000000060a010400000008000000000100080008000b4000000000400004803c0001800a0001006d617463680000002c0002800800010065636e000c000300e4edf2b75cc7c0a308000240000000000c000100706b7474797065000900010073797a30"], 0xf0}, 0x1, 0x0, 0x0, 0x90}, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) 753.455094ms ago: executing program 5 (id=11122): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48) socket(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) unshare(0x2a000600) ioctl$VT_ACTIVATE(0xffffffffffffffff, 0x4b4a, 0x100000000080005) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x2, &(0x7f0000000200)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0xa, 0x4000, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 459.228321ms ago: executing program 4 (id=11123): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$inet6(r0, &(0x7f0000000280)="02043c00ec074802010e0200c52cf7c20675e005b02f0800eb2b2ff0dac8897c6b112002faffffff3066090cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x800, 0x0, 0x2f) 458.78105ms ago: executing program 5 (id=11124): r0 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) getdents(0xffffffffffffffff, 0x0, 0x54) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x40000000000, 0xffeffffffffffffe}, {0x0, 0x2000000000000}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x32}, 0x0, @in=@broadcast, 0x10000, 0x0, 0x2, 0xb7, 0xc4, 0xfffffffe}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 419.305581ms ago: executing program 4 (id=11125): perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x1, 0x100) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) pipe2$9p(&(0x7f0000000200), 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[], 0x448}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) 161.328817ms ago: executing program 4 (id=11126): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000000)={0x1}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r3, 0x26, &(0x7f0000000000)={0x1, 0x0, 0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=11127): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) r1 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) io_submit(r2, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) io_getevents(r2, 0x2, 0x2, &(0x7f0000000c80)=[{}, {}], 0x0) shutdown(r0, 0x0) kernel console output (not intermixed with test programs): 83069][T31391] bridge_slave_0: entered allmulticast mode [ 509.790011][T31391] bridge_slave_0: entered promiscuous mode [ 509.798145][T31391] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.815166][T31391] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.822498][T31391] bridge_slave_1: entered allmulticast mode [ 509.829253][T31391] bridge_slave_1: entered promiscuous mode [ 509.844819][T31431] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9676'. [ 509.851847][T31391] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.864291][T31391] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.886634][T31391] team0: Port device team_slave_0 added [ 509.893655][T31391] team0: Port device team_slave_1 added [ 509.910705][T31391] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.918092][T31391] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.955352][T26814] Bluetooth: hci0: Frame reassembly failed (-84) [ 509.963358][T31391] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.975177][T31391] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.982569][T31391] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 510.009354][T31391] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 510.040680][T31391] hsr_slave_0: entered promiscuous mode [ 510.046909][T31391] hsr_slave_1: entered promiscuous mode [ 510.053034][T31391] debugfs: 'hsr0' already exists in 'hsr' [ 510.058983][T31391] Cannot create hsr debugfs directory [ 510.137087][T31442] xt_hashlimit: size too large, truncated to 1048576 [ 510.256310][ T28] audit: type=1400 audit(1782653007.740:3424): avc: denied { write } for pid=31443 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.309350][ T28] audit: type=1400 audit(1782653007.740:3425): avc: denied { write } for pid=31456 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.404157][T31469] netlink: 'syz.7.9684': attribute type 1 has an invalid length. [ 510.418167][T31469] bond1: entered promiscuous mode [ 510.424005][T31469] 8021q: adding VLAN 0 to HW filter on device bond1 [ 510.434686][T31469] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9684'. [ 510.445089][T31469] netlink: 12 bytes leftover after parsing attributes in process `syz.7.9684'. [ 510.463837][ T28] audit: type=1400 audit(1782653007.950:3426): avc: denied { write } for pid=31460 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.509701][ T28] audit: type=1400 audit(1782653007.950:3427): avc: denied { write } for pid=31478 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.544200][T31480] bond1: (slave bridge1): making interface the new active one [ 510.562334][T31480] bridge1: entered promiscuous mode [ 510.575902][T31480] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 510.628847][ T28] audit: type=1400 audit(1782653008.110:3428): avc: denied { read write } for pid=31493 comm="syz.7.9686" name="loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 510.663673][T31391] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 510.682436][ T28] audit: type=1400 audit(1782653008.110:3429): avc: denied { open } for pid=31493 comm="syz.7.9686" path="/dev/loop-control" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 510.709782][T31391] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 510.742285][ T28] audit: type=1400 audit(1782653008.160:3430): avc: denied { write } for pid=31481 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.772864][T31391] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 510.786321][ T28] audit: type=1400 audit(1782653008.220:3431): avc: denied { write } for pid=31497 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 510.811140][T31391] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 510.819751][T31391] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 510.835619][T31391] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 510.859680][T31504] bond1: left promiscuous mode [ 510.864736][T31504] bridge1: left promiscuous mode [ 510.892156][T31391] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 510.902267][T31391] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 510.972261][T31391] 8021q: adding VLAN 0 to HW filter on device bond0 [ 510.986953][T31391] 8021q: adding VLAN 0 to HW filter on device team0 [ 510.996578][ T5067] bridge0: port 1(bridge_slave_0) entered blocking state [ 511.003786][ T5067] bridge0: port 1(bridge_slave_0) entered forwarding state [ 511.018996][T26827] bridge0: port 2(bridge_slave_1) entered blocking state [ 511.026168][T26827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 511.048460][T31391] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 511.059874][T31391] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 511.213759][T31391] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 511.502796][T31391] veth0_vlan: entered promiscuous mode [ 511.519584][T31391] veth1_vlan: entered promiscuous mode [ 511.541567][T31391] veth0_macvtap: entered promiscuous mode [ 511.549261][T31391] veth1_macvtap: entered promiscuous mode [ 511.561931][T31391] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 511.574509][T31391] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 511.586906][T16154] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.597259][T16154] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.607561][T16154] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.620843][T16154] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 511.744267][T31627] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9696'. [ 511.759236][T31627] macvtap0: entered promiscuous mode [ 511.765622][T31627] erspan0: entered promiscuous mode [ 511.771734][T31627] macvtap0: entered allmulticast mode [ 511.777460][T31627] erspan0: entered allmulticast mode [ 511.787810][T31627] netlink: 4 bytes leftover after parsing attributes in process `syz.6.9696'. [ 511.807913][T31627] erspan0: left allmulticast mode [ 511.822203][T31627] erspan0: left promiscuous mode [ 511.828763][T31627] macvtap0: left promiscuous mode [ 511.837150][T31627] macvtap0: left allmulticast mode [ 511.992272][ T3648] Bluetooth: hci0: command 0x1003 tx timeout [ 512.001998][T25077] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 512.212351][T26840] nci: nci_ntf_packet: unknown ntf opcode 0x227 [ 512.781021][T31744] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.789640][T31744] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.878404][T31667] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 512.977024][T31756] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9722'. [ 514.639808][T31802] x_tables: ip6_tables: sctp match: only valid for protocol 132 [ 514.937315][ T28] kauditd_printk_skb: 21 callbacks suppressed [ 514.937370][ T28] audit: type=1400 audit(1782653012.420:3453): avc: denied { read } for pid=31810 comm="syz.9.9748" path="socket:[88703]" dev="sockfs" ino=88703 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 515.084997][T31820] loop9: detected capacity change from 0 to 512 [ 515.171037][T31820] EXT4-fs: Invalid want_extra_isize 1969 [ 515.645239][ T28] audit: type=1326 audit(1782653013.130:3454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31858 comm="syz.9.9766" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3fb003ce59 code=0x0 [ 515.741036][T31867] IPVS: set_ctl: invalid protocol: 137 255.255.255.255:20000 [ 515.890984][T31874] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9771'. [ 515.900309][T31874] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9771'. [ 515.929047][T26814] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.929072][T31874] netlink: 8 bytes leftover after parsing attributes in process `syz.7.9771'. [ 515.929101][T31874] netlink: 20 bytes leftover after parsing attributes in process `syz.7.9771'. [ 515.957549][T26814] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.966535][T26814] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.975734][T26814] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 516.157655][T31891] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 517.140445][ T28] audit: type=1326 audit(1782653014.610:3455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31941 comm="syz.9.9794" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb003ce59 code=0x7ffc0000 [ 517.213077][ T28] audit: type=1326 audit(1782653014.610:3456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31941 comm="syz.9.9794" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb003ce59 code=0x7ffc0000 [ 517.239449][ T28] audit: type=1326 audit(1782653014.610:3457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31941 comm="syz.9.9794" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb003ce59 code=0x7ffc0000 [ 517.266000][ T28] audit: type=1326 audit(1782653014.610:3458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31941 comm="syz.9.9794" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb003ce59 code=0x7ffc0000 [ 517.294139][ T28] audit: type=1326 audit(1782653014.610:3459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31941 comm="syz.9.9794" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb003ce59 code=0x7ffc0000 [ 517.321430][ T28] audit: type=1326 audit(1782653014.610:3460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31941 comm="syz.9.9794" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb003ce59 code=0x7ffc0000 [ 517.348659][ T28] audit: type=1326 audit(1782653014.610:3461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31941 comm="syz.9.9794" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb003ce59 code=0x7ffc0000 [ 517.375688][ T28] audit: type=1326 audit(1782653014.610:3462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=31941 comm="syz.9.9794" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb003ce59 code=0x7ffc0000 [ 518.055205][T32006] syzkaller1: entered promiscuous mode [ 518.072019][T32006] syzkaller1: entered allmulticast mode [ 518.115097][T32012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.191592][T32012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.315375][T32027] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9825'. [ 518.813674][T32048] loop9: detected capacity change from 0 to 1024 [ 518.813834][T32046] netlink: 24 bytes leftover after parsing attributes in process `syz.4.9834'. [ 518.821334][T32048] EXT4-fs: Ignoring removed nobh option [ 518.836011][T32048] EXT4-fs: Ignoring removed i_version option [ 518.857285][T32048] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.962605][T32058] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9838'. [ 518.964079][T32048] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 518.990056][T32048] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 519.003025][T32048] EXT4-fs (loop9): This should not happen!! Data will be lost [ 519.003025][T32048] [ 519.014651][T32048] EXT4-fs (loop9): Total free blocks count 0 [ 519.021952][T32048] EXT4-fs (loop9): Free/Dirty block details [ 519.029067][T32048] EXT4-fs (loop9): free_blocks=20480 [ 519.038290][T32048] EXT4-fs (loop9): dirty_blocks=2992 [ 519.044648][T32048] EXT4-fs (loop9): Block reservation details [ 519.051073][T32048] EXT4-fs (loop9): i_reserved_data_blocks=187 [ 519.149117][ T5050] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 4 with error 28 [ 519.167497][T18312] EXT4-fs warning (device loop9): ext4_evict_inode:195: inode #18: comm syz-executor: data will be lost [ 519.335271][T32086] loop9: detected capacity change from 0 to 512 [ 519.377856][T32086] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.403273][T32086] ext4 filesystem being mounted at /773/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 519.457609][T18312] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.308562][T32127] loop4: detected capacity change from 0 to 512 [ 520.355610][T32127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.368463][T32127] ext4 filesystem being mounted at /25/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 520.388243][ T28] kauditd_printk_skb: 33 callbacks suppressed [ 520.388261][ T28] audit: type=1400 audit(1782653017.870:3496): avc: denied { write } for pid=32126 comm="syz.4.9864" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 520.484116][T31391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.536492][ T28] audit: type=1400 audit(1782653017.920:3497): avc: denied { write } for pid=32126 comm="syz.4.9864" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 520.567597][ T28] audit: type=1400 audit(1782653017.920:3498): avc: denied { add_name } for pid=32126 comm="syz.4.9864" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 520.588717][ T28] audit: type=1400 audit(1782653017.920:3499): avc: denied { write } for pid=32126 comm="syz.4.9864" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 520.630659][ T28] audit: type=1400 audit(1782653017.920:3500): avc: denied { write } for pid=32126 comm="syz.4.9864" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 520.674781][ T28] audit: type=1400 audit(1782653017.920:3501): avc: denied { write } for pid=32126 comm="syz.4.9864" name="file0" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 520.722951][ T28] audit: type=1400 audit(1782653017.920:3502): avc: denied { write } for pid=32126 comm="syz.4.9864" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 520.774561][ T28] audit: type=1400 audit(1782653017.920:3503): avc: denied { reparent } for pid=32126 comm="syz.4.9864" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 520.847680][ T28] audit: type=1400 audit(1782653017.920:3504): avc: denied { remove_name } for pid=32126 comm="syz.4.9864" name="file0" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 520.873715][ T28] audit: type=1400 audit(1782653017.920:3505): avc: denied { rmdir } for pid=32126 comm="syz.4.9864" name="file0" dev="loop4" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 520.943081][T32134] loop4: detected capacity change from 0 to 512 [ 521.236777][T32134] EXT4-fs (loop4): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 521.827961][T32134] EXT4-fs error (device loop4): ext4_quota_enable:7228: comm syz.4.9866: Bad quota inum: 2, type: 1 [ 521.946722][T32134] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 522.462433][T31391] EXT4-fs (loop4): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 523.211651][T32250] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9911'. [ 523.241535][T32250] netlink: 4 bytes leftover after parsing attributes in process `syz.5.9911'. [ 526.612090][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 526.612107][ T28] audit: type=1400 audit(1782653024.100:3511): avc: denied { create } for pid=32398 comm="syz.4.9970" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 527.301088][ T28] audit: type=1400 audit(1782653024.790:3512): avc: denied { setopt } for pid=32419 comm="syz.9.9979" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 527.358409][T32423] vcan0 speed is unknown, defaulting to 1000 [ 528.336904][T32485] syzkaller0: entered promiscuous mode [ 528.345680][T32485] syzkaller0: entered allmulticast mode [ 528.595797][T32507] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10015'. [ 528.719498][T32510] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10016'. [ 528.849993][ T28] audit: type=1400 audit(1782653026.330:3513): avc: denied { name_bind 0x1000000 } for pid=32520 comm="syz.7.10021" path="socket:[94403]" dev="sockfs" ino=94403 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 528.877284][T32523] sch_fq: defrate 1025 ignored. [ 529.154664][T32549] 9p: Bad value for 'rfdno' [ 529.160908][ T28] audit: type=1400 audit(1782653026.630:3514): avc: denied { getopt } for pid=32547 comm="syz.7.10032" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 529.241636][T32553] loop4: detected capacity change from 0 to 1024 [ 529.276979][T32553] EXT4-fs: inline encryption not supported [ 529.337882][T32553] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 529.362037][T32553] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e814c01c, mo2=0003] [ 529.370437][T32553] System zones: 0-1, 3-36 [ 529.383929][T32553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 529.544940][ T28] audit: type=1326 audit(1782653027.030:3515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=32554 comm="syz.7.10035" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8ec9d3ce59 code=0x0 [ 529.651811][ T28] audit: type=1400 audit(1782653027.110:3516): avc: denied { write } for pid=32552 comm="syz.4.10033" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 529.736221][T31391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.931916][ T28] audit: type=1400 audit(1782653027.420:3517): avc: denied { watch watch_reads } for pid=32577 comm="syz.5.10043" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 529.976514][T32582] loop4: detected capacity change from 0 to 1024 [ 530.005980][T32582] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 530.029116][ T28] audit: type=1400 audit(1782653027.510:3518): avc: denied { write } for pid=32581 comm="syz.4.10045" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 530.029626][T32582] EXT4-fs (loop4): shut down requested (0) [ 530.254786][T31391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 530.837422][T32626] tipc: Failed to remove unknown binding: 66,1,1/0:168220948/168220950 [ 530.893168][T32630] loop9: detected capacity change from 0 to 128 [ 530.911849][T32630] syz.9.10063: attempt to access beyond end of device [ 530.911849][T32630] loop9: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 530.925868][T32630] syz.9.10063: attempt to access beyond end of device [ 530.925868][T32630] loop9: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 530.940609][T32630] Buffer I/O error on dev loop9, logical block 79, lost async page write [ 530.949115][T32630] syz.9.10063: attempt to access beyond end of device [ 530.949115][T32630] loop9: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 530.979951][T32630] Buffer I/O error on dev loop9, logical block 80, lost async page write [ 530.994619][T32630] syz.9.10063: attempt to access beyond end of device [ 530.994619][T32630] loop9: rw=2049, sector=154, nr_sectors = 2 limit=128 [ 531.013721][ T28] audit: type=1400 audit(1782653028.500:3519): avc: denied { ioctl } for pid=32634 comm="syz.7.10065" path="socket:[93659]" dev="sockfs" ino=93659 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 531.278770][T26840] nci: nci_data_exchange_complete: no rx callback, dropping rx data... [ 531.662780][T32680] netlink: 24 bytes leftover after parsing attributes in process `syz.6.10083'. [ 531.684227][T32680] netlink: 4 bytes leftover after parsing attributes in process `syz.6.10083'. [ 531.828650][T32685] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10085'. [ 531.838604][T32685] netlink: 12 bytes leftover after parsing attributes in process `syz.6.10085'. [ 531.986321][ T28] audit: type=1400 audit(1782653029.470:3520): avc: denied { bind } for pid=32695 comm="syz.7.10089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 532.033766][T32650] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 532.106142][ T28] audit: type=1400 audit(1782653029.590:3521): avc: denied { read } for pid=32707 comm="syz.5.10094" path="socket:[95442]" dev="sockfs" ino=95442 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 532.676904][T32735] loop4: detected capacity change from 0 to 512 [ 532.713328][T32735] EXT4-fs: Ignoring removed nobh option [ 532.722084][T32735] EXT4-fs: Ignoring removed oldalloc option [ 532.728739][T32735] ext4: Unknown parameter 'noacl' [ 533.495775][T32754] netlink: 64 bytes leftover after parsing attributes in process `syz.9.10122'. [ 533.568190][ T28] audit: type=1400 audit(1782653031.050:3522): avc: denied { read write } for pid=32756 comm="syz.7.10113" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 533.608043][ T28] audit: type=1400 audit(1782653031.050:3523): avc: denied { open } for pid=32756 comm="syz.7.10113" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 534.920405][ T351] loop4: detected capacity change from 0 to 8192 [ 535.011218][ T351] loop4: p1 < > p2 < > p3 p4 < > [ 535.016372][ T351] loop4: partition table partially beyond EOD, truncated [ 535.017709][ T5067] nci: nci_add_new_protocol: the target found does not have the desired protocol [ 535.024699][ T351] loop4: p1 start 67108864 is beyond EOD, truncated [ 535.040898][ T351] loop4: p3 start 100859904 is beyond EOD, truncated [ 535.085597][ T373] tipc: Failed to remove unknown binding: 66,1,1/0:1060676553/1060676555 [ 535.202510][T18331] udevd[18331]: inotify_add_watch(7, /dev/loop4p2, 10) failed: No such file or directory [ 535.231725][T18497] udevd[18497]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 535.562110][ T383] loop4: detected capacity change from 0 to 512 [ 535.719275][ T383] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 535.744633][ T355] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 535.763381][ T383] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 535.966559][ T383] EXT4-fs (loop4): warning: mounting unchecked fs, running e2fsck is recommended [ 535.999670][ T383] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006] [ 536.112203][ T383] System zones: 0-2, 18-18, 34-35 [ 536.184682][ T383] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.385569][ T413] loop9: detected capacity change from 0 to 128 [ 536.409653][T31391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.489448][ T412] syz.9.10157: attempt to access beyond end of device [ 536.489448][ T412] loop9: rw=2049, sector=138, nr_sectors = 2 limit=128 [ 536.738778][ T429] loop4: detected capacity change from 0 to 512 [ 536.789297][ T429] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.824957][ T429] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.857791][ T28] audit: type=1400 audit(1782653034.340:3524): avc: denied { write } for pid=428 comm="syz.4.10166" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 536.922713][ T439] netlink: 'syz.9.10170': attribute type 2 has an invalid length. [ 536.955156][ T28] audit: type=1400 audit(1782653034.440:3525): avc: denied { setattr } for pid=428 comm="syz.4.10166" path="/85/file1/file1" dev="loop4" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 537.036058][T31391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.385537][ T455] loop4: detected capacity change from 0 to 1024 [ 537.436442][ T455] EXT4-fs: Mount option(s) incompatible with ext3 [ 537.679984][ T469] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10182'. [ 537.827006][ T455] loop4: detected capacity change from 0 to 512 [ 537.891897][ T455] EXT4-fs: test_dummy_encryption option not supported [ 538.146775][ T28] audit: type=1326 audit(1782653035.630:3526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.7.10186" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec9d3ce59 code=0x7ffc0000 [ 538.187373][ T483] netlink: 'syz.4.10187': attribute type 39 has an invalid length. [ 538.231549][ T28] audit: type=1326 audit(1782653035.630:3527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.7.10186" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec9d3ce59 code=0x7ffc0000 [ 538.283550][ T28] audit: type=1326 audit(1782653035.630:3528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.7.10186" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec9d3ce59 code=0x7ffc0000 [ 538.319767][ T28] audit: type=1326 audit(1782653035.630:3529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.7.10186" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8ec9d3ce59 code=0x7ffc0000 [ 538.402304][ T28] audit: type=1326 audit(1782653035.660:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.7.10186" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f8ec9d3ce59 code=0x7ffc0000 [ 538.453720][ T28] audit: type=1326 audit(1782653035.680:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.7.10186" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8ec9cfd68e code=0x7ffc0000 [ 538.499212][ T28] audit: type=1326 audit(1782653035.680:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.7.10186" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8ec9cfd68e code=0x7ffc0000 [ 538.547967][ T28] audit: type=1326 audit(1782653035.690:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.7.10186" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8ec9cfd68e code=0x7ffc0000 [ 538.581079][ T28] audit: type=1326 audit(1782653035.690:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.7.10186" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8ec9cfd68e code=0x7ffc0000 [ 538.609579][ T28] audit: type=1326 audit(1782653035.690:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=481 comm="syz.7.10186" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f8ec9cfd68e code=0x7ffc0000 [ 539.618091][ T530] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10202'. [ 540.872833][ T557] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10224'. [ 541.127112][ T553] loop9: detected capacity change from 0 to 512 [ 541.222840][ T553] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 541.266109][ T553] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 541.403064][ T553] System zones: 0-1, 15-15, 18-18, 34-34 [ 541.457939][ T553] EXT4-fs (loop9): orphan cleanup on readonly fs [ 541.479599][ T553] EXT4-fs warning (device loop9): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 541.506592][ T553] EXT4-fs (loop9): Cannot turn on quotas: error -22 [ 541.538269][ T553] EXT4-fs error (device loop9): ext4_orphan_get:1425: comm syz.9.10222: bad orphan inode 16 [ 541.558600][ T553] loop9: lost filesystem error report for type 5 error -117 [ 541.566776][ T553] ext4_test_bit(bit=15, block=18) = 1 [ 541.577966][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 541.578226][ C1] EXT4-fs (loop9): initial error at time 1782653039: ext4_orphan_get:1425 [ 541.578279][ C1] EXT4-fs (loop9): last error at time 1782653039: ext4_orphan_get:1425 [ 541.632188][ T553] is_bad_inode(inode)=0 [ 541.643950][ T553] NEXT_ORPHAN(inode)=0 [ 541.654810][ T553] max_ino=32 [ 541.663362][ T553] i_nlink=2 [ 541.700758][ T553] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 541.883201][T18312] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 542.085328][ T572] netlink: 'syz.5.10218': attribute type 39 has an invalid length. [ 542.886837][ T595] sctp: [Deprecated]: syz.5.10230 (pid 595) Use of int in max_burst socket option deprecated. [ 542.886837][ T595] Use struct sctp_assoc_value instead [ 543.225600][ T603] loop4: detected capacity change from 0 to 512 [ 543.249262][ T603] EXT4-fs: Ignoring removed oldalloc option [ 543.287241][ T603] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8840c01c, mo2=0002] [ 543.296355][ T603] EXT4-fs (loop4): orphan cleanup on readonly fs [ 543.303706][ T603] EXT4-fs warning (device loop4): ext4_enable_quotas:7276: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 543.319027][ T603] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 543.326060][ T603] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.10233: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 543.345157][ T603] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 543.345459][ T603] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.10233: couldn't read orphan inode 13 (err -117) [ 543.355253][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 543.355277][ C0] EXT4-fs (loop4): last error at time 1782653040: ext4_ext_check_inode:521: inode 13 [ 543.383550][ T603] loop4: lost filesystem error report for type 5 error -117 [ 543.384964][ T603] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 543.405739][ T603] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 543.473057][ T611] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10235'. [ 543.563490][ T613] loop9: detected capacity change from 0 to 1024 [ 543.611170][ T613] EXT4-fs: Mount option(s) incompatible with ext3 [ 543.707238][ T613] loop9: detected capacity change from 0 to 512 [ 543.725862][ T613] EXT4-fs: test_dummy_encryption option not supported [ 544.172668][ T638] loop9: detected capacity change from 0 to 256 [ 544.216336][ T638] FAT-fs (loop9): Directory bread(block 64) failed [ 544.225212][ T638] FAT-fs (loop9): Directory bread(block 65) failed [ 544.234521][ T638] FAT-fs (loop9): Directory bread(block 66) failed [ 544.241522][ T638] FAT-fs (loop9): Directory bread(block 67) failed [ 544.249159][ T638] FAT-fs (loop9): Directory bread(block 68) failed [ 544.256248][ T638] FAT-fs (loop9): Directory bread(block 69) failed [ 544.289532][ T638] FAT-fs (loop9): Directory bread(block 70) failed [ 544.302210][ T638] FAT-fs (loop9): Directory bread(block 71) failed [ 544.310268][ T638] FAT-fs (loop9): Directory bread(block 72) failed [ 544.317531][ T638] FAT-fs (loop9): Directory bread(block 73) failed [ 544.656133][ T655] sctp: [Deprecated]: syz.4.10252 (pid 655) Use of int in max_burst socket option deprecated. [ 544.656133][ T655] Use struct sctp_assoc_value instead [ 544.750579][ T662] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10255'. [ 545.045044][ T5050] Bluetooth: hci0: Frame reassembly failed (-84) [ 545.119368][T16154] kworker/u8:18: attempt to access beyond end of device [ 545.119368][T16154] loop9: rw=1, sector=1768, nr_sectors = 32 limit=256 [ 545.134132][T16154] kworker/u8:18: attempt to access beyond end of device [ 545.134132][T16154] loop9: rw=1, sector=1832, nr_sectors = 32 limit=256 [ 545.149915][T16154] kworker/u8:18: attempt to access beyond end of device [ 545.149915][T16154] loop9: rw=1, sector=1896, nr_sectors = 32 limit=256 [ 545.164896][T16154] kworker/u8:18: attempt to access beyond end of device [ 545.164896][T16154] loop9: rw=1, sector=1960, nr_sectors = 32 limit=256 [ 545.178977][T16154] kworker/u8:18: attempt to access beyond end of device [ 545.178977][T16154] loop9: rw=1, sector=2024, nr_sectors = 32 limit=256 [ 545.192945][T16154] kworker/u8:18: attempt to access beyond end of device [ 545.192945][T16154] loop9: rw=1, sector=2088, nr_sectors = 32 limit=256 [ 545.206935][T16154] kworker/u8:18: attempt to access beyond end of device [ 545.206935][T16154] loop9: rw=1, sector=2152, nr_sectors = 32 limit=256 [ 545.221201][T16154] kworker/u8:18: attempt to access beyond end of device [ 545.221201][T16154] loop9: rw=1, sector=2216, nr_sectors = 32 limit=256 [ 545.235351][T16154] kworker/u8:18: attempt to access beyond end of device [ 545.235351][T16154] loop9: rw=1, sector=2280, nr_sectors = 32 limit=256 [ 545.249484][T16154] kworker/u8:18: attempt to access beyond end of device [ 545.249484][T16154] loop9: rw=1, sector=2344, nr_sectors = 32 limit=256 [ 547.110426][ T3648] Bluetooth: hci0: command 0x1003 tx timeout [ 547.110420][T25077] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 547.144910][ T714] loop4: detected capacity change from 0 to 256 [ 547.187076][ T714] FAT-fs (loop4): Directory bread(block 64) failed [ 547.193706][ T714] FAT-fs (loop4): Directory bread(block 65) failed [ 547.203606][ T714] FAT-fs (loop4): Directory bread(block 66) failed [ 547.223931][ T714] FAT-fs (loop4): Directory bread(block 67) failed [ 547.231045][ T714] FAT-fs (loop4): Directory bread(block 68) failed [ 547.238046][ T714] FAT-fs (loop4): Directory bread(block 69) failed [ 547.245051][ T714] FAT-fs (loop4): Directory bread(block 70) failed [ 547.260559][ T714] FAT-fs (loop4): Directory bread(block 71) failed [ 547.267307][ T714] FAT-fs (loop4): Directory bread(block 72) failed [ 547.274469][ T714] FAT-fs (loop4): Directory bread(block 73) failed [ 549.076809][ T844] loop9: detected capacity change from 0 to 1024 [ 549.164153][ T842] loop4: detected capacity change from 0 to 256 [ 549.179344][ T844] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 549.208275][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 549.208291][ T28] audit: type=1400 audit(1782653046.690:3554): avc: denied { write } for pid=843 comm="syz.9.10287" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 549.212534][ T842] FAT-fs (loop4): Directory bread(block 64) failed [ 549.252487][ T28] audit: type=1400 audit(1782653046.730:3555): avc: denied { write } for pid=843 comm="syz.9.10287" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 549.316940][ T842] FAT-fs (loop4): Directory bread(block 65) failed [ 549.323759][ T842] FAT-fs (loop4): Directory bread(block 66) failed [ 549.330810][ T28] audit: type=1400 audit(1782653046.740:3556): avc: denied { write } for pid=843 comm="syz.9.10287" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 549.355320][ T842] FAT-fs (loop4): Directory bread(block 67) failed [ 549.365301][ T842] FAT-fs (loop4): Directory bread(block 68) failed [ 549.371921][ T842] FAT-fs (loop4): Directory bread(block 69) failed [ 549.378821][ T28] audit: type=1400 audit(1782653046.740:3557): avc: denied { create } for pid=843 comm="syz.9.10287" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 549.421332][ T842] FAT-fs (loop4): Directory bread(block 70) failed [ 549.427957][ T842] FAT-fs (loop4): Directory bread(block 71) failed [ 549.434534][ T842] FAT-fs (loop4): Directory bread(block 72) failed [ 549.441164][ T842] FAT-fs (loop4): Directory bread(block 73) failed [ 549.452513][ T28] audit: type=1400 audit(1782653046.760:3558): avc: denied { write } for pid=843 comm="syz.9.10287" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 549.475376][ T28] audit: type=1400 audit(1782653046.760:3559): avc: denied { write } for pid=843 comm="syz.9.10287" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 549.565927][T18312] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.719732][ T830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.727666][ T830] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.864297][ T859] loop9: detected capacity change from 0 to 256 [ 549.913433][ T859] FAT-fs (loop9): Directory bread(block 64) failed [ 549.920061][ T859] FAT-fs (loop9): Directory bread(block 65) failed [ 549.931498][ T859] FAT-fs (loop9): Directory bread(block 66) failed [ 549.945255][ T859] FAT-fs (loop9): Directory bread(block 67) failed [ 549.959198][ T859] FAT-fs (loop9): Directory bread(block 68) failed [ 549.973299][ T859] FAT-fs (loop9): Directory bread(block 69) failed [ 549.980424][ T859] FAT-fs (loop9): Directory bread(block 70) failed [ 549.987541][ T859] FAT-fs (loop9): Directory bread(block 71) failed [ 549.998877][ T859] FAT-fs (loop9): Directory bread(block 72) failed [ 550.018692][ T859] FAT-fs (loop9): Directory bread(block 73) failed [ 550.757746][T26826] bio_check_eod: 685 callbacks suppressed [ 550.757764][T26826] kworker/u8:43: attempt to access beyond end of device [ 550.757764][T26826] loop9: rw=1, sector=1768, nr_sectors = 32 limit=256 [ 550.786543][T26826] kworker/u8:43: attempt to access beyond end of device [ 550.786543][T26826] loop9: rw=1, sector=1832, nr_sectors = 32 limit=256 [ 550.801115][T26826] kworker/u8:43: attempt to access beyond end of device [ 550.801115][T26826] loop9: rw=1, sector=1896, nr_sectors = 32 limit=256 [ 550.816973][T26826] kworker/u8:43: attempt to access beyond end of device [ 550.816973][T26826] loop9: rw=1, sector=1960, nr_sectors = 32 limit=256 [ 550.832047][T26826] kworker/u8:43: attempt to access beyond end of device [ 550.832047][T26826] loop9: rw=1, sector=2024, nr_sectors = 32 limit=256 [ 550.845966][T26826] kworker/u8:43: attempt to access beyond end of device [ 550.845966][T26826] loop9: rw=1, sector=2088, nr_sectors = 32 limit=256 [ 550.860711][T26826] kworker/u8:43: attempt to access beyond end of device [ 550.860711][T26826] loop9: rw=1, sector=2152, nr_sectors = 32 limit=256 [ 550.875183][T26826] kworker/u8:43: attempt to access beyond end of device [ 550.875183][T26826] loop9: rw=1, sector=2216, nr_sectors = 32 limit=256 [ 550.889812][T26826] kworker/u8:43: attempt to access beyond end of device [ 550.889812][T26826] loop9: rw=1, sector=2280, nr_sectors = 32 limit=256 [ 550.912388][T26826] kworker/u8:43: attempt to access beyond end of device [ 550.912388][T26826] loop9: rw=1, sector=2344, nr_sectors = 32 limit=256 [ 550.935346][ T830] veth1_vlan: left promiscuous mode [ 550.942052][ T830] veth0_vlan: left promiscuous mode [ 550.949121][ T830] veth0_vlan: entered promiscuous mode [ 550.956335][ T830] veth1_vlan: entered promiscuous mode [ 550.996095][ T830] 8021q: adding VLAN 0 to HW filter on device eth0 [ 551.005302][ T830] 8021q: adding VLAN 0 to HW filter on device eth1 [ 551.013703][ T830] 8021q: adding VLAN 0 to HW filter on device eth2 [ 551.021845][ T830] 8021q: adding VLAN 0 to HW filter on device eth3 [ 551.066032][ T830] 8021q: adding VLAN 0 to HW filter on device team1 [ 551.074895][ T830] 8021q: adding VLAN 0 to HW filter on device bond1 [ 551.120229][ T830] 8021q: adding VLAN 0 to HW filter on device bond2 [ 551.133507][ T830] 8021q: adding VLAN 0 to HW filter on device bond3 [ 551.165120][ T830] 8021q: adding VLAN 0 to HW filter on device bond4 [ 551.181725][ T830] 8021q: adding VLAN 0 to HW filter on device bond5 [ 551.195297][ T830] 8021q: adding VLAN 0 to HW filter on device bond6 [ 551.219316][ T830] erspan0: entered promiscuous mode [ 551.278965][T26813] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.288489][T26813] netdevsim netdevsim6 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 551.303670][T26813] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.313076][T26813] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.329517][T26813] netdevsim netdevsim6 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 551.347295][T26813] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.369094][ T3420] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 551.377910][ T3420] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 551.390425][ T3374] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 551.401152][T26813] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.415677][T26813] netdevsim netdevsim6 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 551.431817][T26813] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.449155][T26813] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 551.458627][T26813] netdevsim netdevsim6 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 551.500275][T26813] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.522346][ T3420] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 551.537701][ T3420] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 551.618731][ T887] vcan0 speed is unknown, defaulting to 1000 [ 551.650857][ T3374] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 551.805687][ T893] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=893 comm=syz.7.10302 [ 551.886850][ T893] netlink: 'syz.7.10302': attribute type 5 has an invalid length. [ 552.029382][ T901] SELinux: failed to load policy [ 552.041080][ T28] audit: type=1400 audit(1782653049.510:3560): avc: denied { load_policy } for pid=900 comm="syz.7.10305" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 552.298722][ T915] netlink: 'syz.9.10310': attribute type 11 has an invalid length. [ 552.310554][ T3374] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 552.324872][ T915] netlink: 36 bytes leftover after parsing attributes in process `syz.9.10310'. [ 552.646920][ T28] audit: type=1326 audit(1782653050.120:3561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=920 comm="syz.9.10313" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fb003ce59 code=0x0 [ 553.614799][ T944] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10322'. [ 553.857157][ T952] netlink: 24 bytes leftover after parsing attributes in process `syz.5.10326'. [ 554.426437][ T965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10332'. [ 554.511908][ T967] netlink: 'syz.4.10333': attribute type 10 has an invalid length. [ 554.525595][ T967] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.537963][ T967] bond0: (slave team0): Enslaving as an active interface with an up link [ 555.350502][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 555.358269][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 555.590396][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 556.102763][ T1009] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10350'. [ 556.122384][ T1009] team1: entered promiscuous mode [ 556.132760][ T1009] team1: entered allmulticast mode [ 556.140452][ T1009] 8021q: adding VLAN 0 to HW filter on device team1 [ 557.054107][ T1032] loop9: detected capacity change from 0 to 8192 [ 557.080130][ T1032] msdos: Unknown parameter '0x000000000000000018446744073709551615' [ 558.994474][ T1101] loop9: detected capacity change from 0 to 512 [ 559.343733][ T1101] EXT4-fs (loop9): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 559.604880][ T1101] EXT4-fs error (device loop9): ext4_quota_enable:7228: comm syz.9.10382: Bad quota inum: 2, type: 1 [ 559.654522][ T1101] EXT4-fs warning (device loop9): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=2). Please run e2fsck to fix. [ 559.969383][T18312] EXT4-fs (loop9): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 560.088062][ T3420] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 54945 - 0 [ 560.099345][ T3420] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 54945 - 0 [ 560.109507][ T3420] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 54945 - 0 [ 560.118660][ T3420] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 54945 - 0 [ 560.196853][ T1118] vcan0 speed is unknown, defaulting to 1000 [ 560.730464][ T1142] loop4: detected capacity change from 0 to 512 [ 560.737861][ T1142] EXT4-fs: inline encryption not supported [ 560.821767][ T1142] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 560.835583][ T1142] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 560.946589][ T1142] EXT4-fs warning (device loop4): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 560.975984][ T1142] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.10397: bg 0: block 248: padding at end of block bitmap is not set [ 561.005916][ T1142] loop4: lost filesystem error report for type 5 error -117 [ 561.006306][ T1142] Quota error (device loop4): write_blk: dquota write failed [ 561.013657][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 561.013677][ C0] EXT4-fs (loop4): last error at time 1782653058: ext4_validate_block_bitmap:441 [ 561.065953][ T1142] Quota error (device loop4): qtree_write_dquot: Error -28 occurred while creating quota [ 561.076884][ T1142] EXT4-fs error (device loop4): ext4_acquire_dquot:7041: comm syz.4.10397: Failed to acquire dquot type 1 [ 561.088464][ T1142] loop4: lost filesystem error report for type 5 error -28 [ 561.092055][ T1142] EXT4-fs (loop4): 1 truncate cleaned up [ 561.106297][ T1142] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 561.214541][ T1083] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 561.607169][T31391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 561.684354][ T1175] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10411'. [ 562.319663][ T1192] bridge0: port 2(bridge_slave_1) entered disabled state [ 562.327062][ T1192] bridge0: port 1(bridge_slave_0) entered disabled state [ 562.455518][ T1192] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.466080][ T1192] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.576695][ T1194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 562.593774][ T1194] 8021q: adding VLAN 0 to HW filter on device team0 [ 562.603794][ T1194] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.657872][ T1194] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 562.701294][ T1194] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 562.711831][ T1194] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 562.722677][ T1194] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 562.772065][ T1194] veth1_vlan: left promiscuous mode [ 562.785052][ T1194] veth0_vlan: left promiscuous mode [ 562.799796][ T1194] veth0_vlan: entered promiscuous mode [ 562.812699][ T1194] veth1_vlan: entered promiscuous mode [ 562.828721][ T1194] veth1_macvtap: left promiscuous mode [ 562.842830][ T1194] veth0_macvtap: left promiscuous mode [ 562.882015][ T1194] veth0_macvtap: entered promiscuous mode [ 562.901891][ T1194] veth1_macvtap: entered promiscuous mode [ 562.918162][ T1194] veth1_macvtap: entered allmulticast mode [ 562.936311][ T1194] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 562.952358][ T1194] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 562.972243][ T1194] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 563.010042][ T1194] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 563.029708][ T1194] 8021q: adding VLAN 0 to HW filter on device bond1 [ 563.052600][ T1194] 8021q: adding VLAN 0 to HW filter on device bond2 [ 563.063380][ T1194] 8021q: adding VLAN 0 to HW filter on device bond3 [ 563.074103][ T1194] 8021q: adding VLAN 0 to HW filter on device bond4 [ 563.083357][ T1194] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 563.093572][ T1194] 8021q: adding VLAN 0 to HW filter on device bond5 [ 563.103890][ T1194] A link change request failed with some changes committed already. Interface @ may have been left with an inconsistent configuration, please check. [ 563.125429][T26827] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.133559][T26827] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.143545][T26827] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.150720][T26827] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.254162][T26839] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.276665][T26839] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.294771][T26813] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 563.305794][T26813] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 563.320480][ T9552] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 563.365972][T26839] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.377180][T26839] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 563.399938][ T1223] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10430'. [ 563.400217][T26826] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.427321][T26826] netdevsim netdevsim9 netdevsim0: set [0, 1] type 1 family 0 port 256 - 0 [ 563.444230][T26826] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.453962][T26826] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.463306][T26826] netdevsim netdevsim9 netdevsim1: set [0, 1] type 1 family 0 port 256 - 0 [ 563.473703][T26826] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.572310][ T1230] netlink: 'syz.7.10441': attribute type 1 has an invalid length. [ 563.580924][ T1230] netlink: 'syz.7.10441': attribute type 4 has an invalid length. [ 563.589066][ T1230] netlink: 9462 bytes leftover after parsing attributes in process `syz.7.10441'. [ 563.619124][T26826] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.646005][T26826] netdevsim netdevsim9 netdevsim2: set [0, 1] type 1 family 0 port 256 - 0 [ 563.664539][ T1231] uprobe: syz.7.10432:1231 failed to unregister, leaking uprobe [ 563.672587][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 563.681449][T26826] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.691775][T26826] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 563.694938][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 563.716951][T26826] netdevsim netdevsim9 netdevsim3: set [0, 1] type 1 family 0 port 256 - 0 [ 563.725006][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 563.744511][T26826] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.782921][ T1237] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10434'. [ 563.889679][ T1237] netlink: 16 bytes leftover after parsing attributes in process `syz.4.10434'. [ 563.992084][T30237] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 564.230724][T30237] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 564.683214][ T1273] loop4: detected capacity change from 0 to 512 [ 564.695410][ T1273] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 564.741453][ T1273] EXT4-fs warning (device loop4): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 564.767872][ T1273] EXT4-fs (loop4): 1 truncate cleaned up [ 564.774427][ T1273] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.797037][ T28] audit: type=1400 audit(1782653062.280:3562): avc: denied { write } for pid=1272 comm="syz.4.10448" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 564.925673][T31391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.996054][ T1293] 8021q: adding VLAN 0 to HW filter on device bond2 [ 565.017359][ T1298] loop4: detected capacity change from 0 to 512 [ 565.051254][ T1299] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 565.114359][ T1298] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 565.130251][T26826] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.157070][T26826] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.175745][T26826] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.210559][T26826] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.345722][T31391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.386698][ T1312] netlink: 2024 bytes leftover after parsing attributes in process `syz.9.10458'. [ 565.398583][ T1312] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10458'. [ 566.407135][ T1344] loop4: detected capacity change from 0 to 128 [ 566.423249][ T1344] EXT4-fs: Ignoring removed nobh option [ 566.466840][ T1344] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 566.543995][ T1344] ext4 filesystem being mounted at /145/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 566.598783][ T28] audit: type=1400 audit(1782653064.080:3563): avc: denied { write } for pid=1343 comm="syz.4.10471" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 567.030451][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 567.427296][T31391] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 568.360265][ T1370] x_tables: duplicate underflow at hook 1 [ 568.475029][ T28] audit: type=1400 audit(1782653065.960:3564): avc: denied { firmware_load } for pid=1374 comm="syz.7.10480" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 568.621443][ T1380] Invalid option length (287) for dns_resolver key [ 568.754864][ T1389] loop4: detected capacity change from 0 to 128 [ 568.789436][ T1389] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 568.806864][ T1389] System zones: 1-3, 19-19, 35-36 [ 568.821026][ T1389] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 568.840624][ T1389] ext4 filesystem being mounted at /152/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 568.881457][ T28] audit: type=1400 audit(1782653066.370:3565): avc: denied { write } for pid=1386 comm="syz.4.10485" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 568.985068][T31391] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 569.012354][ T1398] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 569.163949][ T1411] loop4: detected capacity change from 0 to 512 [ 569.173045][ T1408] 8021q: adding VLAN 0 to HW filter on device bond0 [ 569.179748][T26813] bond0: (slave bond_slave_0): interface is now down [ 569.188441][T26813] bond0: (slave bond_slave_1): interface is now down [ 569.207353][ T1411] EXT4-fs error (device loop4): ext4_orphan_get:1425: comm syz.4.10495: bad orphan inode 15 [ 569.222750][ T1408] 8021q: adding VLAN 0 to HW filter on device team0 [ 569.243118][T26813] bond0: (slave bond_slave_0): interface is now down [ 569.254503][ T1411] loop4: lost filesystem error report for type 5 error -117 [ 569.257890][ T1411] ext4_test_bit(bit=14, block=18) = 1 [ 569.265476][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 569.265512][ C1] EXT4-fs (loop4): initial error at time 1782653066: ext4_orphan_get:1425 [ 569.265540][ C1] EXT4-fs (loop4): last error at time 1782653066: ext4_orphan_get:1425 [ 569.319589][T26813] bond0: (slave bond_slave_1): interface is now down [ 569.327777][ T1408] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.361645][T26813] bond0: (slave bond_slave_0): interface is now down [ 569.379505][T26813] bond0: (slave bond_slave_1): interface is now down [ 569.406469][ T1411] is_bad_inode(inode)=0 [ 569.411106][T26813] bond0: (slave bond_slave_0): interface is now down [ 569.418006][T26813] bond0: (slave bond_slave_1): interface is now down [ 569.429882][ T1411] NEXT_ORPHAN(inode)=1023 [ 569.440103][ T1411] max_ino=32 [ 569.452248][ T1411] i_nlink=0 [ 569.453417][T26813] bond0: (slave bond_slave_0): interface is now down [ 569.463059][ T1411] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #15: comm syz.4.10495: corrupted xattr block 19: invalid header [ 569.476619][ T1408] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.487955][T26813] bond0: (slave bond_slave_1): interface is now down [ 569.491642][ T1411] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 569.502571][ T1411] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -117) [ 569.504544][ T1408] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.532802][ T1411] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none. [ 569.551333][T26827] bond0: (slave bond_slave_0): interface is now down [ 569.558295][T26827] bond0: (slave bond_slave_1): interface is now down [ 569.584007][ T1408] veth1_vlan: left promiscuous mode [ 569.586082][ T1411] ext4 filesystem being mounted at /155/éq‰Y’3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 569.600126][ T1408] veth0_vlan: left promiscuous mode [ 569.604631][ T1408] veth0_vlan: entered promiscuous mode [ 569.605897][T26827] bond0: (slave bond_slave_0): interface is now down [ 569.621463][ T1408] veth1_vlan: entered promiscuous mode [ 569.629225][T26827] bond0: (slave bond_slave_1): interface is now down [ 569.631091][ T1408] veth1_macvtap: left promiscuous mode [ 569.644715][ T1408] veth0_macvtap: left promiscuous mode [ 569.657734][ T1408] veth0_macvtap: entered promiscuous mode [ 569.664640][ T1408] veth1_macvtap: entered promiscuous mode [ 569.680376][T26813] bond0: (slave bond_slave_0): interface is now down [ 569.687670][T26813] bond0: (slave bond_slave_1): interface is now down [ 569.707106][ T1408] 8021q: adding VLAN 0 to HW filter on device eth0 [ 569.713870][T16157] bond0: (slave bond_slave_0): interface is now down [ 569.720846][T16157] bond0: (slave bond_slave_1): interface is now down [ 569.729638][ T1408] 8021q: adding VLAN 0 to HW filter on device eth1 [ 569.740486][T16157] bond0: (slave bond_slave_0): interface is now down [ 569.747573][T16157] bond0: (slave bond_slave_1): interface is now down [ 569.755577][ T1408] 8021q: adding VLAN 0 to HW filter on device eth2 [ 569.765545][ T1408] 8021q: adding VLAN 0 to HW filter on device eth3 [ 569.772433][T16157] bond0: (slave bond_slave_0): interface is now down [ 569.779793][T16157] bond0: (slave bond_slave_1): interface is now down [ 569.801555][T26840] bond0: (slave bond_slave_0): interface is now down [ 569.808574][T26840] bond0: (slave bond_slave_1): interface is now down [ 569.831417][T16157] bond0: (slave bond_slave_0): interface is now down [ 569.838297][T16157] bond0: (slave bond_slave_1): interface is now down [ 569.860791][T26827] bond0: (slave bond_slave_0): interface is now down [ 569.870624][T26827] bond0: (slave bond_slave_1): interface is now down [ 569.900656][T16157] bond0: (slave bond_slave_0): interface is now down [ 569.907667][T16157] bond0: (slave bond_slave_1): interface is now down [ 569.930699][T26840] bond0: (slave bond_slave_0): interface is now down [ 569.937866][T26840] bond0: (slave bond_slave_1): interface is now down [ 569.980642][T16157] bond0: (slave bond_slave_0): interface is now down [ 569.987724][T16157] bond0: (slave bond_slave_1): interface is now down [ 570.008143][ T1408] 8021q: adding VLAN 0 to HW filter on device bond1 [ 570.014933][T16157] bond0: (slave bond_slave_0): interface is now down [ 570.036132][T16157] bond0: (slave bond_slave_1): interface is now down [ 570.056473][ T1408] 8021q: adding VLAN 0 to HW filter on device bond2 [ 570.085069][ T1408] 8021q: adding VLAN 0 to HW filter on device bond3 [ 570.091955][T26840] bond0: (slave bond_slave_0): interface is now down [ 570.100896][ T1408] veth0_to_team: entered promiscuous mode [ 570.109230][T26840] bond0: (slave bond_slave_1): interface is now down [ 570.150386][T16157] bond0: (slave bond_slave_0): interface is now down [ 570.164857][T16157] bond0: (slave bond_slave_1): interface is now down [ 570.180140][ T1408] 8021q: adding VLAN 0 to HW filter on device bond4 [ 570.200524][T16157] bond0: (slave bond_slave_0): interface is now down [ 570.207434][T16157] bond0: (slave bond_slave_1): interface is now down [ 570.227177][ T1407] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.237714][T16157] bond0: (slave bond_slave_0): interface is now down [ 570.244974][T16157] bond0: (slave bond_slave_1): interface is now down [ 570.258405][ T1407] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 570.270406][ T5067] bond0: (slave bond_slave_0): interface is now down [ 570.277301][ T5067] bond0: (slave bond_slave_1): interface is now down [ 570.298662][ T1407] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.311641][ T3420] bond0: (slave bond_slave_0): interface is now down [ 570.318656][ T3420] bond0: (slave bond_slave_1): interface is now down [ 570.340576][T16157] bond0: (slave bond_slave_0): interface is now down [ 570.349611][T30236] vcan0 speed is unknown, defaulting to 1000 [ 570.360121][T30236] syz1: Port: 1 Link ACTIVE [ 570.370757][T16157] bond0: (slave bond_slave_1): interface is now down [ 570.411518][ T5067] bond0: (slave bond_slave_0): interface is now down [ 570.418494][ T5067] bond0: (slave bond_slave_1): interface is now down [ 570.441914][T26827] bond0: (slave bond_slave_0): interface is now down [ 570.448959][T26827] bond0: (slave bond_slave_1): interface is now down [ 570.453498][T26813] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.471962][ T3420] bond0: (slave bond_slave_0): interface is now down [ 570.479320][ T3420] bond0: (slave bond_slave_1): interface is now down [ 570.490758][T26813] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 570.506290][T31391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0009-000000000000. [ 570.520413][T26827] bond0: (slave bond_slave_0): interface is now down [ 570.520575][T26813] netdevsim netdevsim5 eth0: set [1, 2] type 2 family 0 port 20004 - 0 [ 570.537664][T26827] bond0: (slave bond_slave_1): interface is now down [ 570.560814][T26826] bond0: (slave bond_slave_0): interface is now down [ 570.567846][T26826] bond0: (slave bond_slave_1): interface is now down [ 570.582841][T26813] netdevsim netdevsim5 eth0: set [1, 3] type 2 family 0 port 20002 - 0 [ 570.598133][ T1425] uprobe: syz.4.10499:1425 failed to unregister, leaking uprobe [ 570.607859][T26813] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.616164][T26826] bond0: (slave bond_slave_0): interface is now down [ 570.627670][T26826] bond0: (slave bond_slave_1): interface is now down [ 570.639969][T26813] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 570.665953][T26813] netdevsim netdevsim5 eth1: set [1, 2] type 2 family 0 port 20004 - 0 [ 570.674801][ T3420] bond0: (slave bond_slave_0): interface is now down [ 570.683366][ T3420] bond0: (slave bond_slave_1): interface is now down [ 570.683825][T26813] netdevsim netdevsim5 eth1: set [1, 3] type 2 family 0 port 20002 - 0 [ 570.700417][T26840] bond0: (slave bond_slave_0): interface is now down [ 570.708558][T26840] bond0: (slave bond_slave_1): interface is now down [ 570.731289][T26840] bond0: (slave bond_slave_0): interface is now down [ 570.739930][T26840] bond0: (slave bond_slave_1): interface is now down [ 570.747526][T30236] vcan0 speed is unknown, defaulting to 1000 [ 570.761932][T26813] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.775243][T26813] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 570.784112][T26840] bond0: (slave bond_slave_0): interface is now down [ 570.791375][T26840] bond0: (slave bond_slave_1): interface is now down [ 570.799319][T26813] netdevsim netdevsim5 eth2: set [1, 2] type 2 family 0 port 20004 - 0 [ 570.807917][T26813] netdevsim netdevsim5 eth2: set [1, 3] type 2 family 0 port 20002 - 0 [ 570.816724][T26840] bond0: (slave bond_slave_0): interface is now down [ 570.824173][T26840] bond0: (slave bond_slave_1): interface is now down [ 570.831408][T26813] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.839869][T26813] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 570.848628][T26813] netdevsim netdevsim5 eth3: set [1, 2] type 2 family 0 port 20004 - 0 [ 570.857492][T26840] bond0: (slave bond_slave_0): interface is now down [ 570.864951][T26840] bond0: (slave bond_slave_1): interface is now down [ 570.875778][T26813] netdevsim netdevsim5 eth3: set [1, 3] type 2 family 0 port 20002 - 0 [ 570.896741][ T1407] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 570.907282][T26840] bond0: (slave bond_slave_0): interface is now down [ 570.915174][T26840] bond0: (slave bond_slave_1): interface is now down [ 570.919388][ T1407] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 570.936690][ T1407] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.950650][T26840] bond0: (slave bond_slave_0): interface is now down [ 570.957755][T26840] bond0: (slave bond_slave_1): interface is now down [ 570.965912][ T1433] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10500'. [ 571.000819][ T3420] bond0: (slave bond_slave_0): interface is now down [ 571.011128][ T3420] bond0: (slave bond_slave_1): interface is now down [ 571.030231][ T1407] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.049186][ T1407] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 571.051577][ T3420] bond0: (slave bond_slave_0): interface is now down [ 571.071163][ T1407] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.086410][ T3420] bond0: (slave bond_slave_1): interface is now down [ 571.148621][T26840] bond0: (slave bond_slave_0): interface is now down [ 571.156176][T26840] bond0: (slave bond_slave_1): interface is now down [ 571.166515][T26840] bond0: now running without any active interface! [ 571.246630][ T1407] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 571.260779][ T1452] netlink: 20 bytes leftover after parsing attributes in process `syz.5.10508'. [ 571.277485][ T1407] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 571.298149][ T1407] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.330428][ T1452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10508'. [ 571.349782][ T1452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10508'. [ 571.370912][ T1452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10508'. [ 571.392512][ T1452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10508'. [ 571.408278][ T1452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10508'. [ 571.418246][ T1452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10508'. [ 571.428077][ T1452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10508'. [ 571.448570][ T1452] netlink: 8 bytes leftover after parsing attributes in process `syz.5.10508'. [ 571.622275][ T1457] vcan0 speed is unknown, defaulting to 1000 [ 571.692892][T26813] netdevsim netdevsim9 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.703152][T26813] netdevsim netdevsim9 eth0: set [0, 1] type 1 family 0 port 256 - 0 [ 571.720396][T26813] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.753820][T26827] netdevsim netdevsim9 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.762098][T26827] netdevsim netdevsim9 eth1: set [0, 1] type 1 family 0 port 256 - 0 [ 571.770206][T26827] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.795512][T26827] netdevsim netdevsim9 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.828602][T26827] netdevsim netdevsim9 eth2: set [0, 1] type 1 family 0 port 256 - 0 [ 571.839054][T26827] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 571.861843][T26827] netdevsim netdevsim9 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 571.878339][T26827] netdevsim netdevsim9 eth3: set [0, 1] type 1 family 0 port 256 - 0 [ 571.886761][T26827] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.561612][ T1494] vcan0 speed is unknown, defaulting to 1000 [ 572.680148][ T3374] IPVS: starting estimator thread 0... [ 572.770381][ T1499] IPVS: using max 2544 ests per chain, 127200 per kthread [ 572.849993][ T1506] dvmrp1: entered allmulticast mode [ 573.044904][ T28] audit: type=1326 audit(1782653070.530:3566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1520 comm="syz.6.10536" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f71191f6bd7 code=0x0 [ 573.112934][ T28] audit: type=1400 audit(1782653070.600:3567): avc: denied { unmount } for pid=1500 comm="syz.9.10527" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 573.136845][ T1531] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.156869][ T1531] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.168959][ T1531] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 573.263316][ T1531] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 573.305530][ T1531] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 573.345884][ T1531] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 573.387379][ T1531] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 573.419318][ T1531] 8021q: adding VLAN 0 to HW filter on device hsr0 [ 573.454559][ T1531] veth1_vlan: left promiscuous mode [ 573.473423][ T1531] veth0_vlan: left promiscuous mode [ 573.498234][ T1531] veth0_vlan: entered promiscuous mode [ 573.517956][ T1531] veth1_vlan: entered promiscuous mode [ 573.541456][ T1531] veth1_macvtap: left promiscuous mode [ 573.562259][ T1531] veth0_macvtap: left promiscuous mode [ 573.581580][ T1531] veth0_macvtap: entered promiscuous mode [ 573.602574][ T1531] veth1_macvtap: entered promiscuous mode [ 573.631773][ T1531] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 573.649889][ T1531] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 573.669517][ T1531] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 573.687541][ T1531] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 573.709919][ T1531] 8021q: adding VLAN 0 to HW filter on device bond1 [ 573.771862][T26827] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.779298][T26827] bridge0: port 1(bridge_slave_0) entered listening state [ 573.790235][T26827] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.797383][T26827] bridge0: port 2(bridge_slave_1) entered listening state [ 573.948904][ T28] audit: type=1400 audit(1782653071.430:3568): avc: denied { write } for pid=1559 comm="syz.5.10544" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 574.204138][ T28] audit: type=1400 audit(1782653071.670:3569): avc: denied { map } for pid=1565 comm="syz.7.10546" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=162 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 574.494609][ T5067] Bluetooth: hci0: Frame reassembly failed (-84) [ 575.047362][ T1597] loop4: detected capacity change from 0 to 512 [ 575.190661][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 575.205243][ T1597] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 575.226421][ T28] audit: type=1400 audit(1782653072.710:3570): avc: denied { write } for pid=1596 comm="syz.4.10561" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 575.300640][T31391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 576.004105][ T1657] __nla_validate_parse: 95 callbacks suppressed [ 576.004155][ T1657] netlink: 20 bytes leftover after parsing attributes in process `syz.7.10584'. [ 576.022549][ T1657] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10584'. [ 576.033530][ T1657] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10584'. [ 576.044548][ T1657] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10584'. [ 576.055381][ T1657] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10584'. [ 576.066011][ T1657] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10584'. [ 576.077034][ T1657] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10584'. [ 576.087293][ T1657] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10584'. [ 576.098027][ T1657] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10584'. [ 576.108811][ T1657] netlink: 8 bytes leftover after parsing attributes in process `syz.7.10584'. [ 576.550723][T25077] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 576.557063][ T3648] Bluetooth: hci0: command 0x1003 tx timeout [ 576.714391][ T1673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 576.728660][ T1673] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.762873][ T1673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 576.864798][ T1673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 576.891687][ T1673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 576.913471][ T1673] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 576.944220][ T1673] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 576.961491][ T1673] veth1_vlan: left promiscuous mode [ 576.968990][ T1673] veth0_vlan: left promiscuous mode [ 576.981694][ T1673] veth0_vlan: entered promiscuous mode [ 576.989007][ T1673] veth1_vlan: entered promiscuous mode [ 577.048768][ T1673] veth1_macvtap: left promiscuous mode [ 577.070950][ T1673] veth0_macvtap: left promiscuous mode [ 577.100638][ T1673] veth0_macvtap: entered promiscuous mode [ 577.119145][ T1673] veth1_macvtap: entered promiscuous mode [ 577.150190][ T1673] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 577.174204][ T1673] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 577.214919][ T1673] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 577.242554][ T1673] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 577.391217][T26827] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.406333][T26839] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.413566][T26839] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.457206][T26839] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.464487][T26839] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.717873][ T5067] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.732939][ T5067] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.937647][ T5067] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.970731][ T1682] vcan0 speed is unknown, defaulting to 1000 [ 579.040542][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 579.670597][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 579.680393][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 580.913697][ T1748] loop9: detected capacity change from 0 to 512 [ 580.961112][ T1748] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #16: comm syz.9.10617: corrupted inode contents [ 580.983492][ T1748] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 580.983665][ T1748] EXT4-fs error (device loop9): ext4_dirty_inode:6639: inode #16: comm syz.9.10617: mark_inode_dirty error [ 580.992915][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 580.992936][ C0] EXT4-fs (loop9): initial error at time 1782653078: ext4_do_update_inode:5742: inode 16 [ 580.992970][ C0] EXT4-fs (loop9): last error at time 1782653078: ext4_do_update_inode:5742: inode 16 [ 581.068566][ T1758] loop4: detected capacity change from 0 to 512 [ 581.083055][ T1748] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 581.086824][ T1748] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #16: comm syz.9.10617: corrupted inode contents [ 581.100382][ T1758] ------------[ cut here ]------------ [ 581.113849][ T1758] EA inode 11 i_nlink=0 [ 581.113897][ T1758] WARNING: fs/ext4/xattr.c:1059 at ext4_xattr_inode_update_ref+0x305/0x330, CPU#0: syz.4.10622/1758 [ 581.128960][ T1758] Modules linked in: [ 581.132899][ T1758] CPU: 0 UID: 0 PID: 1758 Comm: syz.4.10622 Not tainted syzkaller #0 PREEMPT(lazy) [ 581.142431][ T1758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 581.150545][ T1748] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 581.152550][ T1758] RIP: 0010:ext4_xattr_inode_update_ref+0x320/0x330 [ 581.168499][ T1758] Code: 36 d2 96 ff 49 8d 7e 40 4c 8d 2d 0b 8d 5a 05 e8 26 af b5 ff 49 8b 6e 40 4c 89 e7 e8 5a aa b5 ff 41 8b 56 48 4c 89 ef 48 89 ee <67> 48 0f b9 3a e9 04 ff ff ff e8 41 1a d9 03 90 90 90 90 90 90 90 [ 581.188498][ T1758] RSP: 0018:ffffc900084b3648 EFLAGS: 00010246 [ 581.194747][ T1758] RAX: ffff88810498d030 RBX: ffff88810733f360 RCX: ffffffff81c2a506 [ 581.202937][ T1758] RDX: 0000000000000000 RSI: 000000000000000b RDI: ffffffff871d3200 [ 581.206719][ T1748] EXT4-fs error (device loop9): __ext4_ext_dirty:207: inode #16: comm syz.9.10617: mark_inode_dirty error [ 581.211045][ T1758] RBP: 000000000000000b R08: 000188810733f313 R09: 0000000000000000 [ 581.230603][ T1758] R10: ffffc900084b3578 R11: 0001c900084b3578 R12: ffff88810733f310 [ 581.238665][ T1758] R13: ffffffff871d3200 R14: ffff88810733f2c8 R15: 0000000000000001 [ 581.246732][ T1758] FS: 00007fa40181f6c0(0000) GS:ffff8882ae8d1000(0000) knlGS:0000000000000000 [ 581.246787][ T1748] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 581.255713][ T1758] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 581.255739][ T1758] CR2: 00007f6d757e0000 CR3: 00000001247f6000 CR4: 00000000003506f0 [ 581.279517][ T1758] DR0: 0000200000000300 DR1: 0000200000000300 DR2: 0000000000000000 [ 581.287550][ T1758] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000600 [ 581.295577][ T1758] Call Trace: [ 581.298886][ T1758] [ 581.301869][ T1758] ext4_xattr_set_entry+0x78a/0x1050 [ 581.304130][ T1748] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #16: comm syz.9.10617: corrupted inode contents [ 581.307199][ T1758] ext4_xattr_ibody_set+0x156/0x390 [ 581.324382][ T1758] ext4_expand_extra_isize_ea+0xc04/0x1120 [ 581.330473][ T1758] __ext4_expand_extra_isize+0x246/0x280 [ 581.336181][ T1758] __ext4_mark_inode_dirty+0x290/0x3d0 [ 581.341931][ T1758] ext4_evict_inode+0x8b6/0xdf0 [ 581.346991][ T1758] ? __pfx_ext4_evict_inode+0x10/0x10 [ 581.348155][ T1748] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 581.352575][ T1758] evict+0x2a5/0x510 [ 581.365754][ T1758] iput+0x430/0x5a0 [ 581.369592][ T1758] ext4_process_orphan+0x1a4/0x1c0 [ 581.374914][ T1758] ext4_orphan_cleanup+0x6a6/0xa10 [ 581.380203][ T1758] ? ext4_register_li_request+0x14c/0x440 [ 581.383595][ T1748] EXT4-fs error (device loop9) in ext4_orphan_del:303: Corrupt filesystem [ 581.386352][ T1758] ext4_fill_super+0x33ab/0x3760 [ 581.399791][ T1758] ? set_blocksize+0x14c/0x270 [ 581.403593][ T1748] loop9: lost filesystem error report for type 5 error -117 [ 581.404696][ T1758] ? __pfx_ext4_fill_super+0x10/0x10 [ 581.404864][ T1748] EXT4-fs error (device loop9): ext4_do_update_inode:5742: inode #16: comm syz.9.10617: corrupted inode contents [ 581.412020][ T1758] get_tree_bdev_flags+0x291/0x300 [ 581.433412][ T1748] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 581.434678][ T1748] EXT4-fs error (device loop9): ext4_truncate:4691: inode #16: comm syz.9.10617: mark_inode_dirty error [ 581.435024][ T1758] ? __pfx_ext4_fill_super+0x10/0x10 [ 581.460568][ T1758] get_tree_bdev+0x1f/0x30 [ 581.462767][ T1748] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 581.465039][ T1758] ext4_get_tree+0x1c/0x30 [ 581.478656][ T1758] vfs_get_tree+0x57/0x1d0 [ 581.482157][ T1748] EXT4-fs error (device loop9) in ext4_process_orphan:345: Corrupt filesystem [ 581.483125][ T1758] do_new_mount+0x288/0x8d0 [ 581.496581][ T1758] path_mount+0x4ad/0xb90 [ 581.501081][ T1758] __se_sys_mount+0x28c/0x2e0 [ 581.503047][ T1748] loop9: lost filesystem error report for type 5 error -117 [ 581.505951][ T1758] __x64_sys_mount+0x67/0x80 [ 581.518033][ T1758] x64_sys_call+0x2d61/0x3020 [ 581.518476][ T1748] EXT4-fs (loop9): 1 truncate cleaned up [ 581.522891][ T1758] do_syscall_64+0x136/0x3c0 [ 581.533243][ T1758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.539188][ T1758] RIP: 0033:0x7fa402dce0ca [ 581.543807][ T1758] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 581.546840][ T1748] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 581.563708][ T1758] RSP: 002b:00007fa40181ee58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 581.584592][ T1758] RAX: ffffffffffffffda RBX: 00007fa40181eee0 RCX: 00007fa402dce0ca [ 581.596163][ T1758] RDX: 0000200000000180 RSI: 0000200000000000 RDI: 00007fa40181eea0 [ 581.604196][ T1758] RBP: 0000200000000180 R08: 00007fa40181eee0 R09: 0000000000000000 [ 581.612261][ T1758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000000 [ 581.620263][ T1758] R13: 00007fa40181eea0 R14: 000000000000047a R15: 00002000000001c0 [ 581.628313][ T1758] [ 581.631363][ T1758] ---[ end trace 0000000000000000 ]--- [ 581.637021][ T1758] EXT4-fs error (device loop4): ext4_free_inode:356: comm syz.4.10622: bit already cleared for inode 11 [ 581.648244][ T1758] loop4: lost filesystem error report for type 5 error -117 [ 581.650323][ C0] EXT4-fs (loop4): error count since last fsck: 1 [ 581.655180][T26827] Quota error (device loop9): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 581.657651][ C0] EXT4-fs (loop4): initial error at time 1782653079: ext4_free_inode:356 [ 581.664615][T26827] EXT4-fs error (device loop9): ext4_release_dquot:7077: comm kworker/u8:44: Failed to release dquot type 1 [ 581.673851][ C0] [ 581.673860][ C0] EXT4-fs (loop4): last error at time 1782653079: ext4_free_inode:356 [ 581.675710][ T1758] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 581.682720][ T1748] ext4 filesystem being mounted at /929/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 581.693926][ T1758] loop4: lost filesystem error report for type 5 error -117 [ 581.771547][ T1758] EXT4-fs error (device loop4) in ext4_free_inode:363: Corrupt filesystem [ 581.787441][ T1758] loop4: lost filesystem error report for type 5 error -117 [ 581.794352][ T1758] EXT4-fs (loop4): 1 orphan inode deleted [ 581.808138][ T1758] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 581.845931][ T28] audit: type=1400 audit(1782653079.300:3571): avc: denied { write } for pid=1741 comm="syz.9.10617" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 581.961063][T31391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.018982][T18312] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 582.210487][ T28] audit: type=1400 audit(1782653079.690:3572): avc: denied { listen } for pid=1781 comm="syz.5.10630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 583.094372][ T28] audit: type=1326 audit(1782653080.580:3573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1793 comm="syz.9.10636" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fb003ce59 code=0x0 [ 583.444211][ T1816] netlink: 'syz.6.10645': attribute type 1 has an invalid length. [ 583.780486][ T1816] 8021q: adding VLAN 0 to HW filter on device bond7 [ 583.916218][ T1833] __nla_validate_parse: 68 callbacks suppressed [ 583.916237][ T1833] netlink: 12 bytes leftover after parsing attributes in process `syz.5.10650'. [ 583.945701][ T1822] bond7: entered promiscuous mode [ 583.950892][ T1822] bond7: entered allmulticast mode [ 584.023085][ T28] audit: type=1400 audit(1782653081.490:3574): avc: denied { create } for pid=1839 comm="syz.5.10653" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 584.045959][ T28] audit: type=1400 audit(1782653081.490:3575): avc: denied { read write } for pid=1839 comm="syz.5.10653" name="file0" dev="tmpfs" ino=10512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 584.071182][ T28] audit: type=1400 audit(1782653081.490:3576): avc: denied { open } for pid=1839 comm="syz.5.10653" path="/2027/file0" dev="tmpfs" ino=10512 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 584.190581][ T28] audit: type=1400 audit(1782653081.680:3577): avc: denied { mounton } for pid=1852 comm="syz.5.10657" path="/file0" dev="ramfs" ino=102903 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 584.785904][ T28] audit: type=1400 audit(1782653082.270:3578): avc: denied { connect } for pid=1888 comm="syz.7.10673" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 585.594085][ T1933] 8021q: VLANs not supported on gre0 [ 586.104301][ T1945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 586.119384][ T1945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.132883][ T28] audit: type=1400 audit(1782653083.620:3579): avc: denied { getattr } for pid=1944 comm="syz.4.10695" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 586.411645][ T1978] netlink: 16 bytes leftover after parsing attributes in process `syz.6.10708'. [ 586.657423][ T2008] vcan0 speed is unknown, defaulting to 1000 [ 586.706185][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 586.706201][ T28] audit: type=1326 audit(1782653084.190:3582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2007 comm="syz.9.10721" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fb003ce59 code=0x0 [ 586.828800][ T2016] RDS: rds_bind could not find a transport for 8775:7300:0:0:e00::, load rds_tcp or rds_rdma? [ 586.879676][ T2018] netlink: 4 bytes leftover after parsing attributes in process `syz.9.10725'. [ 586.894340][ T2018] netlink: 12 bytes leftover after parsing attributes in process `syz.9.10725'. [ 586.961376][ T2026] netlink: 24 bytes leftover after parsing attributes in process `syz.4.10729'. [ 587.117337][ T2037] loop9: detected capacity change from 0 to 128 [ 587.147222][ T2037] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 587.188722][ T2037] ext4 filesystem being mounted at /944/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 587.268216][ T2047] netlink: 4 bytes leftover after parsing attributes in process `syz.7.10738'. [ 587.282025][ T2047] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10738'. [ 587.546993][ T28] audit: type=1400 audit(1782653085.030:3583): avc: denied { write } for pid=2036 comm="syz.9.10734" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 587.552466][ T2037] EXT4-fs error (device loop9): dx_make_map:1296: inode #2: block 63: comm syz.9.10734: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 587.574489][ T28] audit: type=1400 audit(1782653085.030:3584): avc: denied { write } for pid=2036 comm="syz.9.10734" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 587.609378][ T28] audit: type=1400 audit(1782653085.030:3585): avc: denied { create } for pid=2036 comm="syz.9.10734" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=fifo_file permissive=1 [ 587.652346][ T2037] EXT4-fs error (device loop9) in do_split:2027: Corrupt filesystem [ 587.718016][T18312] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 587.798777][T26827] Bluetooth: hci0: Frame reassembly failed (-84) [ 587.905071][ T28] audit: type=1400 audit(1782653085.030:3586): avc: denied { write } for pid=2036 comm="syz.9.10734" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 587.930026][ T28] audit: type=1400 audit(1782653085.030:3587): avc: denied { write } for pid=2036 comm="syz.9.10734" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 588.667617][ T2094] netlink: 'syz.5.10755': attribute type 1 has an invalid length. [ 588.693268][ T2097] loop9: detected capacity change from 0 to 512 [ 588.693885][ T2094] bond5: entered promiscuous mode [ 588.723256][ T2097] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 588.753080][ T2094] 8021q: adding VLAN 0 to HW filter on device bond5 [ 588.765946][ T2097] ext4 filesystem being mounted at /947/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 588.800355][ T2094] veth11: entered promiscuous mode [ 588.809195][T18312] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 588.819592][ T2094] bond5: (slave veth11): Enslaving as a backup interface with a down link [ 588.876681][ T2105] netdevsim netdevsim5 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 588.889735][ T2105] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 588.900840][ T2105] netdevsim netdevsim5 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 588.911560][ T2105] netdevsim netdevsim5 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 588.921835][ T2105] netdevsim netdevsim5 eth3 (unregistering): unset [1, 3] type 2 family 0 port 20002 - 0 [ 588.993103][ T2105] netdevsim netdevsim5 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.003247][ T2105] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.013398][ T2105] netdevsim netdevsim5 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 589.027103][ T2105] netdevsim netdevsim5 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 589.038403][ T2105] netdevsim netdevsim5 eth2 (unregistering): unset [1, 3] type 2 family 0 port 20002 - 0 [ 589.094342][ T2105] netdevsim netdevsim5 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.104623][ T2105] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.121864][ T2105] netdevsim netdevsim5 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 589.151853][ T2105] netdevsim netdevsim5 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 589.171894][ T2105] netdevsim netdevsim5 eth1 (unregistering): unset [1, 3] type 2 family 0 port 20002 - 0 [ 589.233916][ T2105] netdevsim netdevsim5 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 589.246702][ T2113] loop9: detected capacity change from 0 to 512 [ 589.253237][ T2105] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 589.263921][ T2113] EXT4-fs: Ignoring removed orlov option [ 589.274347][ T2105] netdevsim netdevsim5 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 589.286154][ T2105] netdevsim netdevsim5 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 589.296257][ T2113] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 589.306572][ T2105] netdevsim netdevsim5 eth0 (unregistering): unset [1, 3] type 2 family 0 port 20002 - 0 [ 589.317520][ T2113] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #16: comm syz.9.10762: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 589.336523][ T2113] loop9: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 589.336804][ T2113] EXT4-fs error (device loop9): ext4_orphan_get:1404: comm syz.9.10762: couldn't read orphan inode 16 (err -117) [ 589.346162][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 589.346186][ C0] EXT4-fs (loop9): initial error at time 1782653086: ext4_ext_check_inode:521: inode 16 [ 589.346220][ C0] EXT4-fs (loop9): last error at time 1782653086: ext4_ext_check_inode:521: inode 16 [ 589.387806][ T2113] loop9: lost filesystem error report for type 5 error -117 [ 589.388030][ T2113] EXT4-fs (loop9): 1 orphan inode deleted [ 589.403066][ T2113] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 589.424384][T26827] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.433767][T26827] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20002 - 0 [ 589.442266][T26827] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 20004 - 0 [ 589.451250][T26827] netdevsim netdevsim5 eth0: set [1, 2] type 2 family 0 port 20000 - 0 [ 589.460243][ T2113] EXT4-fs error (device loop9): ext4_check_all_de:659: inode #12: block 7: comm syz.9.10762: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=124 fake=0 [ 589.480946][ T28] audit: type=1400 audit(1782653086.940:3588): avc: denied { write } for pid=2112 comm="syz.9.10762" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 589.507067][T26827] netdevsim netdevsim5 eth0: set [1, 3] type 2 family 0 port 6081 - 0 [ 589.518735][ T2113] EXT4-fs error (device loop9): ext4_find_dest_de:2050: inode #12: block 7: comm syz.9.10762: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=56 fake=0 [ 589.526577][T26827] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.546966][ T28] audit: type=1400 audit(1782653087.000:3589): avc: denied { write } for pid=2112 comm="syz.9.10762" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 589.570372][T26827] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20002 - 0 [ 589.571391][T18312] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 589.579290][T26827] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 20004 - 0 [ 589.597049][T26827] netdevsim netdevsim5 eth1: set [1, 2] type 2 family 0 port 20000 - 0 [ 589.605411][T26827] netdevsim netdevsim5 eth1: set [1, 3] type 2 family 0 port 6081 - 0 [ 589.615817][T26827] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.626456][T26827] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20002 - 0 [ 589.644733][T26827] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 20004 - 0 [ 589.654175][T26827] netdevsim netdevsim5 eth2: set [1, 2] type 2 family 0 port 20000 - 0 [ 589.656370][ T2120] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10764'. [ 589.663180][T26827] netdevsim netdevsim5 eth2: set [1, 3] type 2 family 0 port 6081 - 0 [ 589.681077][T26827] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 589.689380][T26827] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20002 - 0 [ 589.698949][T26827] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 20004 - 0 [ 589.708040][T26827] netdevsim netdevsim5 eth3: set [1, 2] type 2 family 0 port 20000 - 0 [ 589.716591][T26827] netdevsim netdevsim5 eth3: set [1, 3] type 2 family 0 port 6081 - 0 [ 589.740627][T26813] smc: removing ib device syz1 [ 589.746032][T30236] vcan0 speed is unknown, defaulting to 1000 [ 589.753257][T30236] syz1: Port: 1 Link DOWN [ 589.833140][T25077] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 589.859785][ T2128] loop9: detected capacity change from 0 to 512 [ 589.904565][ T2128] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 589.924599][ T2128] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 589.944001][ T2128] EXT4-fs (loop9): 1 truncate cleaned up [ 589.960868][ T2128] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 589.986852][ T28] audit: type=1400 audit(1782653087.470:3590): avc: denied { write } for pid=2127 comm="syz.9.10768" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 589.986907][ T2128] EXT4-fs error (device loop9): ext4_append:79: inode #2: comm syz.9.10768: Logical block already allocated [ 590.568314][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 590.931086][ T2141] loop4: detected capacity change from 0 to 512 [ 591.020409][ T2141] EXT4-fs (loop4): unable to read superblock [ 591.358794][T18312] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 591.712352][ T28] audit: type=1326 audit(1782653089.200:3591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2158 comm="syz.9.10782" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3fb003ce59 code=0x0 [ 591.826928][ T28] audit: type=1326 audit(1782653089.310:3592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2158 comm="syz.9.10782" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb003ce59 code=0x7ffc0000 [ 591.888709][ T28] audit: type=1326 audit(1782653089.310:3593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2158 comm="syz.9.10782" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb003ce59 code=0x7ffc0000 [ 591.915029][ T28] audit: type=1326 audit(1782653089.340:3594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2158 comm="syz.9.10782" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f3fb003ce59 code=0x7ffc0000 [ 591.940864][ T28] audit: type=1326 audit(1782653089.340:3595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2158 comm="syz.9.10782" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb003ce59 code=0x7ffc0000 [ 591.966747][ T28] audit: type=1326 audit(1782653089.340:3596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2158 comm="syz.9.10782" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb003ce59 code=0x7ffc0000 [ 591.995163][ T28] audit: type=1326 audit(1782653089.340:3597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2158 comm="syz.9.10782" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f3fb003ce59 code=0x7ffc0000 [ 592.022410][ T28] audit: type=1326 audit(1782653089.370:3598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2158 comm="syz.9.10782" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb003ce59 code=0x7ffc0000 [ 592.057736][ T28] audit: type=1326 audit(1782653089.370:3599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=2158 comm="syz.9.10782" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3fb003ce59 code=0x7ffc0000 [ 592.137915][ T2174] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10788'. [ 592.263163][ T2183] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10790'. [ 592.273483][ T2183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10790'. [ 592.292225][ T2183] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10790'. [ 593.212907][ T2250] loop4: detected capacity change from 0 to 512 [ 593.222126][ T2250] EXT4-fs: Ignoring removed oldalloc option [ 593.237361][ T2250] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 593.259366][ T2250] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 593.282720][ T2250] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 593.297632][ T2250] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.10817: corrupted xattr block 33: invalid checksum [ 593.312124][ T2250] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop4 ino=15 [ 593.321411][ T2250] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.10817: corrupted xattr block 33: invalid checksum [ 593.335468][ T28] audit: type=1400 audit(1782653090.810:3600): avc: denied { write } for pid=2249 comm="syz.4.10817" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 593.359938][ T2250] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop4 ino=15 [ 593.500620][ T2262] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.10817: corrupted xattr block 33: invalid checksum [ 593.516589][ T2262] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop4 ino=15 [ 593.525839][ T2262] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.10817: corrupted xattr block 33: invalid checksum [ 593.539822][ T2262] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop4 ino=15 [ 593.584589][ T2250] EXT4-fs error (device loop4): ext4_xattr_block_get:597: inode #15: comm syz.4.10817: corrupted xattr block 33: invalid checksum [ 593.599736][ T2250] SELinux: inode_doinit_use_xattr: getxattr returned 74 for dev=loop4 ino=15 [ 593.623491][ T2249] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2972: inode #15: comm syz.4.10817: corrupted xattr block 33: invalid checksum [ 593.637743][ T2249] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -74 [ 593.637990][ T2249] EXT4-fs warning (device loop4): ext4_evict_inode:287: xattr delete (err -74) [ 593.679631][T31391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.104806][ T2324] xt_hashlimit: size too large, truncated to 1048576 [ 594.873613][ T2393] xt_hashlimit: size too large, truncated to 1048576 [ 594.923840][ T2395] @ÿ: renamed from bond_slave_0 (while UP) [ 595.322264][ T2414] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10844'. [ 595.595173][ T2420] loop4: detected capacity change from 0 to 512 [ 596.129082][ T2420] EXT4-fs (loop4): 1 truncate cleaned up [ 596.148252][ T2420] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 596.331003][ T2420] SET target dimension over the limit! [ 596.390210][T31391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 596.657617][ T2447] loop9: detected capacity change from 0 to 512 [ 596.740605][ T2447] EXT4-fs (loop9): unable to read superblock [ 596.840385][ T2456] loop4: detected capacity change from 0 to 1024 [ 597.313851][ T2467] netlink: 40 bytes leftover after parsing attributes in process `syz.9.10867'. [ 597.649429][ T2478] netlink: 172 bytes leftover after parsing attributes in process `syz.4.10871'. [ 597.753988][ T2485] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10874'. [ 597.763961][ T2485] netlink: 8 bytes leftover after parsing attributes in process `syz.6.10874'. [ 597.865077][ T2496] loop4: detected capacity change from 0 to 1024 [ 597.872054][ T2496] EXT4-fs: Ignoring removed bh option [ 597.910761][ T2496] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 597.927312][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 597.927373][ T28] audit: type=1400 audit(1782653095.410:3606): avc: denied { write } for pid=2495 comm="syz.4.10880" name="file0" dev="loop4" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 598.050510][T31391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 598.256540][ T28] audit: type=1400 audit(1782653095.740:3607): avc: denied { write } for pid=2532 comm="syz.9.10886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 598.309087][ T2538] netlink: 24 bytes leftover after parsing attributes in process `syz.9.10887'. [ 600.606887][ T2655] netlink: 12 bytes leftover after parsing attributes in process `syz.7.10912'. [ 601.096572][ T2677] lo: entered allmulticast mode [ 601.115294][ T2675] lo: left allmulticast mode [ 601.665020][ T2691] netlink: 24 bytes leftover after parsing attributes in process `syz.7.10926'. [ 601.806722][ T2709] netlink: 'syz.4.10934': attribute type 3 has an invalid length. [ 601.814916][ T2709] netlink: 'syz.4.10934': attribute type 1 has an invalid length. [ 601.826586][ T2709] netlink: 60387 bytes leftover after parsing attributes in process `syz.4.10934'. [ 602.032436][ T2720] netlink: 168 bytes leftover after parsing attributes in process `syz.4.10939'. [ 603.014100][ T2762] bond4: entered allmulticast mode [ 603.029935][ T2762] ip6gre1: entered allmulticast mode [ 603.044140][ T2761] bond4: left allmulticast mode [ 603.053976][ T2761] ip6gre1: left allmulticast mode [ 603.076708][ T2764] netlink: 28 bytes leftover after parsing attributes in process `syz.5.10958'. [ 603.112256][ T2764] netlink: 'syz.5.10958': attribute type 7 has an invalid length. [ 603.133685][ T2764] netlink: 'syz.5.10958': attribute type 8 has an invalid length. [ 603.151981][ T2764] netlink: 4 bytes leftover after parsing attributes in process `syz.5.10958'. [ 603.846455][ T2792] netlink: 104 bytes leftover after parsing attributes in process `syz.7.10968'. [ 603.864030][ T2792] netlink: 16 bytes leftover after parsing attributes in process `syz.7.10968'. [ 604.114475][ C0] bridge0: port 2(bridge_slave_1) entered learning state [ 604.137728][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 606.056564][ T2841] netlink: 'syz.4.10989': attribute type 1 has an invalid length. [ 606.106221][ T2841] bond1: (slave gretap1): making interface the new active one [ 606.122251][ T2841] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 606.176268][ T2847] loop4: detected capacity change from 0 to 512 [ 606.218261][ T2847] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 606.249580][ T2847] EXT4-fs (loop4): 1 truncate cleaned up [ 606.256448][ T2847] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 606.302862][T31391] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 606.519496][ T2871] futex_wake_op: syz.4.11000 tries to shift op by 144; fix this program [ 606.533872][ T2871] futex_wake_op: syz.4.11000 tries to shift op by 144; fix this program [ 607.101079][ T2899] netlink: 'syz.5.11009': attribute type 1 has an invalid length. [ 607.121330][ T2899] 8021q: adding VLAN 0 to HW filter on device bond6 [ 607.132781][ T2899] netlink: 8 bytes leftover after parsing attributes in process `syz.5.11009'. [ 607.160512][ T2899] bond6: (slave geneve5): making interface the new active one [ 607.169843][ T2899] bond6: (slave geneve5): Enslaving as an active interface with an up link [ 607.197801][ T2904] ipip2: entered promiscuous mode [ 607.233345][ T2907] SELinux: Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped). [ 607.243594][ T28] audit: type=1400 audit(1782653104.730:3608): avc: denied { relabelto } for pid=2905 comm="syz.7.11013" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 607.292478][ T28] audit: type=1400 audit(1782653104.730:3609): avc: denied { associate } for pid=2905 comm="syz.7.11013" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2027 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:ssh_exec_t:s0" [ 607.341552][ T28] audit: type=1400 audit(1782653104.730:3610): avc: denied { read } for pid=2905 comm="syz.7.11013" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 607.389858][ T28] audit: type=1400 audit(1782653104.730:3611): avc: denied { open } for pid=2905 comm="syz.7.11013" path="/392/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 607.448425][ T28] audit: type=1400 audit(1782653104.930:3612): avc: denied { unlink } for pid=29552 comm="syz-executor" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="system_u:object_r:ssh_exec_t:s0" [ 608.622175][ T2946] loop4: detected capacity change from 0 to 256 [ 608.668356][ T2946] FAT-fs (loop4): Directory bread(block 64) failed [ 608.675727][ T2946] FAT-fs (loop4): Directory bread(block 65) failed [ 608.685974][ T2946] FAT-fs (loop4): Directory bread(block 66) failed [ 608.702141][ T2946] FAT-fs (loop4): Directory bread(block 67) failed [ 608.721711][ T2946] FAT-fs (loop4): Directory bread(block 68) failed [ 608.728276][ T2946] FAT-fs (loop4): Directory bread(block 69) failed [ 608.759356][ T2946] FAT-fs (loop4): Directory bread(block 70) failed [ 608.773648][ T2946] FAT-fs (loop4): Directory bread(block 71) failed [ 608.797692][ T2946] FAT-fs (loop4): Directory bread(block 72) failed [ 608.817654][ T2946] FAT-fs (loop4): Directory bread(block 73) failed [ 609.112143][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 609.374910][ T2976] netlink: 'syz.5.11039': attribute type 1 has an invalid length. [ 609.837271][ T2990] netlink: 4 bytes leftover after parsing attributes in process `syz.9.11043'. [ 609.943696][ T2999] can: request_module (can-proto-0) failed. [ 610.120782][ T3009] netlink: 'syz.6.11049': attribute type 1 has an invalid length. [ 610.130275][ T3009] netlink: 101600 bytes leftover after parsing attributes in process `syz.6.11049'. [ 610.269007][ T3013] netlink: 24 bytes leftover after parsing attributes in process `syz.4.11051'. [ 610.357390][ T3026] netlink: 4 bytes leftover after parsing attributes in process `syz.4.11055'. [ 610.390570][ C0] ip6_tunnel: ip6gre4 xmit: Local address not yet configured! [ 610.692773][ T3042] loop4: detected capacity change from 0 to 128 [ 610.709173][ T3042] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 610.743524][ T3042] ext4 filesystem being mounted at /271/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 610.804281][T31391] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 610.933680][ T3052] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.11064'. [ 611.459825][ T3064] loop4: detected capacity change from 0 to 1764 [ 611.492679][ T28] audit: type=1400 audit(1782653108.970:3613): avc: denied { mount } for pid=3061 comm="syz.4.11070" name="/" dev="loop4" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 611.527671][ T3064] iso9660: Corrupted directory entry in block 14 of inode 1920 [ 611.547434][ T28] audit: type=1400 audit(1782653109.030:3614): avc: denied { unmount } for pid=31391 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 612.060858][ T3066] loop9: detected capacity change from 0 to 164 [ 612.310480][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 612.346842][ T3092] netlink: 20 bytes leftover after parsing attributes in process `syz.6.11068'. [ 612.391122][ T3066] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 612.655676][T18312] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 612.667346][T18312] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 612.671637][ T3108] netlink: 'syz.5.11087': attribute type 1 has an invalid length. [ 612.675252][T18312] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 612.704825][ T3108] 8021q: adding VLAN 0 to HW filter on device bond7 [ 612.705514][T18312] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 612.723497][T18312] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 612.732086][T18312] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 612.740745][T18312] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 612.749231][T18312] ISOFS: unable to read i-node block [ 612.754823][T18312] rock: corrupted directory entry. extent=41 out of volume (nzones=41) [ 612.763526][T18312] ISOFS: unable to read i-node block [ 612.779824][ T3108] bond7: (slave dummy0): making interface the new active one [ 612.794441][ T3108] bond7: (slave dummy0): Enslaving as an active interface with an up link [ 613.743676][ T3138] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.785767][ T3138] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.805711][ T3138] bridge_slave_0: entered allmulticast mode [ 613.812961][ T3138] bridge_slave_0: entered promiscuous mode [ 613.820093][ T3138] bridge0: port 2(bridge_slave_1) entered blocking state [ 613.832759][ T3138] bridge0: port 2(bridge_slave_1) entered disabled state [ 613.840085][ T3138] bridge_slave_1: entered allmulticast mode [ 613.846915][ T3138] bridge_slave_1: entered promiscuous mode [ 613.866311][ T3138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 613.876035][ T3151] netlink: 200 bytes leftover after parsing attributes in process `syz.6.11099'. [ 613.886987][ T3138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 613.925039][ T3138] team0: Port device team_slave_0 added [ 613.932093][ T3138] team0: Port device team_slave_1 added [ 613.954387][ T3138] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 613.961593][ T3138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 613.989831][ T3138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 614.010116][ T3138] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 614.021146][ T3138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 614.067802][ T3138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 614.102432][ T3138] hsr_slave_0: entered promiscuous mode [ 614.108843][ T3138] hsr_slave_1: entered promiscuous mode [ 614.115611][ T3138] debugfs: 'hsr0' already exists in 'hsr' [ 614.122369][ T3138] Cannot create hsr debugfs directory [ 615.076025][ T3199] netlink: 12 bytes leftover after parsing attributes in process `syz.5.11114'. [ 615.262619][ T28] audit: type=1400 audit(1782653112.740:3615): avc: denied { write } for pid=3195 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 615.383295][ T28] audit: type=1400 audit(1782653112.870:3616): avc: denied { write } for pid=3214 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 615.639518][ T28] audit: type=1400 audit(1782653113.120:3617): avc: denied { write } for pid=3216 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 615.756966][ T28] audit: type=1400 audit(1782653113.240:3618): avc: denied { write } for pid=3231 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 615.967428][ T3244] netlink: 9 bytes leftover after parsing attributes in process `syz.5.11121'. [ 615.980253][ T3244] netlink: 9 bytes leftover after parsing attributes in process `syz.5.11121'. [ 616.126148][ T28] audit: type=1400 audit(1782653113.610:3619): avc: denied { write } for pid=3237 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 616.214506][ T28] audit: type=1400 audit(1782653113.700:3620): avc: denied { write } for pid=3254 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 616.446152][ T28] audit: type=1400 audit(1782653113.930:3621): avc: denied { write } for pid=3256 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 616.537516][ T28] audit: type=1400 audit(1782653114.020:3622): avc: denied { write } for pid=3274 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 616.581154][ T3138] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 616.626719][ T3138] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 616.644547][ T3138] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 616.669850][ T3138] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 616.679840][ T3138] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 616.743109][ T3138] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 616.794089][ T28] audit: type=1400 audit(1782653114.280:3623): avc: denied { write } for pid=3279 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 616.877480][ T3191] ================================================================== [ 616.885699][ T3191] BUG: KCSAN: data-race in fifo_open / wait_for_partner [ 616.892936][ T3191] [ 616.895302][ T3191] read-write to 0xffff88811cb8c7e4 of 4 bytes by task 3190 on cpu 0: [ 616.903389][ T3191] fifo_open+0x89/0x5b0 [ 616.907586][ T3191] do_dentry_open+0x49f/0xa60 [ 616.912301][ T3191] vfs_open+0x37/0x1e0 [ 616.916488][ T3191] path_openat+0x1b39/0x2000 [ 616.921123][ T3191] do_file_open+0x16c/0x290 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 616.925661][ T3191] do_sys_openat2+0xa0/0x130 [ 616.930283][ T3191] __se_sys_openat2+0x193/0x1f0 [ 616.935269][ T3191] __x64_sys_openat2+0x55/0x70 [ 616.940138][ T3191] x64_sys_call+0x2170/0x3020 [ 616.944833][ T3191] do_syscall_64+0x136/0x3c0 [ 616.949449][ T3191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.955348][ T3191] [ 616.957676][ T3191] read to 0xffff88811cb8c7e4 of 4 bytes by task 3191 on cpu 1: [ 616.965570][ T3191] wait_for_partner+0xc9/0x1d0 [ 616.970345][ T3191] fifo_open+0x443/0x5b0 [ 616.974608][ T3191] do_dentry_open+0x49f/0xa60 [ 616.979293][ T3191] vfs_open+0x37/0x1e0 [ 616.983369][ T3191] path_openat+0x1b39/0x2000 [ 616.988156][ T3191] do_file_open+0x16c/0x290 [ 616.992767][ T3191] do_sys_openat2+0xa0/0x130 [ 616.997377][ T3191] __x64_sys_openat+0xf2/0x120 [ 617.002154][ T3191] x64_sys_call+0x1e39/0x3020 [ 617.006844][ T3191] do_syscall_64+0x136/0x3c0 [ 617.011450][ T3191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.017463][ T3191] [ 617.019788][ T3191] value changed: 0x00000001 -> 0x00000002 [ 617.025505][ T3191] [ 617.027830][ T3191] Reported by Kernel Concurrency Sanitizer on: [ 617.034417][ T3191] CPU: 1 UID: 0 PID: 3191 Comm: syz.7.11111 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 617.045364][ T3191] Tainted: [W]=WARN [ 617.049170][ T3191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 617.059324][ T3191] ================================================================== [ 617.073612][ T28] audit: type=1400 audit(1782653114.350:3624): avc: denied { write } for pid=3297 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 617.373478][ T3138] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 617.441231][ T3138] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 617.799623][ T3178] bond0: (slave syz_tun): Releasing backup interface [ 617.998001][T26840] bridge_slave_1: left allmulticast mode [ 618.003889][T26840] bridge_slave_1: left promiscuous mode [ 618.009644][T26840] bridge0: port 2(bridge_slave_1) entered disabled state [ 618.017880][T26840] bridge_slave_0: left allmulticast mode [ 618.023911][T26840] bridge_slave_0: left promiscuous mode [ 618.029618][T26840] bridge0: port 1(bridge_slave_0) entered disabled state [ 618.056404][T26840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 618.067355][T26840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 618.083209][T26840] bond0 (unregistering): Released all slaves [ 618.134532][T26840] hsr_slave_0: left promiscuous mode [ 618.142803][T26840] hsr_slave_1: left promiscuous mode [ 618.148546][T26840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 618.161643][T26840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.205396][T26840] team0 (unregistering): Port device team_slave_1 removed [ 618.216895][T26840] team0 (unregistering): Port device team_slave_0 removed [ 618.342439][ T3017] 8021q: adding VLAN 0 to HW filter on device eth9 [ 618.442889][ T3017] 8021q: adding VLAN 0 to HW filter on device eth10 [ 618.524079][T26840] netdevsim netdevsim6 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.534009][T26840] netdevsim netdevsim6 eth3 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 618.544241][T26840] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.556143][ T3017] 8021q: adding VLAN 0 to HW filter on device eth11 [ 618.613856][T26840] netdevsim netdevsim6 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.626658][T26840] netdevsim netdevsim6 eth2 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 618.636723][T26840] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.663309][T26840] netdevsim netdevsim6 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.673151][T26840] netdevsim netdevsim6 eth1 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 618.683449][T26840] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.694768][ T3017] 8021q: adding VLAN 0 to HW filter on device eth12 [ 618.723174][T26840] netdevsim netdevsim6 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 618.733162][T26840] netdevsim netdevsim6 eth0 (unregistering): unset [0, 1] type 1 family 0 port 256 - 0 [ 618.743113][T26840] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.822161][T26840] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.862860][T26840] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.902889][T26840] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 618.945686][ T3017] 8021q: adding VLAN 0 to HW filter on device eth17 [ 618.954978][T26840] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 619.037613][T26840] lo: left allmulticast mode [ 619.042733][T26840] dvmrp8: left allmulticast mode [ 619.048595][T26840] bridge_slave_1: left allmulticast mode [ 619.054693][T26840] bridge_slave_1: left promiscuous mode [ 619.060682][T26840] bridge0: port 2(bridge_slave_1) entered disabled state [ 619.068843][T26840] bridge_slave_0: left allmulticast mode [ 619.075986][T26840] bridge_slave_0: left promiscuous mode [ 619.082894][T26840] bridge0: port 1(bridge_slave_0) entered disabled state [ 619.209962][T26840] gretap0 (unregistering): left promiscuous mode [ 619.229929][T26840] bond2 (unregistering): (slave geneve2): Releasing active interface [ 619.251488][T26840] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 619.261610][T26840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.272128][T26840] bond0 (unregistering): Released all slaves [ 619.279829][T26840] bond1 (unregistering): Released all slaves [ 619.288228][T26840] bond2 (unregistering): Released all slaves [ 619.296673][T26840] bond3 (unregistering): Released all slaves [ 619.305195][T26840] bond4 (unregistering): Released all slaves [ 619.313825][T26840] bond5 (unregistering): Released all slaves [ 619.323218][T26840] bond6 (unregistering): Released all slaves [ 619.331733][T26840] bond7 (unregistering): Released all slaves [ 619.349644][T26840] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 619.369940][T26840] bond0 (unregistering): (slave 1@ÿ): Releasing backup interface [ 619.379208][T26840] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 619.389048][T26840] bond0 (unregistering): (slave team0): Releasing backup interface [ 619.398237][T26840] bond0 (unregistering): Released all slaves [ 619.406035][T26840] bond1 (unregistering): Released all slaves [ 619.414614][ T3017] 8021q: adding VLAN 0 to HW filter on device eth18 [ 619.474039][T26840] hsr_slave_0: left promiscuous mode [ 619.479989][T26840] hsr_slave_1: left promiscuous mode [ 619.486056][T26840] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 619.493837][T26840] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 619.502222][T26840] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 619.509760][T26840] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 619.523128][T26840] veth1_vlan: left promiscuous mode [ 619.528441][T26840] veth0_vlan: left promiscuous mode [ 619.536245][T26840] veth1_macvtap: left promiscuous mode [ 619.541864][T26840] veth0_macvtap: left promiscuous mode [ 619.548136][T26840] veth1_vlan: left promiscuous mode [ 619.553631][T26840] veth0_vlan: left promiscuous mode [ 619.617087][T26840] team0 (unregistering): Port device team_slave_1 removed [ 619.678472][T26840] team0 (unregistering): Port device team_slave_1 removed [ 619.688921][T26840] team0 (unregistering): Port device team_slave_0 removed [ 619.717343][ T3017] 8021q: adding VLAN 0 to HW filter on device eth19 [ 619.828728][ T3017] 8021q: adding VLAN 0 to HW filter on device eth20 [ 619.945951][ T3017] 8021q: adding VLAN 0 to HW filter on device eth21 [ 620.036250][T26840] IPVS: stop unused estimator thread 0... [ 620.042360][T26840] IPVS: stop unused estimator thread 0... [ 620.054704][ T3017] 8021q: adding VLAN 0 to HW filter on device eth22 [ 620.171306][ T3017] 8021q: adding VLAN 0 to HW filter on device eth23 [ 620.279609][ T3017] 8021q: adding VLAN 0 to HW filter on device eth24 [ 620.630486][ C1] ip6_tunnel: ip6gre2 xmit: Local address not yet configured!