last executing test programs: 3m18.00393933s ago: executing program 0 (id=1751): r0 = gettid() tkill(r0, 0x7) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) inotify_init1(0x800) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000300)={'filter\x00', 0x7, 0x4, 0x3c8, 0x1d0, 0x0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@arp={@loopback, @private=0xa010101, 0xff, 0xffffffff, 0x4, 0x6, {@empty, {[0xff, 0xff, 0x0, 0x0, 0x0, 0xff]}}, {@empty, {[0x0, 0xff, 0x0, 0xff, 0xff]}}, 0xec, 0x8000, 0x8, 0xfff7, 0x3, 0x80, 'batadv0\x00', 'dummy0\x00', {0xff}, {0xff}, 0x0, 0x560}, 0xc0, 0xe8}, @unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x0, {0x7}}}, {{@arp={@broadcast, @remote, 0xff, 0xffffff00, 0x0, 0xb, {@empty, {[0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x1, 0xffff, 0x0, 0x1, 0x66e, 0x1, 'veth0_to_hsr\x00', 'nr0\x00', {}, {0xff}, 0x0, 0x144}, 0xc0, 0x110, 0x6000000}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @mac=@remote, @empty, @empty, 0x8, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) 3m17.901609942s ago: executing program 0 (id=1754): socket$inet6_udp(0xa, 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8001}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000600)=@newtclass={0x38, 0x28, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1, 0x8001}, {0x0, 0x8001}}, [@tclass_kind_options=@c_drr={{0x8}, {0xc, 0x2, @TCA_DRR_QUANTUM={0x8, 0x1, 0x3e8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000700)=@newtfilter={0x40, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x0, 0x8001}, {0x3, 0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0xc, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0x8001}}]}}]}, 0x40}}, 0x0) close(0x4) 3m17.819159374s ago: executing program 0 (id=1757): r0 = open(&(0x7f0000000040)='./file0\x00', 0x101040, 0x4c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x0, 0x1, 0xfffa}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x790f0000) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x4000000) setxattr$security_capability(&(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), &(0x7f0000002100)=@v3={0x3000000, [{0x5, 0x1}, {0x101, 0x9}]}, 0x18, 0x1) 3m16.684211763s ago: executing program 0 (id=1761): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=@newqdisc={0x434, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {0x3}, {}, {0x5, 0x1}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x408, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x62b9, 0x5, 0xfffffff7, 0x5, 0x3, 0xe1cb, 0x5, 0x1, 0x3, 0x0, 0x1, 0x2, 0x6, 0xacd, 0x0, 0x364, 0x1, 0x2, 0xffffff44, 0x3, 0x2, 0x8, 0x3, 0x6, 0xffffffc0, 0xb, 0x688, 0xffff, 0x0, 0x2, 0xffdffeff, 0x0, 0xb, 0x5, 0x0, 0x5, 0xffffadc0, 0x8001, 0xf, 0x1, 0x8d2a00, 0x8, 0xf, 0x4ba, 0x1, 0x80, 0xffff, 0x1, 0x7, 0x0, 0x400, 0xe5, 0x93, 0x2, 0x45a5, 0x8, 0x6, 0x4, 0x0, 0x59, 0x3, 0x80, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x2, 0x3, 0x4, 0x7f, 0x10000101, 0xde, 0x10, 0x7, 0x6, 0x7f, 0xfff, 0x6, 0x9, 0xf7, 0x5, 0x2, 0x81, 0x0, 0x6, 0x7, 0x1, 0x437, 0x6, 0x3, 0x2, 0x7000000, 0x5, 0x9, 0xecc, 0x6, 0x4, 0x8, 0x400, 0x7a5, 0x9, 0x9, 0x9, 0x9, 0x8, 0x0, 0x3, 0x7ff, 0x5, 0x6, 0x4, 0x7, 0x10, 0x4001d1da, 0x8, 0xbdb, 0x1, 0x8, 0x8001, 0xe3c8, 0xffffffff, 0xd, 0x6, 0x4, 0x9, 0x7fffffff, 0x3, 0xb8b4, 0x723, 0x15, 0x9367, 0x81, 0x400000, 0x9, 0x6, 0x75, 0x1ff, 0xc695, 0x4, 0xf, 0x7, 0x3, 0x0, 0x3ff, 0x8000, 0x80ff, 0x4, 0x0, 0x6496, 0x7f, 0x3, 0x0, 0xf528, 0x6, 0x80000000, 0x6, 0x157b, 0x7, 0x40, 0x1, 0x10001, 0x3, 0x9, 0x2, 0x98de, 0x2450, 0x86d, 0x2, 0x7, 0x7, 0xfffffffa, 0x800, 0xfffffffb, 0x4, 0xb6, 0x5, 0x7fff, 0x9f4c, 0x1, 0x8, 0xe, 0x11d, 0x7fff, 0xf, 0x8, 0x3, 0xa, 0x9, 0x9, 0x2, 0x4, 0x2, 0x8, 0x5, 0x5, 0x401, 0x9, 0x4b8, 0xa78, 0xec8, 0x1, 0xfffffffa, 0x80020000, 0x0, 0x0, 0x7f, 0x0, 0x5, 0xfffffffa, 0x6, 0x175b, 0x7fffffff, 0x4, 0x4, 0xffff8001, 0x8001, 0xffff, 0x5, 0x0, 0x8, 0x5, 0x10, 0x7fff, 0xffffff00, 0x3, 0x8, 0x9268, 0x80000000, 0x2, 0x7, 0x4, 0x3, 0x4, 0xced, 0x1, 0xa524, 0x7, 0x81f, 0x3, 0x10, 0x80, 0x1ff, 0x1109, 0x9, 0x1, 0x0, 0x2, 0x0, 0x8, 0x3, 0x3, 0x6, 0x4]}]}}]}, 0x434}, 0x1, 0x0, 0x0, 0x2004009c}, 0x0) 3m16.407986969s ago: executing program 0 (id=1768): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3c30, 0x1, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x3000408, &(0x7f0000000440)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$eJzs3c9vVFsdAPDvnXZoKQMFZaFGBRFFQ5j+ABqCC2GjMYTESFy5gNoOTdMZpum0SCuLsnRvIokr/RPcuTBh5cKdO925wYUJKnkv9CVvMS/3zqUd2g7te7Qd6Hw+ye2955xhvufMcM6Ze2B6AuhZZyNiNSKORMS9iBjO85P8iButI33cq5ePp9ZePp5Kotm8878kK0/zou3PpI7lzzkYET/7ccQvk61xG8src5PVamUhT48s1uZHGssrl2YLec74xNjE6LXLV8f3rK1nan968aPZWz//y5+/8fzvq9//dVqt0m+OZ2Xt7dhLraYXo9SW1x8Rt/YjWJf0539/+PCkve1LEXEu6//D0Ze9mwDAYdZsDkdzuD0NABx26f1/KZJCOV8LKEWhUC631vBOx1ChWm8sXhyuLz2YjmwN62QUC/dnq5XRfK3wZBSTND2WXW+kxzelL0fEqYj47cDRLF2eqlenu/nBBwB62LFN8//HA635HwA45Aa7XQEA4MCZ/wGg95j/AaD3fI7537cDAeCQcP8PAL3H/A8AvWfH+f/JwdQDADgQP719Oz2aa/nvv55+uLz0g9LDS9OVxly5tjRVnqovzJdn6vWZaqU81Wzu9HzVen1+7Mp6srG8crdWX3qweHe2NjlTuVsp7nN7AICdnTrz7J9JRKxeP5od0baXg7kaDrdCtysAdE1ftysAdI3v80Dv2sU9vmUAOOS22aL3DR3/i9BTm7/Ch+rCV63/Q6+y/g+964ut//9wz+sBHDzr/9C7ms3Env8A0GOs8QPv9O//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0KNK2ZEUytle4Kvpz0K5HHE8Ik5GMbk/W62MRsSJiPjHQHEgTY91u9IAwDsq/CfJ9/+6MHy+tLn0SPLJQHaOiF/9/s7vHk0uLi6Mpfn/X89ffJrnjx/pRgMAgHY3tma15un83HYj/+rl46nXx0FW8cXN1uaiady1/GiV9Ed/dh6MYkQMfZTk6Zb080rfHsRffRIRX9lo/6O2CKVsDaS18+nm+Gns4/sQf+P13xy/8Eb8QlaWnovZa/HlPagL9JpnN1vjZN730i6W979CnM3O2/f/wWyEenevx7+1LeNfYX3869sSP8n6/Nn19Ntr8uLKX3+yJbM53Cp7EvG1/u3iJ+vxkw7j7/ldtvFfX//muU5lzT9EXIjt47fUsmF2ZLE2P9JYXrk0W5ucqcxUHoyPT4xNjF67fHV8JFujbv3823Yx/nv94olO8dP2D3WIP7hD+7+zy/b/8dN7v/jWW+J/79vbv/+n3xI/nRO/u8v4k0M3Om7fncaf7tD+nd7/i7uM//zfK9O7fCgAcAAayytzk9VqZWGHi/Sz5k6PcfFhXsRqxHtQDRfv1UW3RyZgv210+m7XBAAAAAAAAAAAAAAA6KSxvDI3EPv7daJutxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIDD67MAAAD//w/PzvM=") mkdir(&(0x7f0000000140)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) r0 = socket$kcm(0x10, 0x400000002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="000000000000020000000000000000", @ANYRES32, @ANYBLOB="da0f000000", @ANYRES32], 0x50) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="1c0000005e0007"], 0xfe33) 3m15.800439424s ago: executing program 0 (id=1779): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)=')(){\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, 0x0, &(0x7f0000000200)=""/255}, 0x20) 3m0.597514566s ago: executing program 32 (id=1779): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x7, 0xffffffffffffffff, 0x1) r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0xd, 0x2, 0x0, 0x0, 0x0, 0x0, 0x20020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0}, 0xc800, 0x0, 0xfffffffc, 0x9, 0xb0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x40082406, &(0x7f0000000040)=')(){\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x8, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r1, 0x0, &(0x7f0000000200)=""/255}, 0x20) 2m20.983445187s ago: executing program 4 (id=2298): socket$netlink(0x10, 0x3, 0x8000000004) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0xc880, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty, 0x400}, 0x1c) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000055000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1de1, &(0x7f0000000040)={0x0, 0x68a2, 0xc000, 0x800007, 0x41}) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m20.84551491s ago: executing program 4 (id=2300): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a7c000000060a0b04000000000000000002000000500004804c0001800a00010072616e67650000003c0002801c0004800a000100099f51a8226577b50a76b09a0d4f02bce80000000c000380050001005d000000080001400000000108000240000000010900010073797a30000000000900020073797a32"], 0xa4}}, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f00000002c0)=0xe, 0x4) syz_emit_ethernet(0x5e, &(0x7f0000000280)={@link_local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, ']\x00', 0x28, 0x3a, 0xff, @dev, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @mcast2={0xff, 0x5}, @remote}}}}}}, 0x0) 2m20.555646317s ago: executing program 4 (id=2305): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x44000160) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r1, 0xffffffffffffffff, 0x0, 0xf2) prlimit64(0x0, 0xe, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x10ffe, 0x0, 0x2, 0x8, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(0x0, 0x0, 0xffffffffffffffff, r2, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) close(0x3) 2m20.550922857s ago: executing program 4 (id=2307): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./trace\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/trace_pipe\x00', 0x800, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m20.42474946s ago: executing program 4 (id=2311): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0x7ff, 0x6, 0x4, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) setns(0xc9, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) epoll_create1(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d40)=@newtaction={0x68, 0x30, 0x30b, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r2}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) 2m19.970802991s ago: executing program 4 (id=2317): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00') 2m19.936749922s ago: executing program 33 (id=2317): open(&(0x7f0000000280)='.\x00', 0x0, 0x0) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080)=@known='system.posix_acl_access\x00') 6.076194981s ago: executing program 6 (id=3896): openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(0x0, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'sit0\x00'}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) write(r0, &(0x7f00000001c0)="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", 0x1000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r2, &(0x7f0000000240)={0xa, 0x2, 0x1000, @empty}, 0x1c) recvfrom$inet6(r2, 0x0, 0x0, 0x10102, &(0x7f0000000340)={0xa, 0x4e24, 0x4, @loopback, 0x6}, 0x1c) write(r1, &(0x7f0000000180)='r:s/p ./file0:0', 0xf) 5.858832646s ago: executing program 3 (id=3900): openat$tun(0xffffffffffffff9c, 0x0, 0xa0880, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f000004d000/0x2000)=nil, 0x2000, 0xb) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x38, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x41420, 0x80}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x10000}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x38}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080) 5.127914184s ago: executing program 6 (id=3904): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000c00), 0x1, 0xb87, &(0x7f0000002380)="$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") r0 = open(&(0x7f0000000200)='./file1\x00', 0x4827e, 0x151) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0xc000) fallocate(r0, 0x0, 0x0, 0x8800000) creat(&(0x7f00000004c0)='./bus\x00', 0x20) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000540)='./bus\x00', 0x44000, 0x0) preadv2(r1, &(0x7f00000000c0)=[{&(0x7f0000001200)=""/4083, 0xffffffdf}], 0x1b, 0x0, 0x0, 0x1) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r2, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 5.127662714s ago: executing program 2 (id=3905): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) 4.979835908s ago: executing program 3 (id=3906): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe(0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r0, &(0x7f00000036c0)=[{{&(0x7f0000000200)={0x2, 0x4e25, @multicast1}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000580)="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", 0x5c1}], 0x1}}], 0x40000000000021f, 0x4a080) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000fbff27bd7002fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14100400040004001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) write$binfmt_misc(r0, 0x0, 0x0) 4.446652941s ago: executing program 1 (id=3908): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, 0x0, 0x0, 0xfffffdff, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000075"], 0x0, 0x100, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x26, 0x0, 0x0, 0x0, 0x20000000}, 0x94) r2 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x56, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0, 0xe}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) openat$ppp(0xffffffffffffff9c, 0x0, 0x140, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x5, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') 4.446113151s ago: executing program 3 (id=3909): perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) openat(0xffffffffffffff9c, &(0x7f00000006c0)='.\x00', 0x200201, 0x161) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, 0x0, 0x0) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 4.226446417s ago: executing program 2 (id=3911): signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6]}, 0x8) fsopen(&(0x7f0000000100)='ext4\x00', 0x1) mknodat(0xffffffffffffffff, 0x0, 0x40, 0x9) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0xd, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 3.919472424s ago: executing program 1 (id=3913): fallocate(0xffffffffffffffff, 0x0, 0x0, 0x2) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000940)={{}, 0x0, 0x0}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000c00)={0xffffffffffffffff, 0x0, 0x2000, &(0x7f0000000b40)={@_ha_fsid={[0x6]}, {0x3, 0xc, 0x7, 0xd1a}}, 0x7, &(0x7f0000000b80)={@_ha_fsid}, 0x0}) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x4, 0x3cd, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000007}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x800) syz_usb_connect$uac2(0x3, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000feb000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xfffffec0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x20c8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="020a3b68812300000004", @ANYRES32], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3.772510168s ago: executing program 2 (id=3915): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x4, 0x6, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x4000}, 0x0) r0 = socket(0x1, 0x3, 0x0) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x40002, 0x0) ioctl$RFKILL_IOCTL_NOINPUT(r1, 0x5202) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') r2 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f00000007c0)={'pim6reg\x00', 0x7}) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x4) socket$inet6_sctp(0xa, 0x1, 0x84) utimensat(0xffffffffffffffff, &(0x7f0000000740)='./file0\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'sit0\x00', 0x0, 0x40, 0x7807, 0x80000000, 0x7959373d, {{0x9, 0x4, 0x2, 0x9, 0x24, 0x68, 0x0, 0x7, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0xc, 0x97, 0x3, 0x4, [{@private=0xa010100, 0xfffffe01}]}, @generic={0x1d, 0x2}]}}}}}) 3.711869559s ago: executing program 6 (id=3917): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x9, 0x9}) unshare(0x22020400) fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x25, 0x5}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x2, 0x8, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000000d40)={&(0x7f0000000c40)={0x24, @short={0x2, 0x0, 0xaaa1}}, 0x14, &(0x7f0000000d00)={&(0x7f0000000c80)="7d466ea93aac4746f8845947934a3c7c3fdc68a84d0776765f075c7829ace174eac77d5c60c31549866a51feeeb307fcb24ebe214a9e191e5eec641ec637ded3db70bbf14ed8e11b2930a4631e410bcc47aeeef417d8243215c6f1157b9aad6a88b6b8502b1f029e2f6dbd6f48dcb6", 0x6f}, 0x1, 0x0, 0x0, 0x4000}, 0x48804) 3.711455969s ago: executing program 5 (id=3918): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0x7, 0x41217df2c9ce37e8}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 3.614889881s ago: executing program 5 (id=3919): mount(0x0, &(0x7f0000000200)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) write(r0, &(0x7f0000000440), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x100, 0x0, 0x0, 0x0, 0xe9f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r2}, 0x14) syz_emit_ethernet(0xfe4f, &(0x7f0000000240)=ANY=[], 0x0) 3.570018113s ago: executing program 2 (id=3920): prlimit64(0x0, 0xe, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x100000, 0x4, 0x2, 0x0, 0x80, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffff7fffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100), 0x10}, 0x23) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x702, 0x72, 0x0, &(0x7f0000000040)="e460334400005000eb00c15286ddea7b03c6b8564a1ef1cef05bdaa5958a2cb1087dad203447dba73666d209bd02246fe3e0f3be78a37ba851da39f7594a66e7ab3666ee250fa7d5595238df44f22828d26e2591592d02f875b0cea9b4cbbf37fcd33bb7c668e43a945608d8ea0da812d7c7", 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x29, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd77, 0x6, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r3, 0x0, 0x0, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000005c0)={0x0, 0x0, 0xfffffffffffffd83, 0x0, 0x7}, 0x28) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 3.513310503s ago: executing program 5 (id=3921): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, 0x0, 0x24040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0xfffffffffffffffc, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWSET={0x2c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2, 0x0, 0x20}, [@NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @notrack={{0xc}, @void}}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x88}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) syz_open_procfs(0x0, 0x0) 3.513131223s ago: executing program 3 (id=3922): openat$selinux_load(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20530, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xfffffffc, 0x0, 0x100, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, &(0x7f0000000180)=0xd, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000000c0)={0x64, r2, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x48, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000431}, 0x4040084) 3.332787598s ago: executing program 1 (id=3923): pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c76287d", "3d8efa05fdffffff"}, 0x28) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r2, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28) writev(r1, &(0x7f0000010b40)=[{&(0x7f0000000140)='X', 0x1}], 0x1) splice(r1, 0x0, r0, 0x0, 0x2, 0x0) 3.329781848s ago: executing program 1 (id=3924): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x803, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0600000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000004"], 0x50) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r6, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 2.704803684s ago: executing program 5 (id=3925): r0 = perf_event_open(0x0, 0x0, 0x1, 0xffffffffffffffff, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r2, 0x0) r3 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc40e, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0xc884, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, r2, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000002000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r5, 0xfffff000, 0xe, 0x0, &(0x7f0000000300)="61df712bc884fed5722780b605a7", 0x0, 0x7fff, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_clone(0xb00b000, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = socket$kcm(0xa, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x4e24, 0x0, @mcast1}, 0x80, 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="c805000000000000290000000b00000043b6"], 0x5c8}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x2400, 0x8b) 2.599575716s ago: executing program 5 (id=3926): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x5, 0x40, 0x7, 0x0, 0x0, 0xd299, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x5, 0x2, @perf_config_ext={0x8, 0x8}, 0x100882, 0x7ff, 0x6, 0x6, 0xb, 0x2, 0x3ff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x2b, 0x1, 0x0, 0x0, 0x0, 0x7, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x9}, 0x1efb0, 0x1002, 0x20da, 0x0, 0xa, 0x20005, 0x8a6, 0x0, 0x0, 0x0, 0x20000006}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) prctl$PR_GET_THP_DISABLE(0x2a) pread64(0xffffffffffffffff, &(0x7f0000000380)=""/148, 0x94, 0x40002f) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x3, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7a}, 0x94) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_pidfd_open(r0, 0x0) wait4(r0, 0x0, 0x40000000, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0xc040ff0b, &(0x7f0000000180)) 476.973928ms ago: executing program 5 (id=3927): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x300001a, &(0x7f0000000000)=ANY=[], 0xfc, 0x2c7, &(0x7f0000000100)="$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") r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_MOVE(0x1e, r0, 0xfffffffffffffffe, r0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000080)=""/4057, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000000a00)="c7", 0x1) shutdown(r1, 0x1) sendfile(r2, r1, 0x0, 0x3ffff) sendfile(r2, r1, 0x0, 0x7ffff000) shmget(0x0, 0x2000, 0x80, &(0x7f0000ffc000/0x2000)=nil) 476.713098ms ago: executing program 2 (id=3928): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x100c, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0xd6, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0xc}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r0, &(0x7f0000000280), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x80002, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa56, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000a00)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0xa2721, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x40}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 476.549358ms ago: executing program 6 (id=3929): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000180)=@newqdisc={0x40, 0x28, 0x4ee4e6a52ff56541, 0x70bd27, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff, 0xffff}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0x7, 0x41217df2c9ce37e8}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4005c}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000640)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x5001, 0xfffffdfb, {0x0, 0x0, 0x0, r3, {0x4}, {0xffff, 0xffff}, {0x0, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 275.909663ms ago: executing program 3 (id=3930): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)={0xf8, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DEST={0x58, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e20}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e22}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x32bd}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x7}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xe}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0xfff9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xe6}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1ff}, @IPVS_CMD_ATTR_DAEMON={0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0xf8}, 0x1, 0x0, 0x0, 0x840}, 0x8001) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=ANY=[@ANYBLOB="af08f9ffffffffffffff02000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100013800002c00000000000000b7020000000000007b9af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffc7020000080000001822", @ANYRES32, @ANYBLOB="0000000000000000b7050000080000004608f0ff76000000bf9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000280)={'security\x00', 0x6, "a3f88b58d83c"}, &(0x7f0000000080)=0x2e) write$tun(r0, &(0x7f0000000700)={@val={0x0, 0x805}, @void, @x25={0x0, 0x0, 0x1, "0b690000497a8fb4b87a"}}, 0x11) 273.091733ms ago: executing program 2 (id=3940): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(0x0, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xa}, 0x0, 0x0, 0x9}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0xa30080, &(0x7f0000000500)={[{@usrquota}, {@journal_path={'journal_path', 0x3d, './file1'}}, {@noauto_da_alloc}, {@nolazytime}, {@minixdf}, {@orlov}, {@inlinecrypt}, {@stripe={'stripe', 0x3d, 0x5}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@nombcache}, {@resuid}], [{@obj_role={'obj_role', 0x3d, '|pu\t&0&&\t'}}, {@context={'context', 0x3d, 'staff_u'}}]}, 0x1, 0x5ad, &(0x7f0000000b80)="$eJzs3V9rW+UfAPDvSdv96fb7tYMx1AsZ7MLJXLq2/pkgOC9FhwO98mYLbVZG02U06VjrwO3C3XgjQxBxIL4AwUsvh2/A1+DFQAdDRpkXIkROetJlbdqsadfE5fOB0z5Pzkme53tOnifPk3PCCaBvHU3/5CJejIivkoiRpnWDka08mm0X16eWH16fSqJW+/jPJJKISPON7ZPs/4Es80JE/PJFxInc+nIri0uzhVKpOJ/lx6pzV8Yqi0snL80VZoozxcsTk5On35icePutN3cs1lfP/fXtR3ffP/3lseVvfrx/6HYSZ+Jgtq45jm240Zw5WvgnSw3FmTUbju9AYb0k6XYF6MhA1s6HIu0DRmIga/XA8+/ziKgBfSp53P4/HVjsalWAXdUYB6Tz38bS3RHJ7nrw3soEqB77nub4B7PvPPbV50bDy8kTM6N0vju6A+WnZfz8x53b6RKbfw+xv00eYEtu3IyIU4OD6/v/JOv/Oneq/uXx5taW0W+fP9BNd9Pxz2utxn+51fFPtBj/HGjRdjvRvv3n7u9AMRtKx3/vtBz/rnZdowNZ7n/1Md9QcvFSqXgqIv4fEcej1vbUx+nle7Xm/G9N6ebxX7qk5TfGglk97g/uffL1pgvVQkTs2UbYqx7cjHhpsFX8yerxTwMcXhNluj/OPWUZR4p3Xt5oXfv4n63aDxGvtDz+jwNONj8/OVZ/P4w13hXrPbp15NeNyu92/OnxH948/tGk+XxtZetlfL/v7+JG6zaNfzE2ev//NJx8Uk83GsG1QrU6Px6xJ/lw/eMTj5/byDe2T+M/fmzz/i9p0f+lk68LaWJv+/hvHb51oaP4mzxFMR1J45/e0vHfeuLeB59913n86fF/vZ46nj2S9X+tZTvqaSu43f0HAAAAAAAAvSQXEQcjyeVX07lcPr9yfcfhGM6VypXqiYvlhcvTUf+t7GgM5RpnukearocYz66HbeQn1uQnI+JQRHw9sL+ez0+VS9PdDh4AAAAAAAAAAAAAAAAAAAB6xIENfv+f+n2g27UDnrn6jQ2e1R0GgJ7W9pb/O3GnJ6AntW3/wHNL+4f+pf1D/9L+oX9p/9C3HtVWdLseQBes+fzPdasewO4z/gcAAAAAAAAAAAAAAAAAAAAAAAAAAIAdde7s2XSpLT+8PpXmp68uLsyWr56cLlZm83MLU/mp8vyV/Ey5PFMq5qfKc+1er1QuXxmfiIVrY9VipTpWWVw6P1deuFw9f2muMFM8XxzalagAAAAAAAAAAAAAAAAAAADgv6WyuDRbKJWK87uYGI4uFLqNxLvRE9VoSuyLHQ5wRUdPH+z63tiNRG0kogeq0VHiZnZ4t/asLnZKAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDGvwEAAP//QE8z5g==") r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbf6, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0xffffffff, 0x6, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) pread64(r0, &(0x7f0000000100)=""/93, 0x5d, 0x327) 253.710074ms ago: executing program 1 (id=3931): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) pipe(0x0) perf_event_open(0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) sendmmsg$inet(r0, &(0x7f00000036c0)=[{{&(0x7f0000000200)={0x2, 0x4e25, @multicast1}, 0x10, 0x0}}, {{&(0x7f00000001c0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000001640)=[{&(0x7f0000000580)="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", 0x5c1}], 0x1}}], 0x40000000000021f, 0x4a080) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'dummy0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000fbff27bd7002fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="14100400040004001c00128009000100766c616e000000000c000280060001000400000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x4c}, 0x1, 0x0, 0x0, 0x28001}, 0x8000002) write$binfmt_misc(r0, 0x0, 0x0) 156.991376ms ago: executing program 6 (id=3932): mount(0x0, &(0x7f0000000200)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/tty/ttyS0/console\x00', 0x2, 0x0) write(r0, &(0x7f0000000440), 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000004c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xd}, 0x100, 0x0, 0x0, 0x0, 0xe9f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_emit_ethernet(0x0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, &(0x7f0000000000), &(0x7f0000000040)=r4}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r4, r2}, 0x14) syz_emit_ethernet(0xfe4f, &(0x7f0000000240)=ANY=[], 0x0) 147.296046ms ago: executing program 3 (id=3933): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) signalfd4(0xffffffffffffffff, &(0x7f0000000040)={[0x7fffffffffffffff]}, 0x8, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) ptrace(0x10, r2) ptrace$peeksig(0x4209, r2, &(0x7f0000000140)={0x0, 0x0, 0x4e}, &(0x7f0000000fc0)) 100.269447ms ago: executing program 1 (id=3934): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x1, 0x3c, &(0x7f0000000640), 0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={r2, 0x7}, 0x8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000001840)=@raw={'raw\x00', 0x8, 0x3, 0x548, 0x0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x478, 0xffffffff, 0xffffffff, 0x478, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x9, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@ipv6={@remote, @private2, [0xffffff00, 0xffffffff, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff, 0xff000000], 'batadv0\x00', 'bridge_slave_1\x00', {}, {0xff}, 0x2b, 0x2, 0x5, 0x5}, 0x0, 0x298, 0x2b8, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x4, 0x1, 0x1, 'syz0\x00'}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x6, 0x2, 0x0, 'syz0\x00'}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5a8) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000000)=0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x4f, 0x2, {{0xfffff92d, 0x3, 0x6361, 0x2, 0xffffffff, 0x3}, [@TCA_NETEM_JITTER64={0xc, 0xb, 0xfffffffffffffffa}, @TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x2}, @TCA_NETEM_CORRUPT={0xc, 0x4, {0x5, 0x2}}, @TCA_NETEM_JITTER64={0xc, 0xb, 0xad}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000d2}, 0x0) sched_setscheduler(r4, 0x0, &(0x7f0000000040)=0x40) 0s ago: executing program 6 (id=3935): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000000)={[{@errors_remount}, {@grpquota}]}, 0x8, 0x4fe, &(0x7f0000000a40)="$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") prctl$PR_MCE_KILL(0x4e, 0x1, 0x1000000) r0 = creat(0x0, 0x182) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x181242, 0x148) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_config_ext={0x807, 0x1}, 0x0, 0x400, 0xc40, 0x2, 0x0, 0x7, 0x1, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000540)={'netdevsim0\x00', 0x0}) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c0100001000130700000000ffdbdf25fc010000000000000000000000000000ff0200000000000000000000000000010004fffe4e2100020000000021000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="fe800000000100000000000000000037000004d232000000fc020000000000000000000000000000050000000000000000000000000000000000000000000000090000000000000001000000ffffffff0000000000000000030000800000000043050000000000000400000000000000ffffffffffffff7f000100000000000001000000000000000000000000000000000000002cbd70000535004002000400500000000000000060001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080000000210466d38547aa140db9a200000000c538c7cb7a0c001c00", @ANYRES32=r3], 0x15c}, 0x1, 0x0, 0x0, 0x880}, 0x2014) r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x182) ftruncate(0xffffffffffffffff, 0x6000000) fallocate(r4, 0x10, 0xbf5, 0x8) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000740)={0xc, r0, 0x6, 0x13, 0xa697, 0x3}) kernel console output (not intermixed with test programs): 0 ip=0x7f11d271e0d9 code=0x7ffc0000 [ 220.169659][ T28] audit: type=1326 audit(1786261685.910:1102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10255 comm="syz.2.2163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d271e0d9 code=0x7ffc0000 [ 220.197273][ T28] audit: type=1326 audit(1786261685.910:1103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10255 comm="syz.2.2163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d271e0d9 code=0x7ffc0000 [ 220.225749][ T28] audit: type=1326 audit(1786261685.910:1104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10255 comm="syz.2.2163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f11d271e0d9 code=0x7ffc0000 [ 220.238024][T10263] netlink: 'syz.1.2164': attribute type 1 has an invalid length. [ 220.253244][ T28] audit: type=1326 audit(1786261685.910:1105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10255 comm="syz.2.2163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d271e0d9 code=0x7ffc0000 [ 220.286149][T10251] bond9: (slave bridge5): making interface the new active one [ 220.286192][T10251] bridge5: entered promiscuous mode [ 220.300228][T10251] bond9: (slave bridge5): Enslaving as an active interface with an up link [ 220.301121][ T28] audit: type=1326 audit(1786261685.910:1107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10255 comm="syz.2.2163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d271e0d9 code=0x7ffc0000 [ 220.336953][ T28] audit: type=1326 audit(1786261685.910:1108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10255 comm="syz.2.2163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d271e0d9 code=0x7ffc0000 [ 220.364355][ T28] audit: type=1326 audit(1786261685.910:1106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10255 comm="syz.2.2163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d271e0d9 code=0x7ffc0000 [ 220.392570][T10263] 8021q: adding VLAN 0 to HW filter on device bond10 [ 220.476127][T10265] bond10: (slave gretap1): making interface the new active one [ 220.484584][T10265] bond10: (slave gretap1): Enslaving as an active interface with an up link [ 220.661747][T10263] netlink: 'syz.1.2164': attribute type 10 has an invalid length. [ 220.688549][T10263] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2164'. [ 220.709677][T10263] : entered promiscuous mode [ 220.839839][T10263] bond8: (slave ): Releasing active interface [ 221.064636][T10279] xt_hashlimit: size too large, truncated to 1048576 [ 221.080455][T10279] xt_hashlimit: max too large, truncated to 1048576 [ 221.098541][T10279] xt_hashlimit: Unknown mode mask 4718EC78, kernel too old? [ 221.276898][T10289] netlink: 'syz.1.2171': attribute type 1 has an invalid length. [ 221.292247][T10289] 8021q: adding VLAN 0 to HW filter on device bond11 [ 221.364043][T10289] bond11: (slave ip6gretap1): making interface the new active one [ 221.375416][T10289] bond11: (slave ip6gretap1): Enslaving as an active interface with an up link [ 221.751534][T10310] netlink: 'syz.1.2180': attribute type 21 has an invalid length. [ 222.323263][T10333] lo speed is unknown, defaulting to 1000 [ 225.922083][T10387] xt_CT: You must specify a L4 protocol and not use inversions on it [ 226.138309][ T28] kauditd_printk_skb: 22 callbacks suppressed [ 226.138327][ T28] audit: type=1400 audit(1786261691.940:1131): avc: denied { setopt } for pid=10400 comm="syz.4.2213" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 226.871293][ T28] audit: type=1400 audit(1786261692.670:1132): avc: denied { kexec_image_load } for pid=10428 comm="syz.5.2221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 227.164111][T10442] netlink: 3084 bytes leftover after parsing attributes in process `syz.4.2228'. [ 227.187720][T10442] netlink: 'syz.4.2228': attribute type 1 has an invalid length. [ 227.211257][T10442] netlink: 193500 bytes leftover after parsing attributes in process `syz.4.2228'. [ 227.262406][T10448] IPVS: persistence engine module ip_vs_pe_À not found [ 227.271785][ T28] audit: type=1326 audit(1786261693.070:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10443 comm="syz.2.2229" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d271e0d9 code=0x7fc00000 [ 227.350130][ T28] audit: type=1326 audit(1786261693.070:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10443 comm="syz.2.2229" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f11d271e0d9 code=0x7fc00000 [ 227.422798][T10454] loop4: detected capacity change from 0 to 512 [ 227.430958][T10454] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 227.497845][T10454] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.537619][T10454] ext4 filesystem being mounted at /439/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 227.644329][T10474] netlink: 'syz.1.2236': attribute type 13 has an invalid length. [ 227.670306][ T3294] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 228.766491][ T28] audit: type=1400 audit(1786261694.570:1135): avc: denied { read } for pid=10508 comm="syz.5.2245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 229.187375][T10524] lo: Caught tx_queue_len zero misconfig [ 229.239252][T10524] batadv0: Caught tx_queue_len zero misconfig [ 229.282943][T10524] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.2251'. [ 230.020408][T10546] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2260'. [ 230.185994][T10548] infiniband syz1: set down [ 230.191120][T10548] infiniband syz1: added veth0 [ 230.204425][T10548] RDS/IB: syz1: added [ 230.219365][T10548] smc: adding ib device syz1 with port count 1 [ 230.226427][T10548] smc: ib device syz1 port 1 has no pnetid [ 230.915669][T10597] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 230.931347][T10597] syzkaller0: entered promiscuous mode [ 230.942809][T10597] syzkaller0: entered allmulticast mode [ 230.955175][T10602] tipc: Started in network mode [ 230.960205][T10602] tipc: Node identity 4, cluster identity 4711 [ 230.969600][T10602] tipc: Node number set to 4 [ 232.793639][T10661] xt_CT: You must specify a L4 protocol and not use inversions on it [ 232.992006][ T28] audit: type=1400 audit(1786261698.790:1136): avc: denied { read } for pid=3294 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 233.001792][ T3294] audit: audit_backlog=65 > audit_backlog_limit=64 [ 233.028977][ T28] audit: type=1400 audit(1786261698.790:1137): avc: denied { open } for pid=3294 comm="syz-executor" path="/452/trace" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 233.033684][ T3294] audit: audit_lost=1 audit_rate_limit=0 audit_backlog_limit=64 [ 233.053829][ T28] audit: type=1400 audit(1786261698.790:1138): avc: denied { read } for pid=3294 comm="syz-executor" name="instances" dev="tracefs" ino=1161 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 233.065829][ T3294] audit: backlog limit exceeded [ 233.095066][ T3294] audit: audit_backlog=65 > audit_backlog_limit=64 [ 233.103681][ T3294] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 233.110935][ T28] audit: type=1400 audit(1786261698.790:1139): avc: denied { write } for pid=3294 comm="syz-executor" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 233.149866][ T3294] audit: backlog limit exceeded [ 233.953104][T10700] lo speed is unknown, defaulting to 1000 [ 234.485692][T10700] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.496617][T10700] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.504138][T10700] bridge_slave_0: entered allmulticast mode [ 234.512288][T10700] bridge_slave_0: entered promiscuous mode [ 234.519461][T10700] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.526599][T10700] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.534176][T10700] bridge_slave_1: entered allmulticast mode [ 234.540926][T10700] bridge_slave_1: entered promiscuous mode [ 234.559273][T10700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 234.569971][T10700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 234.597766][T10700] team0: Port device team_slave_0 added [ 234.604709][T10700] team0: Port device team_slave_1 added [ 234.621685][T10700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.628791][T10700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.655096][T10700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.666597][T10700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.673861][T10700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 234.700166][T10700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.729151][T10700] hsr_slave_0: entered promiscuous mode [ 234.735490][T10700] hsr_slave_1: entered promiscuous mode [ 234.741385][T10700] debugfs: 'hsr0' already exists in 'hsr' [ 234.747526][T10700] Cannot create hsr debugfs directory [ 234.831472][T10700] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 235.306883][T10700] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 235.325861][T10700] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 235.337396][T10700] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 235.381088][T10700] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 235.394234][T10700] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 235.402471][T10700] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 235.411663][T10700] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 235.419725][T10746] lo speed is unknown, defaulting to 1000 [ 235.419768][T10751] lo: Caught tx_queue_len zero misconfig [ 235.480179][T10700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.494916][T10700] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.508853][ T9736] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.516426][ T9736] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.531219][ T9722] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.538361][ T9722] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.615404][T10773] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2331'. [ 235.737591][T10700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.948992][T10700] veth0_vlan: entered promiscuous mode [ 235.963249][T10700] veth1_vlan: entered promiscuous mode [ 235.985190][T10700] veth0_macvtap: entered promiscuous mode [ 235.996381][T10700] veth1_macvtap: entered promiscuous mode [ 236.019588][T10700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.033618][T10700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.082697][ T9761] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.095543][ T9761] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.125196][ T4158] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.139567][ T4158] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.853306][T10841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2347'. [ 236.889571][T10839] macvlan3: entered promiscuous mode [ 236.895610][T10839] bridge0: entered promiscuous mode [ 238.875440][T10899] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2368'. [ 239.102585][ T28] kauditd_printk_skb: 469 callbacks suppressed [ 239.102619][ T28] audit: type=1326 audit(1786261704.910:1207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.2.2371" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d271e0d9 code=0x7ffc0000 [ 239.172382][ T28] audit: type=1326 audit(1786261704.910:1208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.2.2371" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f11d271e0d9 code=0x7ffc0000 [ 239.254237][ T28] audit: type=1326 audit(1786261704.970:1209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.2.2371" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d271e0d9 code=0x7ffc0000 [ 239.349430][ T28] audit: type=1326 audit(1786261704.970:1210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.2.2371" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f11d271e0d9 code=0x7ffc0000 [ 240.633128][T10951] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2386'. [ 240.833820][T10959] lo speed is unknown, defaulting to 1000 [ 240.946588][T10966] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2392'. [ 241.127426][T10970] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 241.158261][T10970] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 242.088802][ T28] audit: type=1326 audit(1786261707.892:1211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10984 comm="syz.3.2400" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449719e0d9 code=0x7ffc0000 [ 242.170611][ T28] audit: type=1326 audit(1786261707.892:1212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10984 comm="syz.3.2400" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449719e0d9 code=0x7ffc0000 [ 242.253194][ T28] audit: type=1326 audit(1786261707.922:1213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10984 comm="syz.3.2400" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f449719e0d9 code=0x7ffc0000 [ 242.336628][ T28] audit: type=1326 audit(1786261708.092:1214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10984 comm="syz.3.2400" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449719e0d9 code=0x7ffc0000 [ 242.417606][ T28] audit: type=1326 audit(1786261708.092:1215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10984 comm="syz.3.2400" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449719e0d9 code=0x7ffc0000 [ 242.624206][ T28] audit: type=1326 audit(1786261708.422:1216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11006 comm="syz.3.2408" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f449719e0d9 code=0x0 [ 243.517431][T11019] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2410'. [ 243.629264][T11023] macvlan2: entered promiscuous mode [ 243.635268][T11023] bridge0: entered promiscuous mode [ 245.938056][T11073] lo speed is unknown, defaulting to 1000 [ 245.988079][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 245.988098][ T28] audit: type=1400 audit(1786261711.792:1219): avc: denied { read } for pid=11072 comm="syz.6.2436" name="nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 246.028959][T11083] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 246.029796][ T28] audit: type=1400 audit(1786261711.792:1220): avc: denied { open } for pid=11072 comm="syz.6.2436" path="/dev/nvram" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 246.775311][ T28] audit: type=1326 audit(1786261712.582:1221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11105 comm="syz.1.2445" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1596e0d9 code=0x7fc00000 [ 246.854951][ T28] audit: type=1326 audit(1786261712.612:1222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11105 comm="syz.1.2445" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4d1596e0d9 code=0x7fc00000 [ 246.892533][ T28] audit: type=1326 audit(1786261712.642:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11105 comm="syz.1.2445" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4d15967e57 code=0x7fc00000 [ 246.919902][ T28] audit: type=1326 audit(1786261712.642:1224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11105 comm="syz.1.2445" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f4d1590f459 code=0x7fc00000 [ 247.003103][ T28] audit: type=1326 audit(1786261712.642:1225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11105 comm="syz.1.2445" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f4d1590f51d code=0x7fc00000 [ 247.070628][ T28] audit: type=1326 audit(1786261712.642:1226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11105 comm="syz.1.2445" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4d1596e0d9 code=0x7fc00000 [ 247.190634][T11115] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2448'. [ 247.220688][T11115] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.227879][T11115] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.263444][T11120] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2448'. [ 247.288573][T11120] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.296201][T11120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.304137][T11120] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.311705][T11120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.331948][ T28] audit: type=1400 audit(1786261713.132:1227): avc: denied { setopt } for pid=11118 comm="syz.2.2459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 247.352960][T11120] netlink: 52 bytes leftover after parsing attributes in process `syz.5.2448'. [ 247.379436][T11120] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.386816][T11120] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.636737][T11132] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2453'. [ 247.729479][T11138] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 247.910187][T11132] team0: Port device team_slave_0 removed [ 248.249837][T11173] siw: device registration error -23 [ 248.259017][T11173] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 248.286163][T11176] lo: Caught tx_queue_len zero misconfig [ 248.432025][T11189] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32012, delta: 1 [ 248.441348][T11189] ref_ctr increment failed for inode: 0x256 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888133c4d400 [ 248.468565][T11187] ref_ctr going negative. vaddr: 0x200000ffd002, curr val: -32012, delta: -1 [ 248.478970][T11187] ref_ctr decrement failed for inode: 0x256 offset: 0x5 ref_ctr_offset: 0x2 of mm: 0xffff888133c4d400 [ 248.495931][T11187] uprobe: syz.5.2474:11187 failed to unregister, leaking uprobe [ 249.513887][T11236] dns_resolver: Unsupported server list version (0) [ 249.522148][T11236] xt_cgroup: invalid path, errno=-2 [ 249.618579][ T28] audit: type=1326 audit(1786261715.424:1228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11244 comm="syz.1.2497" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d1596e0d9 code=0x0 [ 249.813496][T11252] siw: device registration error -23 [ 249.831772][T11254] xt_TPROXY: Can be used only with -p tcp or -p udp [ 249.843846][T11252] rdma_rxe: rxe_newlink: failed to add ip6gretap0 [ 249.992048][T11258] netlink: 'syz.6.2502': attribute type 11 has an invalid length. [ 250.011543][T11258] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2502'. [ 250.135138][T11262] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 250.142441][T11262] IPv6: NLM_F_CREATE should be set when creating new route [ 250.287852][T11262] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.295720][T11262] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.446393][T11262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.478845][T11262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.581982][ T9736] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.591048][ T9736] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.613355][ T9736] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.637058][ T9736] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.865035][T11275] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2510'. [ 250.880881][T11275] netlink: 76 bytes leftover after parsing attributes in process `syz.6.2510'. [ 250.902988][T11275] netlink: 52 bytes leftover after parsing attributes in process `syz.6.2510'. [ 251.753905][T11280] ip6tnl0: Caught tx_queue_len zero misconfig [ 251.767631][T11286] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2514'. [ 251.965890][T11295] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2517'. [ 252.375771][T11316] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2527'. [ 252.385819][T11316] netlink: 76 bytes leftover after parsing attributes in process `syz.1.2527'. [ 252.407782][T11316] netlink: 52 bytes leftover after parsing attributes in process `syz.1.2527'. [ 252.433389][T11319] lo speed is unknown, defaulting to 1000 [ 252.726586][T11320] siw: device registration error -23 [ 252.778331][T11340] loop6: detected capacity change from 0 to 128 [ 252.911027][T11350] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2541'. [ 252.930565][T11350] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2541'. [ 252.951014][T11350] netlink: 52 bytes leftover after parsing attributes in process `syz.3.2541'. [ 253.377455][T11379] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 253.392541][T11379] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 253.525822][T11388] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2554'. [ 253.602502][T11387] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 253.807841][T11390] loop6: detected capacity change from 0 to 1024 [ 253.841998][ T9722] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.851690][ T9722] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.868575][ T9722] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.878309][ T9722] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.897076][T11390] EXT4-fs: Ignoring removed bh option [ 253.930511][T11390] EXT4-fs (loop6): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 254.070034][T11390] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 254.143663][ T28] audit: type=1400 audit(1786261719.954:1229): avc: denied { write } for pid=11389 comm="syz.6.2555" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 254.146094][T11390] dns_resolver: Unsupported server list version (0) [ 254.218660][T11412] xt_cgroup: invalid path, errno=-2 [ 254.364117][T10700] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 254.697471][ T28] audit: type=1400 audit(1786261720.504:1230): avc: denied { load_policy } for pid=11424 comm="syz.6.2565" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 254.724684][T11425] SELinux: ebitmap: truncated map [ 254.729839][T11425] SELinux: invalid class [ 254.735544][T11425] SELinux: failed to load policy [ 254.765316][T11436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2569'. [ 254.842358][T11450] xt_TPROXY: Can be used only with -p tcp or -p udp [ 255.363151][T11476] netlink: 'syz.6.2587': attribute type 1 has an invalid length. [ 255.393062][T11476] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.450020][T11481] lo speed is unknown, defaulting to 1000 [ 255.465493][T11476] bond1: entered promiscuous mode [ 255.486881][T11476] bond1: entered allmulticast mode [ 255.526278][T11476] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2587'. [ 255.558450][T11476] netlink: 'syz.6.2587': attribute type 1 has an invalid length. [ 255.589488][T11482] siw: device registration error -23 [ 255.595721][T11476] bond1: left promiscuous mode [ 255.600928][T11476] bond1: left allmulticast mode [ 255.607378][T11476] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.817140][T11485] random: crng reseeded on system resumption [ 255.848558][ T28] audit: type=1400 audit(1786261721.654:1231): avc: denied { ioctl } for pid=11484 comm="syz.6.2590" path="/dev/snapshot" dev="devtmpfs" ino=90 ioctlcmd=0x330d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 256.076805][T11491] loop6: detected capacity change from 0 to 512 [ 256.118452][T11491] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 256.192336][T11491] EXT4-fs (loop6): 1 truncate cleaned up [ 256.233470][T11491] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 256.329892][T10700] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.715566][T11523] tipc: Can't bind to reserved service type 1 [ 256.863732][T11529] netlink: 'syz.5.2606': attribute type 1 has an invalid length. [ 256.873571][T11529] netlink: 1319 bytes leftover after parsing attributes in process `syz.5.2606'. [ 256.914600][T11532] netlink: 'syz.5.2607': attribute type 2 has an invalid length. [ 256.926406][ T28] audit: type=1400 audit(1786261722.734:1232): avc: denied { bind } for pid=11531 comm="syz.5.2607" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 257.500151][ T28] audit: type=1400 audit(1786261723.304:1233): avc: denied { bind } for pid=11553 comm="syz.6.2613" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 257.844653][T11564] netlink: 'syz.6.2618': attribute type 1 has an invalid length. [ 257.862417][T11564] netlink: 1319 bytes leftover after parsing attributes in process `syz.6.2618'. [ 258.167560][T11572] lo speed is unknown, defaulting to 1000 [ 258.370062][T11573] siw: device registration error -23 [ 258.675009][T11578] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2623'. [ 259.014620][T11603] netlink: 830 bytes leftover after parsing attributes in process `syz.3.2635'. [ 259.240403][T11615] dns_resolver: Unsupported server list version (0) [ 259.321866][T11610] xt_cgroup: invalid path, errno=-2 [ 259.855963][T11634] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2648'. [ 259.882043][T11634] team0: entered promiscuous mode [ 259.887123][T11634] team0: entered allmulticast mode [ 259.892490][T11634] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.368849][T11669] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 260.380339][T11669] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 260.442564][T11669] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 260.450591][T11669] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 260.612650][T11685] uprobe: syz.2.2668:11685 failed to unregister, leaking uprobe [ 262.098966][T11735] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2689'. [ 262.368524][T11740] 9p: Bad value for 'rfdno' [ 262.725845][T11753] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2697'. [ 263.059262][T11768] netlink: 260 bytes leftover after parsing attributes in process `syz.6.2704'. [ 263.115524][T11774] lo speed is unknown, defaulting to 1000 [ 263.175677][T11777] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2708'. [ 263.195167][T11777] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2708'. [ 263.452738][T11789] loop6: detected capacity change from 0 to 128 [ 263.473337][T11789] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 263.487005][T11789] ext4 filesystem being mounted at /71/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 263.528338][ T28] audit: type=1400 audit(1786261729.334:1234): avc: denied { write } for pid=11787 comm="syz.6.2712" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 263.553206][ T28] audit: type=1400 audit(1786261729.334:1235): avc: denied { create } for pid=11787 comm="syz.6.2712" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 263.598778][ T28] audit: type=1400 audit(1786261729.364:1236): avc: denied { write } for pid=11787 comm="syz.6.2712" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 263.623401][ T28] audit: type=1400 audit(1786261729.364:1237): avc: denied { write } for pid=11787 comm="syz.6.2712" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 263.649338][ T28] audit: type=1400 audit(1786261729.364:1238): avc: denied { create } for pid=11787 comm="syz.6.2712" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 263.734633][T10700] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 263.773499][ T28] audit: type=1400 audit(1786261729.364:1239): avc: denied { write } for pid=11787 comm="syz.6.2712" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 263.819311][ T28] audit: type=1400 audit(1786261729.414:1240): avc: denied { write } for pid=11787 comm="syz.6.2712" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 263.890890][ T28] audit: type=1400 audit(1786261729.414:1241): avc: denied { write } for pid=11787 comm="syz.6.2712" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 263.952696][ T28] audit: type=1400 audit(1786261729.414:1242): avc: denied { rename } for pid=11787 comm="syz.6.2712" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 264.032945][T11814] netlink: 'syz.6.2722': attribute type 11 has an invalid length. [ 264.174529][T11825] loop6: detected capacity change from 0 to 512 [ 264.196776][T11825] EXT4-fs: Ignoring removed oldalloc option [ 264.295887][T11825] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 264.341869][T11825] EXT4-fs (loop6): 1 truncate cleaned up [ 264.366300][T11825] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 264.456086][ T28] audit: type=1400 audit(1786261730.264:1243): avc: denied { write } for pid=11824 comm="syz.6.2725" name="file0" dev="loop6" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 264.461648][T11825] EXT4-fs error (device loop6): ext4_find_dest_de:2050: inode #2: block 13: comm syz.6.2725: bad entry in directory: directory entry overrun - offset=92, inode=0, rec_len=1024, size=1024 fake=0 [ 264.491157][T11840] lo speed is unknown, defaulting to 1000 [ 264.548618][T11825] EXT4-fs (loop6): Remounting filesystem read-only [ 264.638935][T10700] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 264.711106][T11836] lo speed is unknown, defaulting to 1000 [ 264.745188][T11854] loop6: detected capacity change from 0 to 512 [ 264.831207][T11854] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 264.847177][T11854] ext4 filesystem being mounted at /77/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 264.976527][T11863] netlink: 260 bytes leftover after parsing attributes in process `syz.1.2739'. [ 265.020569][T10700] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 265.223148][T11871] lo: Caught tx_queue_len zero misconfig [ 265.356068][T11875] 9p: Bad value for 'rfdno' [ 265.370532][T11872] loop6: detected capacity change from 0 to 8192 [ 265.389877][T11872] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 265.585103][T11868] netlink: 'syz.6.2740': attribute type 10 has an invalid length. [ 267.616729][T11921] lo speed is unknown, defaulting to 1000 [ 268.262044][T11941] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2770'. [ 268.614629][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 268.614687][ T28] audit: type=1400 audit(1786261734.424:1247): avc: denied { name_bind } for pid=11968 comm="syz.2.2779" src=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 268.955085][T11988] veth0_macvtap: Caught tx_queue_len zero misconfig [ 269.096891][ T28] audit: type=1400 audit(1786261734.904:1248): avc: denied { read } for pid=11993 comm="syz.3.2788" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 269.305875][T12004] lo speed is unknown, defaulting to 1000 [ 269.843560][T12037] lo speed is unknown, defaulting to 1000 [ 270.192966][T12049] geneve4: entered promiscuous mode [ 270.231813][ T9736] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.242795][ T9736] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.253704][ T9736] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.349069][ T4158] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.518967][ T3402] IPVS: starting estimator thread 0... [ 270.613103][T12059] IPVS: using max 2352 ests per chain, 117600 per kthread [ 271.124047][T12086] netlink: 'syz.2.2821': attribute type 4 has an invalid length. [ 271.160169][T12086] netlink: 'syz.2.2821': attribute type 4 has an invalid length. [ 271.182878][T12088] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2822'. [ 271.215433][ T28] audit: type=1326 audit(1786261737.024:1249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.1.2820" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1596e0d9 code=0x7ffc0000 [ 271.312152][ T28] audit: type=1326 audit(1786261737.024:1250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.1.2820" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4d1596e0d9 code=0x7ffc0000 [ 271.349341][ T28] audit: type=1326 audit(1786261737.154:1251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.1.2820" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1596e0d9 code=0x7ffc0000 [ 271.379378][ T28] audit: type=1326 audit(1786261737.154:1252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12081 comm="syz.1.2820" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1596e0d9 code=0x7ffc0000 [ 272.023942][T12101] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12101 comm=syz.3.2827 [ 272.056256][T12101] netlink: 'syz.3.2827': attribute type 3 has an invalid length. [ 272.072872][T12101] netlink: 'syz.3.2827': attribute type 3 has an invalid length. [ 272.159060][T12107] netlink: 'syz.3.2830': attribute type 1 has an invalid length. [ 272.176753][T12107] netlink: 'syz.3.2830': attribute type 1 has an invalid length. [ 272.187507][T12107] netlink: 116376 bytes leftover after parsing attributes in process `syz.3.2830'. [ 272.470646][ T28] audit: type=1400 audit(1786261738.274:1253): avc: denied { ioctl } for pid=12123 comm="syz.1.2837" path="socket:[37937]" dev="sockfs" ino=37937 ioctlcmd=0x891a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 272.544273][T12127] netlink: 'syz.1.2839': attribute type 1 has an invalid length. [ 272.580837][T12127] 8021q: adding VLAN 0 to HW filter on device bond12 [ 272.730381][T12127] bond12: (slave veth7): Enslaving as an active interface with a down link [ 272.786416][ T28] audit: type=1400 audit(1786261738.594:1254): avc: denied { setopt } for pid=12131 comm="syz.3.2840" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 272.799750][T12129] 8021q: adding VLAN 0 to HW filter on device  [ 272.824941][T12129] : left promiscuous mode [ 272.856260][T12129] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 272.866975][T12129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.880331][T12129] veth1_vlan: left promiscuous mode [ 272.886687][T12129] veth0_vlan: left promiscuous mode [ 272.894701][T12129] veth0_vlan: entered promiscuous mode [ 272.902440][T12129] veth1_vlan: entered promiscuous mode [ 272.911351][T12129] veth1_macvtap: left promiscuous mode [ 272.918004][T12129] veth0_macvtap: left promiscuous mode [ 272.924263][T12129] veth0_macvtap: entered promiscuous mode [ 272.930813][T12129] veth1_macvtap: entered promiscuous mode [ 272.940698][T12129] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 272.950580][T12129] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 272.959615][T12129] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 272.968732][T12129] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 272.978598][T12129] 8021q: adding VLAN 0 to HW filter on device bond1 [ 272.990798][T12129] 8021q: adding VLAN 0 to HW filter on device bond2 [ 273.003308][T12129] 8021q: adding VLAN 0 to HW filter on device bond3 [ 273.014652][T12129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.026981][T12129] 8021q: adding VLAN 0 to HW filter on device bond4 [ 273.036514][T12129] bond5: left allmulticast mode [ 273.041679][T12129] 8021q: adding VLAN 0 to HW filter on device bond5 [ 273.052639][T12129] bond6: left promiscuous mode [ 273.057765][T12129] erspan1: left promiscuous mode [ 273.063236][T12129] bond6: left allmulticast mode [ 273.068681][T12129] 8021q: adding VLAN 0 to HW filter on device bond6 [ 273.077387][T12129] erspan1: left allmulticast mode [ 273.084503][T12129] 8021q: adding VLAN 0 to HW filter on device bond7 [ 273.094467][T12129] 8021q: adding VLAN 0 to HW filter on device bond8 [ 273.102833][T12129] bond9: left promiscuous mode [ 273.107732][T12129] bridge3: left promiscuous mode [ 273.113721][T12129] 8021q: adding VLAN 0 to HW filter on device bond9 [ 273.125264][T12129] 8021q: adding VLAN 0 to HW filter on device bond10 [ 273.136189][T12129] 8021q: adding VLAN 0 to HW filter on device bond11 [ 273.148831][T12129] geneve4: left promiscuous mode [ 273.183256][T12130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.201149][T12130] bond12: (slave batadv0): making interface the new active one [ 273.217169][T12130] batadv0: entered promiscuous mode [ 273.222844][T12130] bond12: (slave batadv0): Enslaving as an active interface with an up link [ 273.231773][ T3402] lo speed is unknown, defaulting to 1000 [ 273.233034][ T4163] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.239119][ T3402] syz0: Port: 1 Link ACTIVE [ 273.308824][ T3402] lo speed is unknown, defaulting to 1000 [ 273.321989][ T9761] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.331667][ T9761] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.353100][ T9761] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 273.416375][ T9736] bond12: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 273.612809][ T28] audit: type=1400 audit(1786261739.424:1255): avc: denied { remount } for pid=12148 comm="syz.1.2846" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 273.930142][T12170] tmpfs: Bad value for 'mpol' [ 274.376463][T12185] netlink: 'syz.3.2859': attribute type 4 has an invalid length. [ 274.423140][T12185] netlink: 'syz.3.2859': attribute type 4 has an invalid length. [ 274.915264][T12205] lo speed is unknown, defaulting to 1000 [ 275.204616][ T28] audit: type=1400 audit(1786261741.014:1256): avc: denied { read } for pid=12224 comm="syz.6.2872" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 275.240030][T12228] netlink: 'syz.5.2873': attribute type 1 has an invalid length. [ 275.267266][T12228] netlink: 116376 bytes leftover after parsing attributes in process `syz.5.2873'. [ 276.520418][T12271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.533721][T12271] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.551322][T12271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 276.598078][T12271] wireguard: wg2: Could not create IPv6 socket [ 276.612465][T12271] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 276.783118][ T28] audit: type=1400 audit(1786261742.594:1257): avc: denied { mounton } for pid=12283 comm="syz.3.2895" path="/file0" dev="bpf" ino=37156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=file permissive=1 [ 276.980211][T12294] lo speed is unknown, defaulting to 1000 [ 277.349105][T12307] pimreg: entered allmulticast mode [ 277.421325][T12306] pimreg: left allmulticast mode [ 278.698832][T12336] veth0_macvtap: Caught tx_queue_len zero misconfig [ 278.841800][ T9722] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 278.866294][ T9722] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 278.900595][ T9722] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 278.918230][ T9722] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 279.702932][T12358] lo speed is unknown, defaulting to 1000 [ 280.192957][ T28] audit: type=1326 audit(1786261745.994:1258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12372 comm="syz.3.2928" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449719e0d9 code=0x7ffc0000 [ 280.244223][ T28] audit: type=1326 audit(1786261745.994:1259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12372 comm="syz.3.2928" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f449719e0d9 code=0x7ffc0000 [ 280.428580][ T28] audit: type=1326 audit(1786261746.204:1260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12372 comm="syz.3.2928" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449719e0d9 code=0x7ffc0000 [ 280.525307][ T28] audit: type=1326 audit(1786261746.284:1261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12372 comm="syz.3.2928" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f449719e0d9 code=0x7ffc0000 [ 280.651400][T12383] tipc: Started in network mode [ 280.661388][T12383] tipc: Node identity 1000001, cluster identity 4369 [ 280.678986][T12383] tipc: Node number set to 16777217 [ 280.730662][T12383] tipc: New replicast peer: 127.0.0.1 [ 280.745125][T12383] tipc: Enabled bearer , priority 10 [ 280.839660][T12371] lo speed is unknown, defaulting to 1000 [ 280.990312][T12392] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2934'. [ 281.142069][T12406] validate_nla: 1 callbacks suppressed [ 281.142099][T12406] netlink: 'syz.2.2938': attribute type 10 has an invalid length. [ 281.658936][T12437] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2948'. [ 281.793630][T12448] x_tables: duplicate entry at hook 3 [ 282.336906][T12455] netlink: 'syz.6.2955': attribute type 21 has an invalid length. [ 282.356629][T12455] IPv6: NLM_F_CREATE should be specified when creating new route [ 282.379641][T12455] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 282.387770][T12455] IPv6: NLM_F_CREATE should be set when creating new route [ 282.395734][T12455] IPv6: NLM_F_CREATE should be set when creating new route [ 282.403434][T12455] IPv6: NLM_F_CREATE should be set when creating new route [ 282.415203][T12465] netlink: 'syz.6.2955': attribute type 21 has an invalid length. [ 282.423909][T12465] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 282.496440][T12465] vlan2: entered promiscuous mode [ 282.503511][T12465] bridge0: entered promiscuous mode [ 282.654935][ T28] audit: type=1400 audit(1786261748.464:1262): avc: denied { mounton } for pid=12470 comm="syz.3.2969" path=2F3636382FE91F7189591E9233614B dev="tmpfs" ino=3502 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 282.811200][T12476] tipc: Started in network mode [ 282.816222][T12476] tipc: Node identity 4, cluster identity 4711 [ 282.822918][T12476] tipc: Node number set to 4 [ 283.537472][T12497] veth0_macvtap: Caught tx_queue_len zero misconfig [ 283.540697][T12496] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2967'. [ 283.587947][T12496] bond12: (slave batadv0): Releasing active interface [ 283.597408][T12496] batadv0 (unregistering): left promiscuous mode [ 283.606236][T12496] bond12: (slave veth7): making interface the new active one [ 283.637028][T12494] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 283.653473][T12494] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 283.754126][T12505] pimreg: entered allmulticast mode [ 283.835375][T12504] pimreg: left allmulticast mode [ 284.114089][ T28] audit: type=1326 audit(1786261749.924:1263): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12522 comm="syz.1.2978" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4d1596e0d9 code=0x0 [ 285.035399][T12548] netlink: 'syz.3.2984': attribute type 1 has an invalid length. [ 285.202013][T12557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2987'. [ 285.233548][T12557] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2987'. [ 286.440044][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2995'. [ 286.799987][T12606] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 287.671980][ C0] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 287.801415][ T28] audit: type=1400 audit(1786261753.604:1264): avc: denied { read } for pid=12616 comm="syz.5.3008" path="socket:[41432]" dev="sockfs" ino=41432 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 287.831961][T12619] loop6: detected capacity change from 0 to 512 [ 287.908171][T12619] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 287.953404][T12619] EXT4-fs (loop6): 1 truncate cleaned up [ 287.979328][T12619] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 288.085615][ T28] audit: type=1400 audit(1786261753.894:1265): avc: denied { write } for pid=12614 comm="syz.6.3006" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 288.833019][T12646] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3018'. [ 288.847409][T10700] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 288.857615][T12646] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3018'. [ 289.355428][ T28] audit: type=1400 audit(1786261755.164:1266): avc: denied { lock } for pid=12675 comm="syz.5.3029" path="socket:[41540]" dev="sockfs" ino=41540 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 289.390984][ T28] audit: type=1400 audit(1786261755.194:1267): avc: denied { name_bind } for pid=12677 comm="syz.1.3030" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 289.856685][T12691] netlink: 104 bytes leftover after parsing attributes in process `syz.5.3034'. [ 289.903344][ T4880] IPVS: starting estimator thread 0... [ 289.991794][T12696] IPVS: using max 2304 ests per chain, 115200 per kthread [ 290.251289][ T28] audit: type=1400 audit(1786261756.054:1268): avc: denied { connect } for pid=12707 comm="syz.6.3039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 290.318606][ T28] audit: type=1400 audit(1786261756.124:1269): avc: denied { bind } for pid=12711 comm="syz.6.3041" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 290.550115][ T28] audit: type=1400 audit(1786261756.354:1270): avc: denied { write } for pid=12717 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.613331][ T28] audit: type=1400 audit(1786261756.404:1271): avc: denied { write } for pid=12731 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.640575][ T3019] veth0_vlan: left promiscuous mode [ 290.649564][ T4880] veth0_vlan: entered promiscuous mode [ 290.848523][ T28] audit: type=1400 audit(1786261756.654:1272): avc: denied { write } for pid=12738 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.918792][ T28] audit: type=1400 audit(1786261756.724:1273): avc: denied { write } for pid=12751 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 291.083870][T12757] netlink: 'syz.1.3047': attribute type 21 has an invalid length. [ 291.107087][T12757] IPv6: NLM_F_CREATE should be specified when creating new route [ 291.123084][T12757] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.130568][T12757] IPv6: NLM_F_CREATE should be set when creating new route [ 291.134354][T12758] netlink: 'syz.1.3047': attribute type 21 has an invalid length. [ 291.137937][T12757] IPv6: NLM_F_CREATE should be set when creating new route [ 291.153025][T12757] IPv6: NLM_F_CREATE should be set when creating new route [ 291.171575][T12758] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 291.354855][T12757] vlan7: entered promiscuous mode [ 291.368389][T12757] bridge0: entered promiscuous mode [ 291.769342][T12777] netlink: 'syz.1.3052': attribute type 4 has an invalid length. [ 291.782569][ T6929] lo speed is unknown, defaulting to 1000 [ 291.788432][ T6929] syz0: Port: 1 Link DOWN [ 291.801809][ T6929] lo speed is unknown, defaulting to 1000 [ 291.820072][T12777] netlink: 'syz.1.3052': attribute type 4 has an invalid length. [ 291.833251][ T6929] lo speed is unknown, defaulting to 1000 [ 291.839417][ T6929] syz0: Port: 1 Link ACTIVE [ 291.849305][ T6929] lo speed is unknown, defaulting to 1000 [ 292.139019][T12800] team_slave_1: Caught tx_queue_len zero misconfig [ 292.757885][T12844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3075'. [ 293.096488][T12855] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3078'. [ 293.815894][ T28] audit: type=1400 audit(1786261759.614:1274): avc: denied { execute_no_trans } for pid=12879 comm="syz.3.3087" path="/693/file0" dev="tmpfs" ino=3633 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 293.885253][T12894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3093'. [ 293.906123][T12894] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12894 comm=syz.2.3093 [ 294.040597][T12899] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3094'. [ 294.200973][T12896] 9pnet_fd: p9_fd_create_unix (12896): problem connecting socket: ./file0: -111 [ 294.351151][T12907] xt_connbytes: Forcing CT accounting to be enabled [ 294.378698][T12907] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.709407][T12925] tipc: Enabling of bearer rejected, failed to enable media [ 294.973415][T12946] netlink: 'syz.1.3115': attribute type 4 has an invalid length. [ 295.015299][ T4879] lo speed is unknown, defaulting to 1000 [ 295.023207][T12946] netlink: 'syz.1.3115': attribute type 4 has an invalid length. [ 295.035203][ T4879] syz0: Port: 1 Link DOWN [ 295.044181][ T4879] lo speed is unknown, defaulting to 1000 [ 295.059798][ T4879] lo speed is unknown, defaulting to 1000 [ 295.077716][ T4879] syz0: Port: 1 Link ACTIVE [ 295.136263][T12947] siw: device registration error -23 [ 295.298696][T12959] batadv_slave_1: entered promiscuous mode [ 295.326651][T12958] batadv_slave_1: left promiscuous mode [ 295.801916][T12975] xfrm0: Caught tx_queue_len zero misconfig [ 296.527839][ T28] audit: type=1400 audit(1786261762.324:1275): avc: denied { nlmsg_read } for pid=12994 comm="syz.1.3133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 297.015638][T13029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3144'. [ 297.030511][T13018] loop6: detected capacity change from 0 to 512 [ 297.064825][T13029] bond11: (slave ip6gretap1): Enslaving as an active interface with an up link [ 297.190143][T13029] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3144'. [ 297.199760][T13018] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 297.222977][T13040] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3145'. [ 297.226652][T13040] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3145'. [ 297.230982][T13040] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3145'. [ 297.238509][T13029] 8021q: adding VLAN 0 to HW filter on device bond11 [ 297.305328][T13042] netlink: 'syz.5.3147': attribute type 1 has an invalid length. [ 297.307649][T13018] EXT4-fs (loop6): orphan cleanup on readonly fs [ 297.424216][T13018] Quota error (device loop6): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 297.426231][T13048] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3149'. [ 297.428166][T13042] bond2: (slave bridge3): making interface the new active one [ 297.460411][T13042] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 297.532122][T13050] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13050 comm=syz.2.3149 [ 297.804094][T13018] EXT4-fs warning (device loop6): ext4_enable_quotas:7276: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 297.887936][ T28] audit: type=1400 audit(1786261763.694:1276): avc: denied { name_bind } for pid=13053 comm="syz.5.3151" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 297.986660][T13018] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 298.031206][T13058] tipc: Failed to remove unknown binding: 66,0,0/0:4139496853/4139496854 [ 298.041598][T13058] tipc: Failed to remove unknown binding: 66,0,0/0:4139496853/4139496854 [ 298.098117][T13018] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #16: comm syz.6.3140: inode has both inline data and extents flags [ 298.172520][T13018] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 298.181720][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 298.197353][ C0] EXT4-fs (loop6): initial error at time 1786261763: ext4_orphan_get:1399: inode 16 [ 298.206878][ C0] EXT4-fs (loop6): last error at time 1786261763: ext4_orphan_get:1399: inode 16 [ 298.231548][T13018] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.3140: couldn't read orphan inode 16 (err -117) [ 298.389575][T13018] loop6: lost filesystem error report for type 5 error -117 [ 298.638993][T13018] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 299.044915][T13084] bond0: left promiscuous mode [ 299.050406][T13084] erspan1: left promiscuous mode [ 299.056517][T13084] bond0: left allmulticast mode [ 299.065332][T13084] erspan1: left allmulticast mode [ 299.087717][T13084] bridge3: left promiscuous mode [ 299.105747][T13084] bridge3: left allmulticast mode [ 299.129840][T13084] bridge0: left promiscuous mode [ 299.204593][T13084] macvlan3: left promiscuous mode [ 299.211691][T13084] team0: left promiscuous mode [ 299.216915][T13084] team0: left allmulticast mode [ 299.282617][T13095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3166'. [ 299.302314][T10700] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.354883][T13111] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3172'. [ 299.364636][T13110] netlink: 'syz.2.3171': attribute type 1 has an invalid length. [ 299.395212][T13110] 8021q: adding VLAN 0 to HW filter on device bond12 [ 299.421327][T13110] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 299.471538][T13118] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3173'. [ 299.505354][T13107] loop6: detected capacity change from 0 to 1024 [ 299.521182][T13107] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 299.551510][T13107] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002] [ 299.567110][T13107] System zones: 0-1, 2-3, 5-36, 22-22, 98-101, 102-102 [ 299.577980][T13107] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 299.607978][T10700] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 300.342309][T13157] hsr_slave_0: left promiscuous mode [ 300.348453][T13157] hsr_slave_1: left promiscuous mode [ 300.418046][T13157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.443374][ T2206] bond0: (slave erspan1): link status definitely down, disabling slave [ 300.451845][ T2206] bond0: now running without any active interface! [ 300.556060][T13171] syz.1.3183 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 300.622055][T13174] 8021q: VLANs not supported on ipvlan0 [ 300.943584][T13199] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 301.054754][ T28] audit: type=1400 audit(1786261766.864:1277): avc: denied { write } for pid=13196 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 301.124469][ T28] audit: type=1400 audit(1786261766.934:1278): avc: denied { write } for pid=13221 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 301.212294][ T9722] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.220681][ T9722] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.236901][T13227] netlink: 'syz.6.3202': attribute type 1 has an invalid length. [ 301.244822][ T9722] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.246121][T13227] netlink: 'syz.6.3202': attribute type 2 has an invalid length. [ 301.276025][ T9761] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.418859][T13236] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3204'. [ 301.490254][T13236] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=13236 comm=syz.5.3204 [ 301.517536][ T28] audit: type=1400 audit(1786261767.314:1279): avc: denied { write } for pid=13234 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 301.548414][ T28] audit: type=1400 audit(1786261767.324:1280): avc: denied { write } for pid=13254 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 301.595005][ T28] audit: type=1400 audit(1786261767.354:1281): avc: denied { create } for pid=13250 comm="syz.6.3207" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 301.654016][ T28] audit: type=1400 audit(1786261767.354:1282): avc: denied { ioctl } for pid=13250 comm="syz.6.3207" path="/dev/usbmon0" dev="devtmpfs" ino=141 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 301.859430][T13280] netlink: 'syz.5.3214': attribute type 1 has an invalid length. [ 301.885185][ T28] audit: type=1400 audit(1786261767.694:1283): avc: denied { write } for pid=13256 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 301.926858][ T28] audit: type=1400 audit(1786261767.694:1284): avc: denied { write } for pid=13286 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 301.935752][T13280] 8021q: adding VLAN 0 to HW filter on device bond3 [ 301.970628][T13290] bond3: (slave veth7): Enslaving as an active interface with a down link [ 302.066965][T13280] netlink: 'syz.5.3214': attribute type 10 has an invalid length. [ 302.075450][T13280] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3214'. [ 302.084949][T13280] : entered promiscuous mode [ 302.151243][ T28] audit: type=1400 audit(1786261767.954:1285): avc: denied { create } for pid=13307 comm="syz.6.3220" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 302.262854][ T28] audit: type=1400 audit(1786261768.074:1286): avc: denied { accept } for pid=13309 comm="syz.6.3221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 303.770795][T13387] netlink: 'syz.5.3242': attribute type 25 has an invalid length. [ 304.391248][T13416] team0: Failed to send options change via netlink (err -105) [ 304.399827][T13416] team0: Port device bridge0 added [ 304.418972][T13416] bond0: left promiscuous mode [ 304.433768][T13416] erspan2: left promiscuous mode [ 304.460644][T13416] bond9: left promiscuous mode [ 304.471792][T13416] bridge5: left promiscuous mode [ 305.219571][T13429] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8194 sclass=netlink_route_socket pid=13429 comm=syz.1.3256 [ 305.907713][T13447] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3263'. [ 305.971528][T13455] netlink: 'syz.3.3266': attribute type 4 has an invalid length. [ 306.024749][T13455] netlink: 'syz.3.3266': attribute type 4 has an invalid length. [ 306.037946][T13461] wg2: Caught tx_queue_len zero misconfig [ 306.581896][T13459] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 306.671286][T13459] bond4 (unregistering): Released all slaves [ 306.755532][T13479] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3274'. [ 306.792284][T13479] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3274'. [ 306.895635][T13479] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 306.895641][T13474] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 308.174623][T13520] netlink: 'syz.1.3287': attribute type 2 has an invalid length. [ 308.202615][T13520] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3287'. [ 308.331153][T13526] lo speed is unknown, defaulting to 1000 [ 308.534076][ T28] kauditd_printk_skb: 93 callbacks suppressed [ 308.534092][ T28] audit: type=1326 audit(1786261774.344:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13523 comm="syz.3.3288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f449719e0d9 code=0x0 [ 309.183966][ T28] audit: type=1400 audit(1786261774.994:1381): avc: denied { firmware_load } for pid=13557 comm="syz.1.3299" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 309.329232][T13569] netlink: 332 bytes leftover after parsing attributes in process `syz.1.3299'. [ 309.487925][T13583] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3303'. [ 309.526251][T13583] vlan0: entered promiscuous mode [ 309.651760][ T28] audit: type=1400 audit(1786261775.454:1382): avc: denied { mounton } for pid=13584 comm="syz.5.3306" path="/file0" dev="autofs" ino=43999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 310.629573][T13610] Cannot find del_set index 4 as target [ 310.725970][T13614] loop6: detected capacity change from 0 to 128 [ 310.914582][T13616] bridge0: entered allmulticast mode [ 310.965841][T13616] bridge_slave_1: left allmulticast mode [ 310.971858][T13616] bridge_slave_1: left promiscuous mode [ 310.990302][T13616] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.043619][T13616] bridge_slave_0: left allmulticast mode [ 311.078503][T13616] bridge_slave_0: left promiscuous mode [ 311.139023][T13616] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.119426][T13639] loop6: detected capacity change from 0 to 2048 [ 312.246442][T13639] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 312.351253][T13644] netlink: 'syz.2.3327': attribute type 1 has an invalid length. [ 312.399483][ T28] audit: type=1400 audit(1786261778.204:1383): avc: denied { append } for pid=13635 comm="syz.6.3325" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 312.436908][T13644] bond13: entered promiscuous mode [ 312.451784][ T3358] Process accounting resumed [ 312.465479][T13644] 8021q: adding VLAN 0 to HW filter on device bond13 [ 312.514974][ T4163] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 312.546664][T13646] bond13: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 312.571880][ T4163] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 312.592578][T13646] bond13: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 312.603543][T13646] bond13: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 312.617978][ T4163] EXT4-fs (loop6): This should not happen!! Data will be lost [ 312.617978][ T4163] [ 312.644890][ T4163] EXT4-fs (loop6): Total free blocks count 0 [ 312.645386][T13644] bond13: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 312.665271][ T4163] EXT4-fs (loop6): Free/Dirty block details [ 312.671494][T13644] bond13: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 312.685488][ T4163] EXT4-fs (loop6): free_blocks=2415919104 [ 312.706537][ T4163] EXT4-fs (loop6): dirty_blocks=32 [ 312.721809][ T4163] EXT4-fs (loop6): Block reservation details [ 312.740254][ T4163] EXT4-fs (loop6): i_reserved_data_blocks=2 [ 312.757448][ T4163] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 510 with max blocks 1 with error 28 [ 312.905581][T10700] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 313.203480][ T28] audit: type=1400 audit(1786261779.014:1384): avc: denied { write } for pid=13658 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.283891][ T28] audit: type=1400 audit(1786261779.074:1385): avc: denied { write } for pid=13678 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.309640][T13679] lo speed is unknown, defaulting to 1000 [ 313.565241][ T28] audit: type=1400 audit(1786261779.364:1386): avc: denied { write } for pid=13682 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.641096][ T28] audit: type=1400 audit(1786261779.444:1387): avc: denied { write } for pid=13695 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.893249][T13704] loop6: detected capacity change from 0 to 2048 [ 313.972218][T13704] loop6: p1 < > p3 [ 313.976834][T13704] loop6: p3 size 134217728 extends beyond EOD, truncated [ 314.443986][T13723] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3341'. [ 315.121191][T13744] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=13744 comm=syz.3.3350 [ 315.557059][ T28] audit: type=1400 audit(1786261781.364:1388): avc: denied { accept } for pid=13762 comm="syz.3.3357" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 315.586778][T13763] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=13763 comm=syz.3.3357 [ 315.613094][T13765] loop6: detected capacity change from 0 to 256 [ 316.210849][T13783] macvtap1: entered allmulticast mode [ 316.241797][T13783] netdevsim netdevsim6 netdevsim0: entered allmulticast mode [ 316.273786][T13783] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 316.437940][ T28] audit: type=1326 audit(1786261782.244:1389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13789 comm="syz.5.3365" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0e9c19e0d9 code=0x0 [ 316.739838][T13797] loop6: detected capacity change from 0 to 128 [ 316.800251][T13797] syz.6.3367: attempt to access beyond end of device [ 316.800251][T13797] loop6: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 316.837102][T13797] syz.6.3367: attempt to access beyond end of device [ 316.837102][T13797] loop6: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 316.879574][T13797] buffer_io_error: 74 callbacks suppressed [ 316.879593][T13797] Buffer I/O error on dev loop6, logical block 79, lost async page write [ 316.906624][T13797] syz.6.3367: attempt to access beyond end of device [ 316.906624][T13797] loop6: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 316.977910][T13805] veth0: entered promiscuous mode [ 316.982496][T13797] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 317.050959][T13797] syz.6.3367: attempt to access beyond end of device [ 317.050959][T13797] loop6: rw=8390657, sector=154, nr_sectors = 2 limit=128 [ 317.122435][T13797] Buffer I/O error on dev loop6, logical block 77, lost async page write [ 317.142499][T13797] syz.6.3367: attempt to access beyond end of device [ 317.142499][T13797] loop6: rw=8390657, sector=156, nr_sectors = 2 limit=128 [ 317.171289][T13797] Buffer I/O error on dev loop6, logical block 78, lost async page write [ 317.193978][T13797] syz.6.3367: attempt to access beyond end of device [ 317.193978][T13797] loop6: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 317.225633][T13797] Buffer I/O error on dev loop6, logical block 79, lost async page write [ 317.249542][T13797] syz.6.3367: attempt to access beyond end of device [ 317.249542][T13797] loop6: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 317.288510][T13797] Buffer I/O error on dev loop6, logical block 80, lost async page write [ 317.496812][ T28] audit: type=1400 audit(1786261783.304:1390): avc: denied { connect } for pid=13817 comm="syz.5.3377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 317.589835][T13822] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 317.622177][T13822] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3378'. [ 317.734037][T13804] veth0: left promiscuous mode [ 317.792261][T13831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3379'. [ 317.796044][T13820] loop6: detected capacity change from 0 to 512 [ 317.808693][T13831] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3379'. [ 317.897135][T13828] netlink: 'syz.2.3380': attribute type 10 has an invalid length. [ 317.911975][T13828] bond12: (slave veth0_to_bond): Releasing backup interface [ 318.035607][T13820] EXT4-fs (loop6): orphan cleanup on readonly fs [ 318.076279][T13820] EXT4-fs (loop6): Cannot turn on journaled quota: type 0: error -13 [ 318.185194][T13820] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 318.242122][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 318.250042][ C0] EXT4-fs (loop6): initial error at time 1786261784: ext4_mb_generate_buddy:1317 [ 318.267310][ C0] EXT4-fs (loop6): last error at time 1786261784: ext4_mb_generate_buddy:1317 [ 318.543665][T13820] EXT4-fs error (device loop6): ext4_clear_blocks:876: inode #13: comm syz.6.3376: attempt to clear invalid blocks 2 len 1 [ 318.696564][T13820] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 318.806265][T13820] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.3376: invalid indirect mapped block 1819239214 (level 0) [ 319.463103][T13873] netlink: 200 bytes leftover after parsing attributes in process `syz.2.3393'. [ 319.596471][T13820] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 319.814352][T13820] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #13: comm syz.6.3376: invalid indirect mapped block 1819239214 (level 1) [ 319.944617][T13820] loop6: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 319.988051][T13820] EXT4-fs (loop6): 1 truncate cleaned up [ 320.619069][T13820] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 320.697950][T10700] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 320.813949][T13911] loop6: detected capacity change from 0 to 164 [ 321.178271][ T28] audit: type=1326 audit(1786261786.924:1391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13904 comm="syz.5.3401" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f0e9c197e57 code=0x0 [ 321.402779][T13911] rock: directory entry would overflow storage [ 321.410904][T13911] rock: sig=0x5252, size=5, remaining=3 [ 321.593017][T13921] netlink: 'syz.6.3404': attribute type 30 has an invalid length. [ 323.036982][T13957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3421'. [ 323.078749][T13957] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3421'. [ 323.109902][T13952] loop6: detected capacity change from 0 to 164 [ 323.153850][T13952] iso9660: Unknown parameter '' [ 323.182961][T13964] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3422'. [ 323.295178][T13964] netlink: 'syz.3.3422': attribute type 10 has an invalid length. [ 323.330505][T13964] bond4: (slave ): Releasing active interface [ 323.377167][T13964] team0: Port device  added [ 323.718468][T13985] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3430'. [ 323.777234][T13990] netlink: 'syz.5.3431': attribute type 1 has an invalid length. [ 323.889105][T13990] 8021q: adding VLAN 0 to HW filter on device bond4 [ 323.937671][T13992] bond4: (slave syz_tun): making interface the new active one [ 323.978654][T13992] bond4: (slave syz_tun): Enslaving as an active interface with an up link [ 325.765959][T14047] netlink: 'syz.5.3451': attribute type 4 has an invalid length. [ 325.840277][T14050] netlink: 'syz.5.3451': attribute type 4 has an invalid length. [ 326.384754][ T28] audit: type=1400 audit(1786261792.194:1392): avc: denied { mount } for pid=14057 comm="syz.3.3456" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 326.678327][T14068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3459'. [ 326.717422][T14068] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3459'. [ 327.344235][T14086] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3466'. [ 327.375511][T14088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3467'. [ 327.389500][T14088] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3467'. [ 327.775606][T14101] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14101 comm=syz.2.3472 [ 327.804307][T14101] netlink: 'syz.2.3472': attribute type 1 has an invalid length. [ 327.834716][T14101] 8021q: adding VLAN 0 to HW filter on device bond14 [ 327.950680][ T28] audit: type=1400 audit(1786261793.754:1393): avc: denied { nlmsg_read } for pid=14115 comm="syz.3.3476" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 328.150046][T14125] hsr_slave_0: left promiscuous mode [ 328.156778][T14125] hsr_slave_1: left promiscuous mode [ 328.239971][T14125] bond0: left allmulticast mode [ 328.274536][ T4158] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.290832][ T4158] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.321882][ T9754] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.333613][ T9754] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 328.487791][ T28] audit: type=1400 audit(1786261794.295:1394): avc: denied { map } for pid=14146 comm="syz.1.3485" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 328.541959][ T28] audit: type=1400 audit(1786261794.295:1395): avc: denied { read write } for pid=14146 comm="syz.1.3485" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=45666 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 328.577447][T14142] loop6: detected capacity change from 0 to 512 [ 328.662248][T14154] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3487'. [ 328.772136][T14142] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 329.074354][T14176] lo speed is unknown, defaulting to 1000 [ 329.418325][T14142] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 329.466965][T14185] netlink: 'syz.6.3496': attribute type 1 has an invalid length. [ 329.500250][T14185] 8021q: adding VLAN 0 to HW filter on device bond3 [ 329.523851][T14185] bond3: entered allmulticast mode [ 329.547546][T14185] bond3: (slave ip6gretap1): making interface the new active one [ 329.600649][T14185] ip6gretap1: entered allmulticast mode [ 329.616665][T14185] bond3: (slave ip6gretap1): Enslaving as an active interface with an up link [ 329.718051][T14199] netlink: 'syz.5.3500': attribute type 1 has an invalid length. [ 329.726851][T14199] netlink: 'syz.5.3500': attribute type 2 has an invalid length. [ 329.736945][T14197] 8021q: VLANs not supported on ipvlan0 [ 329.801661][T14212] netlink: 'syz.3.3503': attribute type 1 has an invalid length. [ 329.835922][T14211] xt_hashlimit: overflow, try lower: 18446744073709551615/255 [ 329.903045][T14217] veth7: entered allmulticast mode [ 329.912366][T14217] bond11: (slave veth7): Enslaving as an active interface with a down link [ 329.930568][T14212] bond11: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 330.060058][T14224] lo speed is unknown, defaulting to 1000 [ 330.190590][ T28] audit: type=1326 audit(1786261795.995:1396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14239 comm="syz.5.3512" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9c19e0d9 code=0x7ffc0000 [ 330.227519][ T28] audit: type=1326 audit(1786261795.995:1397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14239 comm="syz.5.3512" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9c19e0d9 code=0x7ffc0000 [ 330.254322][ T28] audit: type=1326 audit(1786261795.995:1398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14239 comm="syz.5.3512" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f0e9c19e0d9 code=0x7ffc0000 [ 330.298038][ T28] audit: type=1326 audit(1786261796.105:1399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14239 comm="syz.5.3512" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9c19e0d9 code=0x7ffc0000 [ 330.327009][ T28] audit: type=1326 audit(1786261796.105:1400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14239 comm="syz.5.3512" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9c19e0d9 code=0x7ffc0000 [ 330.585908][T14265] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3514'. [ 330.795104][T14275] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3522'. [ 330.837404][T14281] syzkaller0: entered promiscuous mode [ 330.851496][T14281] syzkaller0: entered allmulticast mode [ 330.865893][T14276] bond13: (slave vlan8): Enslaving as an active interface with an up link [ 330.875012][ T3358] geneve3: entered promiscuous mode [ 330.904384][T14284] netlink: 452 bytes leftover after parsing attributes in process `syz.2.3526'. [ 331.134476][T14295] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.141612][T14295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.149018][T14295] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.156136][T14295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.192626][T14295] team0: Device bridge0 failed to register rx_handler [ 331.206856][T14295] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.214030][T14295] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.338685][T14305] : left promiscuous mode [ 331.366062][ T28] audit: type=1326 audit(1786261797.175:1401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.6.3533" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088d20e0d9 code=0x7ffc0000 [ 331.450956][T14305] macvlan2: left promiscuous mode [ 331.452071][ T28] audit: type=1326 audit(1786261797.175:1402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.6.3533" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088d20e0d9 code=0x7ffc0000 [ 331.498249][ T28] audit: type=1326 audit(1786261797.175:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.6.3533" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088d20e0d9 code=0x7ffc0000 [ 331.573355][ T28] audit: type=1326 audit(1786261797.175:1404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.6.3533" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088d20e0d9 code=0x7ffc0000 [ 331.628792][ T28] audit: type=1326 audit(1786261797.205:1405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.6.3533" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f088d20e0d9 code=0x7ffc0000 [ 331.677786][T14316] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=14316 comm=syz.3.3537 [ 331.733618][ T28] audit: type=1326 audit(1786261797.205:1406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.6.3533" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088d20e0d9 code=0x7ffc0000 [ 331.759175][ T28] audit: type=1326 audit(1786261797.255:1407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.6.3533" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f088d1ce90e code=0x7ffc0000 [ 331.789827][T14318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3535'. [ 331.791016][T14322] netlink: 'syz.3.3538': attribute type 1 has an invalid length. [ 331.807804][ T28] audit: type=1326 audit(1786261797.255:1408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.6.3533" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f088d1ce90e code=0x7ffc0000 [ 331.809294][T14318] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3535'. [ 331.834443][ T28] audit: type=1326 audit(1786261797.255:1409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.6.3533" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088d20e0d9 code=0x7ffc0000 [ 331.952174][ T28] audit: type=1326 audit(1786261797.255:1410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.6.3533" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f088d20e0d9 code=0x7ffc0000 [ 332.135371][ T28] audit: type=1326 audit(1786261797.355:1411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14300 comm="syz.6.3533" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f088d20e0d9 code=0x7ffc0000 [ 332.669643][T14322] workqueue: Failed to create a rescuer kthread for wq "bond13": -EINTR [ 332.678474][T14329] bridge6: entered promiscuous mode [ 332.746928][T14329] bond12: (slave bridge6): making interface the new active one [ 332.779891][T14329] bond12: (slave bridge6): Enslaving as an active interface with an up link [ 333.946515][T14357] netlink: 'syz.5.3548': attribute type 1 has an invalid length. [ 333.970275][T14359] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3549'. [ 334.043095][T14357] bond5: entered promiscuous mode [ 334.063932][T14361] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3548'. [ 334.092526][T14357] 8021q: adding VLAN 0 to HW filter on device bond5 [ 334.130279][T14361] bond5: entered allmulticast mode [ 334.169434][T14357] bond5: (slave bridge4): making interface the new active one [ 334.217114][T14357] bridge4: entered promiscuous mode [ 334.240295][T14357] bridge4: entered allmulticast mode [ 334.276849][T14357] bond5: (slave bridge4): Enslaving as an active interface with an up link [ 334.579107][T14380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3556'. [ 334.823696][T14385] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3559'. [ 335.806465][T14405] netlink: 'syz.2.3566': attribute type 2 has an invalid length. [ 335.820751][T14405] netlink: 132 bytes leftover after parsing attributes in process `syz.2.3566'. [ 336.076063][T14429] netlink: 'syz.1.3572': attribute type 1 has an invalid length. [ 336.194679][T14429] bond14: (slave bridge4): making interface the new active one [ 336.238450][T14429] bond14: (slave bridge4): Enslaving as an active interface with an up link [ 336.253901][T14441] tipc: Failed to remove unknown binding: 66,0,0/4:876573804/876573805 [ 336.294827][T14441] tipc: Failed to remove unknown binding: 66,0,0/4:876573804/876573805 [ 336.442370][T14454] wg2: Caught tx_queue_len zero misconfig [ 337.291469][T14464] netlink: 'syz.1.3586': attribute type 4 has an invalid length. [ 337.333188][ T11] lo speed is unknown, defaulting to 1000 [ 337.339263][ T11] syz0: Port: 1 Link DOWN [ 337.345655][T14464] netlink: 'syz.1.3586': attribute type 4 has an invalid length. [ 337.355096][ T11] lo speed is unknown, defaulting to 1000 [ 337.383292][ T11] lo speed is unknown, defaulting to 1000 [ 337.390670][ T11] syz0: Port: 1 Link ACTIVE [ 337.404991][ T11] lo speed is unknown, defaulting to 1000 [ 337.468117][T14474] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3588'. [ 337.499121][T14476] netlink: 'syz.6.3590': attribute type 1 has an invalid length. [ 337.505305][T14474] vlan9: entered promiscuous mode [ 337.566916][T14476] bond4: (slave bridge0): making interface the new active one [ 337.575102][T14476] bond4: (slave bridge0): Enslaving as an active interface with an up link [ 337.912811][T14490] tipc: Failed to remove unknown binding: 66,0,0/0:1880910473/1880910474 [ 337.932524][T14490] tipc: Failed to remove unknown binding: 66,0,0/0:1880910473/1880910474 [ 337.971916][T14492] lo speed is unknown, defaulting to 1000 [ 338.156771][T14503] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3598'. [ 338.192414][T14503] bond0: option arp_all_targets: invalid value (695) [ 339.227613][T14539] tipc: Failed to remove unknown binding: 66,0,0/4:2310011186/2310011187 [ 339.237226][T14539] tipc: Failed to remove unknown binding: 66,0,0/4:2310011186/2310011187 [ 339.269178][T14537] netlink: 'syz.2.3618': attribute type 1 has an invalid length. [ 339.310817][T14537] bond15: entered promiscuous mode [ 339.316261][T14537] 8021q: adding VLAN 0 to HW filter on device bond15 [ 339.324275][T14544] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3618'. [ 339.338678][T14544] bond15: entered allmulticast mode [ 339.367413][T14546] netlink: 'syz.6.3610': attribute type 4 has an invalid length. [ 339.388615][T14546] netlink: 'syz.6.3610': attribute type 4 has an invalid length. [ 339.416719][T14548] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3611'. [ 339.425769][T14537] bond15: (slave bridge5): making interface the new active one [ 339.425869][T14537] bridge5: entered promiscuous mode [ 339.425982][T14537] bridge5: entered allmulticast mode [ 339.446214][T14537] bond15: (slave bridge5): Enslaving as an active interface with an up link [ 339.537843][T14558] netlink: 'syz.6.3626': attribute type 1 has an invalid length. [ 339.573565][T14558] bond6: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 339.620611][T14558] bond6 (unregistering): Released all slaves [ 339.660962][T14567] bridge1: entered promiscuous mode [ 339.686526][T14567] bond5: (slave bridge1): making interface the new active one [ 339.701261][T14567] bond5: (slave bridge1): Enslaving as an active interface with an up link [ 339.714595][T14572] žÿ: renamed from team_slave_1 [ 340.047275][T14585] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14585 comm=syz.3.3622 [ 340.455968][T14595] bond13: (slave vlan5): Enslaving as an active interface with an up link [ 340.494295][ T6929] erspan2: entered promiscuous mode [ 340.537119][T14598] netlink: 'syz.6.3627': attribute type 1 has an invalid length. [ 340.578121][T14598] bond6: entered promiscuous mode [ 340.601134][T14598] 8021q: adding VLAN 0 to HW filter on device bond6 [ 340.637336][T14604] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3627'. [ 340.682306][T14604] bond6: entered allmulticast mode [ 340.774033][T14598] bond6: (slave bridge2): making interface the new active one [ 340.787621][T14598] bridge2: entered promiscuous mode [ 340.794142][T14598] bridge2: entered allmulticast mode [ 340.801477][T14598] bond6: (slave bridge2): Enslaving as an active interface with an up link [ 340.977386][T14621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3631'. [ 341.008284][T14621] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3631'. [ 341.068324][T14621] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Query Mapping response ret = -22) [ 341.192596][T14628] netlink: 'syz.2.3632': attribute type 1 has an invalid length. [ 341.558504][T14625] bond14: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 341.575271][T14625] bond14 (unregistering): Released all slaves [ 341.979077][T14630] bond17: option primary: mode dependency failed, not supported in mode balance-rr(0) [ 341.990750][T14630] bond17 (unregistering): Released all slaves [ 342.012003][T14633] bridge6: entered promiscuous mode [ 342.030556][T14633] bond16: (slave bridge6): making interface the new active one [ 342.060766][T14633] bond16: (slave bridge6): Enslaving as an active interface with an up link [ 342.098793][T14643] sch_tbf: burst 32855 is lower than device lo mtu (11337746) ! [ 343.084120][T14688] netlink: 'syz.1.3650': attribute type 1 has an invalid length. [ 343.150607][T14690] 8021q: adding VLAN 0 to HW filter on device bond16 [ 343.180718][T14690] bond15: (slave bond16): making interface the new active one [ 343.188741][T14690] bond15: (slave bond16): Enslaving as an active interface with an up link [ 343.267687][T14688] bond15: (slave gretap3): Enslaving as a backup interface with an up link [ 343.318528][ T28] kauditd_printk_skb: 1142 callbacks suppressed [ 343.318547][ T28] audit: type=1400 audit(1786261809.123:2554): avc: denied { create } for pid=14697 comm="syz.2.3652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 343.319557][T14699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3652'. [ 343.326452][ T28] audit: type=1400 audit(1786261809.123:2555): avc: denied { write } for pid=14697 comm="syz.2.3652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 343.415984][T14699] veth17: entered allmulticast mode [ 343.430403][T14699] bond17: (slave veth17): Enslaving as an active interface with an up link [ 343.796202][T14711] bond17: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 343.810631][T14711] bond17 (unregistering): Released all slaves [ 344.182626][T14724] loop6: detected capacity change from 0 to 1024 [ 344.209385][T14724] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 344.245088][T14724] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 344.261119][T14724] EXT4-fs (loop6): invalid journal inode [ 344.274494][T14724] EXT4-fs (loop6): can't get journal size [ 344.283175][T14724] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a840e11d, mo2=0002] [ 344.292381][T14724] EXT4-fs error (device loop6): ext4_protect_reserved_inode:182: inode #2: comm syz.6.3660: blocks 48-48 from inode overlap system zone [ 344.308573][T14724] loop6: lost file I/O error report for ino 2 type 5 pos 0x0 len 0x0 error -117 [ 344.311707][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 344.327237][ C1] EXT4-fs (loop6): initial error at time 1786261810: ext4_protect_reserved_inode:182: inode 2 [ 344.337729][ C1] EXT4-fs (loop6): last error at time 1786261810: ext4_protect_reserved_inode:182: inode 2 [ 344.352795][T14724] EXT4-fs (loop6): failed to initialize system zone (-117) [ 344.374382][T14724] EXT4-fs (loop6): mount failed [ 344.641474][T14737] lo speed is unknown, defaulting to 1000 [ 345.485817][T14757] netlink: 'syz.1.3680': attribute type 1 has an invalid length. [ 345.548231][T14757] bond17: entered promiscuous mode [ 345.576961][T14757] 8021q: adding VLAN 0 to HW filter on device bond17 [ 345.621057][T14762] bond17: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 345.689890][T14762] bond17: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 345.713118][T14762] bond17: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 345.738267][T14758] lo speed is unknown, defaulting to 1000 [ 345.751894][T14757] bond17: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 345.792823][T14757] bond17: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 346.053031][T14767] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 346.209176][T14767] bond7 (unregistering): Released all slaves [ 346.995913][T14803] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=36 sclass=netlink_tcpdiag_socket pid=14803 comm=syz.2.3682 [ 347.246627][T14811] loop6: detected capacity change from 0 to 512 [ 347.269577][T14811] EXT4-fs: dax option not supported [ 347.381901][T14814] Cannot find del_set index 4 as target [ 348.571448][T14839] bond18: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 348.620187][T14839] bond18 (unregistering): Released all slaves [ 349.561566][T14852] loop6: detected capacity change from 0 to 512 [ 349.595379][T14852] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.3693: iget: bad i_size value: 38620345925642 [ 349.757504][T14852] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 349.758119][T14852] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.3693: couldn't read orphan inode 15 (err -117) [ 349.767402][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 349.767425][ C1] EXT4-fs (loop6): initial error at time 1786261815: ext4_orphan_get:1399: inode 15 [ 349.767460][ C1] EXT4-fs (loop6): last error at time 1786261815: ext4_orphan_get:1399: inode 15 [ 349.883348][T14852] loop6: lost filesystem error report for type 5 error -117 [ 349.886551][T14852] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.069874][ T28] audit: type=1400 audit(1786261815.813:2556): avc: denied { write } for pid=14849 comm="syz.6.3693" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 350.219302][T14852] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.3693: bg 0: block 5: invalid block bitmap [ 350.234988][T14852] EXT4-fs (loop6): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 948 with error 28 [ 350.267747][T14869] netlink: 'syz.3.3703': attribute type 10 has an invalid length. [ 350.284449][T14852] EXT4-fs (loop6): This should not happen!! Data will be lost [ 350.284449][T14852] [ 350.304977][T14869] bond11: (slave veth0_to_bond): Releasing active interface [ 350.322221][T14852] EXT4-fs (loop6): Total free blocks count 0 [ 350.357247][T14852] EXT4-fs (loop6): Free/Dirty block details [ 350.363606][T14852] EXT4-fs (loop6): free_blocks=0 [ 350.368651][T14852] EXT4-fs (loop6): dirty_blocks=952 [ 350.390529][T14852] EXT4-fs (loop6): Block reservation details [ 350.396804][T14852] EXT4-fs (loop6): i_reserved_data_blocks=952 [ 350.442006][T14852] EXT4-fs (loop6): shut down requested (0) [ 350.449524][ T28] audit: type=1400 audit(1786261816.253:2557): avc: denied { ioctl } for pid=14849 comm="syz.6.3693" path="/246/file0/cpuset.effective_mems" dev="loop6" ino=18 ioctlcmd=0x587d scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 350.496177][ T28] audit: type=1400 audit(1786261816.303:2558): avc: denied { read } for pid=2962 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 350.522137][ T28] audit: type=1400 audit(1786261816.303:2559): avc: denied { search } for pid=2962 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.549543][ T28] audit: type=1400 audit(1786261816.303:2560): avc: denied { write search } for pid=2962 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.573470][ T28] audit: type=1400 audit(1786261816.303:2561): avc: denied { add_name } for pid=2962 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.608057][ T28] audit: type=1400 audit(1786261816.303:2562): avc: denied { create } for pid=2962 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 350.629616][ T28] audit: type=1400 audit(1786261816.303:2563): avc: denied { append open } for pid=2962 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 350.699427][ T28] audit: type=1400 audit(1786261816.303:2564): avc: denied { getattr } for pid=2962 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 350.736849][T14891] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=14891 comm=syz.3.3711 [ 352.221441][T14923] netlink: 'syz.6.3723': attribute type 10 has an invalid length. [ 352.319519][T14926] Cannot find del_set index 4 as target [ 353.201005][T14957] netlink: 'syz.6.3736': attribute type 4 has an invalid length. [ 353.227059][T14957] netlink: 'syz.6.3736': attribute type 4 has an invalid length. [ 353.810135][T14973] netlink: 'syz.6.3741': attribute type 1 has an invalid length. [ 353.845681][T14973] 8021q: adding VLAN 0 to HW filter on device bond7 [ 353.946613][T14973] bond7: (slave veth5): Enslaving as an active interface with a down link [ 353.996086][T14978] netlink: 'syz.6.3741': attribute type 10 has an invalid length. [ 354.034124][T14978] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3741'. [ 354.976674][T14994] vlan7: left promiscuous mode [ 354.983628][T14994] bridge0: left promiscuous mode [ 354.999722][T14994] vlan9: left promiscuous mode [ 355.006949][T14994] bond17: left promiscuous mode [ 355.028086][T14999] xfrm0: Caught tx_queue_len zero misconfig [ 355.086774][T15005] loop6: detected capacity change from 0 to 256 [ 355.153936][ T11] lo speed is unknown, defaulting to 1000 [ 355.159761][ T11] syz0: Port: 1 Link DOWN [ 355.164688][ T11] lo speed is unknown, defaulting to 1000 [ 355.363741][ T28] audit: type=1326 audit(1786261821.163:2565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15016 comm="syz.5.3754" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9c19e0d9 code=0x7ffc0000 [ 355.394603][ T28] audit: type=1326 audit(1786261821.163:2566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15016 comm="syz.5.3754" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f0e9c19e0d9 code=0x7ffc0000 [ 355.651619][ T28] audit: type=1326 audit(1786261821.453:2567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15016 comm="syz.5.3754" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9c19e0d9 code=0x7ffc0000 [ 355.689239][ T28] audit: type=1326 audit(1786261821.453:2568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15016 comm="syz.5.3754" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9c19e0d9 code=0x7ffc0000 [ 355.928194][T15032] netlink: 'syz.5.3760': attribute type 30 has an invalid length. [ 356.099742][T15036] bond4: (slave bridge0): Releasing backup interface [ 356.127718][T15036] team0: Failed to send port change of device bridge0 via netlink (err -105) [ 356.143041][T15036] team0: Failed to send options change via netlink (err -105) [ 356.150758][T15036] team0: Port device bridge0 added [ 356.225630][T15038] team0: Failed to send port change of device bridge0 via netlink (err -105) [ 356.271032][T15038] bridge1: left promiscuous mode [ 356.297488][T15038] bond6: left promiscuous mode [ 356.316425][T15038] bridge2: left promiscuous mode [ 356.464363][T15050] loop6: detected capacity change from 0 to 512 [ 356.486673][T15050] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 356.528959][T15050] ext4 filesystem being mounted at /260/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 356.635016][T10700] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 356.641180][T15058] xfrm0: Caught tx_queue_len zero misconfig [ 357.062388][ T28] audit: type=1400 audit(1786261822.843:2569): avc: denied { append } for pid=15072 comm="syz.6.3770" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 357.109229][T15082] netlink: 332 bytes leftover after parsing attributes in process `syz.3.3774'. [ 358.157713][T15107] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3784'. [ 358.265703][T15107] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3784'. [ 359.106071][T15134] loop6: detected capacity change from 0 to 764 [ 359.950651][T15163] syzkaller0: entered promiscuous mode [ 359.956812][T15163] syzkaller0: entered allmulticast mode [ 360.062409][T15167] loop6: detected capacity change from 0 to 1024 [ 360.080156][T15167] ext4: Unknown parameter 'fowner' [ 360.118822][ T28] audit: type=1400 audit(1786261825.923:2570): avc: denied { write } for pid=15166 comm="syz.6.3807" path="socket:[49356]" dev="sockfs" ino=49356 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 361.656250][T15210] žÿ: renamed from team_slave_1 (while UP) [ 361.748083][ T28] audit: type=1326 audit(1786261827.553:2571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15214 comm="syz.5.3824" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9c19e0d9 code=0x7ffc0000 [ 361.813588][ T28] audit: type=1326 audit(1786261827.553:2572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15214 comm="syz.5.3824" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9c19e0d9 code=0x7ffc0000 [ 361.861427][ T28] audit: type=1326 audit(1786261827.583:2573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15214 comm="syz.5.3824" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9c19e0d9 code=0x7ffc0000 [ 361.906841][ T28] audit: type=1326 audit(1786261827.583:2574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15214 comm="syz.5.3824" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9c19e0d9 code=0x7ffc0000 [ 361.962484][ T28] audit: type=1326 audit(1786261827.583:2575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15214 comm="syz.5.3824" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f0e9c19e0d9 code=0x7ffc0000 [ 362.003318][ T28] audit: type=1326 audit(1786261827.583:2576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15214 comm="syz.5.3824" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9c19e0d9 code=0x7ffc0000 [ 362.046926][ T28] audit: type=1326 audit(1786261827.583:2577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15214 comm="syz.5.3824" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9c19e0d9 code=0x7ffc0000 [ 362.102252][ T28] audit: type=1326 audit(1786261827.593:2578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15214 comm="syz.5.3824" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9c19e0d9 code=0x7ffc0000 [ 362.147551][ T28] audit: type=1326 audit(1786261827.593:2579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15214 comm="syz.5.3824" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0e9c19e0d9 code=0x7ffc0000 [ 362.195843][ T28] audit: type=1326 audit(1786261827.593:2580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15214 comm="syz.5.3824" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f0e9c19e0d9 code=0x7ffc0000 [ 362.199619][T15225] lo speed is unknown, defaulting to 1000 [ 362.751984][T15238] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3840'. [ 362.826851][T15238] veth11: entered allmulticast mode [ 362.834757][T15238] bond7: (slave veth11): Enslaving as an active interface with an up link [ 362.971148][T15256] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3848'. [ 362.995585][T15256] bond18: entered promiscuous mode [ 363.018581][T15256] bond18: entered allmulticast mode [ 363.102244][T15268] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3838'. [ 363.327543][T15280] lo speed is unknown, defaulting to 1000 [ 363.572030][T15290] bond0: (slave bond_slave_0): Releasing backup interface [ 363.583599][T15290] bond0: (slave bond_slave_1): Releasing backup interface [ 363.611800][T15290] team0: Port device team_slave_0 removed [ 363.624834][T15290] team0: Failed to send options change via netlink (err -105) [ 363.644115][T15290] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 363.653729][T15290] team0: Port device team_slave_1 removed [ 363.660080][T15290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.680772][T15290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.690094][T15290] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 363.732070][T15291] team0: No ports can be present during mode change [ 364.015340][T15301] loop6: detected capacity change from 0 to 1024 [ 364.047533][T15301] netlink: 'syz.6.3850': attribute type 12 has an invalid length. [ 364.074245][T15301] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3850'. [ 364.086944][T15301] netlink: 'syz.6.3850': attribute type 12 has an invalid length. [ 364.096884][T15301] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3850'. [ 364.176110][T15321] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3857'. [ 364.189234][T15319] syz.3.3856: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 364.211946][T15319] CPU: 1 UID: 0 PID: 15319 Comm: syz.3.3856 Not tainted syzkaller #0 PREEMPT(lazy) [ 364.212061][T15319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 364.212076][T15319] Call Trace: [ 364.212083][T15319] [ 364.212104][T15319] __dump_stack+0x1d/0x30 [ 364.212135][T15319] dump_stack_lvl+0x95/0xd0 [ 364.212162][T15319] dump_stack+0x15/0x1b [ 364.212218][T15319] warn_alloc+0x145/0x1c0 [ 364.212242][T15319] ? rb_next+0x5c/0x80 [ 364.212278][T15319] __vmalloc_node_range_noprof+0xaa/0x11e0 [ 364.212312][T15319] ? ctx_sched_in+0x3e9/0x410 [ 364.212355][T15319] ? ktime_get+0x212/0x240 [ 364.212376][T15319] ? lapic_next_event+0x11/0x20 [ 364.212407][T15319] ? xskq_create+0x36/0xe0 [ 364.212494][T15319] ? __kmalloc_cache_noprof+0x30e/0x3d0 [ 364.212527][T15319] vmalloc_user_noprof+0x7d/0xb0 [ 364.212597][T15319] ? xskq_create+0x80/0xe0 [ 364.212645][T15319] xskq_create+0x80/0xe0 [ 364.212680][T15319] xsk_init_queue+0x70/0xb0 [ 364.212789][T15319] xsk_setsockopt+0x471/0x640 [ 364.212820][T15319] ? __pfx_xsk_setsockopt+0x10/0x10 [ 364.212849][T15319] __sys_setsockopt+0x184/0x200 [ 364.212958][T15319] __x64_sys_setsockopt+0x64/0x80 [ 364.213072][T15319] x64_sys_call+0x2327/0x3020 [ 364.213159][T15319] do_syscall_64+0x136/0x3c0 [ 364.213253][T15319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.213276][T15319] RIP: 0033:0x7f449719e0d9 [ 364.213294][T15319] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 364.213315][T15319] RSP: 002b:00007f4495bf7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 364.213386][T15319] RAX: ffffffffffffffda RBX: 00007f4497425fa0 RCX: 00007f449719e0d9 [ 364.213458][T15319] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 364.213475][T15319] RBP: 00007f4497235024 R08: 0000000000000004 R09: 0000000000000000 [ 364.213491][T15319] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 364.213507][T15319] R13: 00007f4497426038 R14: 00007f4497425fa0 R15: 00007ffd8caa6da8 [ 364.213528][T15319] [ 364.215669][T15319] Mem-Info: [ 364.429644][T15319] active_anon:32473 inactive_anon:11826 isolated_anon:0 [ 364.429644][T15319] active_file:2576 inactive_file:20341 isolated_file:0 [ 364.429644][T15319] unevictable:37 dirty:234 writeback:0 [ 364.429644][T15319] slab_reclaimable:4095 slab_unreclaimable:29431 [ 364.429644][T15319] mapped:32080 shmem:33331 pagetables:5721 [ 364.429644][T15319] sec_pagetables:0 bounce:0 [ 364.429644][T15319] kernel_misc_reclaimable:0 [ 364.429644][T15319] free:1819319 free_pcp:13129 free_cma:0 [ 364.481509][T15319] Node 0 active_anon:129892kB inactive_anon:47304kB active_file:10304kB inactive_file:81364kB unevictable:148kB isolated(anon):0kB isolated(file):0kB mapped:128320kB dirty:936kB writeback:0kB shmem:133324kB kernel_stack:6512kB pagetables:22884kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 364.535601][T15319] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 364.587372][T15319] lowmem_reserve[]: 0 2878 7857 7857 [ 364.599306][T15319] Node 0 DMA32 free:2944088kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947612kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 364.652022][T15319] lowmem_reserve[]: 0 0 4978 4978 [ 364.662222][T15319] Node 0 Normal free:4113012kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:63920kB inactive_anon:113488kB active_file:10304kB inactive_file:76608kB unevictable:148kB writepending:936kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:53036kB local_pcp:15212kB free_cma:0kB [ 364.714681][T15319] lowmem_reserve[]: 0 0 0 0 [ 364.727206][T15319] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 364.783181][T15319] Node 0 DMA32: 6*4kB (M) 2*8kB (M) 1*16kB (M) 5*32kB (M) 4*64kB (M) 3*128kB (M) 1*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944088kB [ 364.833396][T15319] Node 0 Normal: 2612*4kB (UME) 515*8kB (UME) 1215*16kB (UME) 912*32kB (UME) 547*64kB (UME) 316*128kB (UME) 137*256kB (UM) 57*512kB (UME) 39*1024kB (UME) 9*2048kB (UME) 941*4096kB (UM) = 4115608kB [ 364.896302][T15319] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 364.926282][T15319] 47748 total pagecache pages [ 364.938839][T15319] 63 pages in swap cache [ 364.964909][T15319] Free swap = 30032kB [ 364.979531][T15319] Total swap = 124996kB [ 365.020811][T15319] 2097051 pages RAM [ 365.043258][T15319] 0 pages HighMem/MovableOnly [ 365.062224][T15319] 81749 pages reserved [ 365.213275][T15343] netlink: 'syz.3.3866': attribute type 4 has an invalid length. [ 365.658960][T15361] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3871'. [ 365.689226][T15361] ip6gre2: entered promiscuous mode [ 365.708149][T15361] ip6gre2: entered allmulticast mode [ 365.752884][T15361] netlink: 'syz.2.3871': attribute type 6 has an invalid length. [ 365.766825][T15361] netlink: 72 bytes leftover after parsing attributes in process `syz.2.3871'. [ 366.333410][T15379] syzkaller0: entered promiscuous mode [ 366.345748][T15379] syzkaller0: entered allmulticast mode [ 366.710032][T15403] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3883'. [ 366.739689][T15403] ip6gre1: entered promiscuous mode [ 366.757681][T15403] ip6gre1: entered allmulticast mode [ 366.781654][T15403] netlink: 'syz.3.3883': attribute type 6 has an invalid length. [ 366.800324][T15403] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3883'. [ 367.383881][ T28] kauditd_printk_skb: 1362 callbacks suppressed [ 367.383899][ T28] audit: type=1400 audit(1786261833.193:3943): avc: denied { append } for pid=15440 comm="syz.6.3896" name="uprobe_events" dev="tracefs" ino=39 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 367.421705][ T28] audit: type=1400 audit(1786261833.223:3944): avc: denied { name_bind } for pid=15440 comm="syz.6.3896" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 367.445570][ T28] audit: type=1400 audit(1786261833.223:3945): avc: denied { read } for pid=15440 comm="syz.6.3896" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 368.312454][ T28] audit: type=1326 audit(1786261834.123:3946): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15460 comm="syz.1.3903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1596e0d9 code=0x7ffc0000 [ 368.458610][ T28] audit: type=1326 audit(1786261834.123:3947): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15460 comm="syz.1.3903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1596e0d9 code=0x7ffc0000 [ 368.485185][ T28] audit: type=1326 audit(1786261834.123:3948): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15460 comm="syz.1.3903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1596e0d9 code=0x7ffc0000 [ 369.037792][ T28] audit: type=1326 audit(1786261834.123:3949): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15460 comm="syz.1.3903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4d1596e0d9 code=0x7ffc0000 [ 369.069700][ T28] audit: type=1326 audit(1786261834.123:3950): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15460 comm="syz.1.3903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1596e0d9 code=0x7ffc0000 [ 369.107833][ T28] audit: type=1326 audit(1786261834.173:3951): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15460 comm="syz.1.3903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1596e0d9 code=0x7ffc0000 [ 369.136237][ T28] audit: type=1326 audit(1786261834.173:3952): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15460 comm="syz.1.3903" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4d1596e0d9 code=0x7ffc0000 [ 369.382211][T15463] loop6: detected capacity change from 0 to 4096 [ 369.419753][T15463] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 369.438262][T15486] bond7: (slave ): Releasing active interface [ 369.446530][T15486] bond1: (slave geneve2): Releasing active interface [ 369.455839][T15486] bond2: (slave bridge1): Releasing backup interface [ 369.482057][T15486] bond3: (slave bridge2): Releasing backup interface [ 369.500887][T15486] bond0: (slave erspan1): Releasing active interface [ 369.527483][T15486] bond8: (slave bond9): Releasing backup interface [ 369.536493][T15486] bond8: (slave bond9): the permanent HWaddr of slave - ca:60:3e:e8:ad:36 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 369.554161][T15486] bond8: (slave gretap1): making interface the new active one [ 369.563425][T15486] bond8: (slave gretap1): Releasing backup interface [ 369.572803][T15486] bond11: (slave ip6gretap1): Releasing backup interface [ 369.586973][T15486] bond15: (slave bridge5): Releasing backup interface [ 369.594148][T15486] bridge5: left promiscuous mode [ 369.599720][T15486] bridge5: left allmulticast mode [ 369.616180][T15486] bond16: (slave bridge6): Releasing backup interface [ 369.631791][T15486] bond17: (slave veth17): Releasing backup interface [ 369.644674][T15487] team0: Failed to send options change via netlink (err -105) [ 369.652808][T15487] team0: Mode changed to "activebackup" [ 369.707596][T15501] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3916'. [ 369.745621][T10700] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 370.120475][T15530] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3924'. [ 372.881039][T15522] team0: Port device bridge0 removed [ 372.896507][T15522] team0: Port device  removed [ 372.906687][T15522] bond1: (slave geneve2): Releasing active interface [ 372.918451][T15522] bond0: (slave erspan2): Releasing active interface [ 372.925983][T15522] erspan2: left promiscuous mode [ 372.936389][T15522] bond6: (slave bond7): Releasing backup interface [ 372.943151][T15522] bond6: (slave bond7): the permanent HWaddr of slave - c2:1a:48:b5:dc:84 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 372.960508][T15522] bond6: (slave gretap1): making interface the new active one [ 372.980612][T15522] bond6: (slave gretap1): Releasing backup interface [ 373.018994][T15522] bond8: (slave ip6gretap1): Releasing active interface [ 373.045380][T15522] bond9: (slave bridge5): Releasing backup interface [ 373.086656][T15522] bond11: (slave veth7): Releasing active interface [ 373.111583][T15522] bond12: (slave bridge6): Releasing backup interface [ 373.133719][T15522] bond13: (slave vlan5): Releasing backup interface [ 373.151221][T15525] team0: Mode changed to "activebackup" [ 373.159789][T15530] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 373.160255][T15532] workqueue: Failed to create a rescuer kthread for wq "bond18": -EINTR [ 373.381157][T15579] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3934'. [ 373.415588][T15579] batadv_slave_0: Caught tx_queue_len zero misconfig [ 373.422969][T15579] netlink: 7 bytes leftover after parsing attributes in process `syz.1.3934'. [ 373.455315][T15551] ================================================================== [ 373.463447][T15551] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 373.472116][T15551] [ 373.474467][T15551] write to 0xffff888130fc4ca0 of 8 bytes by task 15547 on cpu 1: [ 373.482208][T15551] shmem_file_splice_read+0x401/0x590 [ 373.487622][T15551] splice_direct_to_actor+0x261/0x680 [ 373.493021][T15551] do_splice_direct+0x119/0x1a0 [ 373.497896][T15551] do_sendfile+0x37d/0x640 [ 373.502340][T15551] __x64_sys_sendfile64+0x105/0x150 [ 373.507573][T15551] x64_sys_call+0x2dc4/0x3020 [ 373.512280][T15551] do_syscall_64+0x136/0x3c0 [ 373.516929][T15551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.522967][T15551] [ 373.525308][T15551] write to 0xffff888130fc4ca0 of 8 bytes by task 15551 on cpu 0: [ 373.533047][T15551] shmem_file_splice_read+0x401/0x590 [ 373.538449][T15551] splice_direct_to_actor+0x261/0x680 [ 373.543856][T15551] do_splice_direct+0x119/0x1a0 [ 373.548738][T15551] do_sendfile+0x37d/0x640 [ 373.553186][T15551] __x64_sys_sendfile64+0x105/0x150 [ 373.558413][T15551] x64_sys_call+0x2dc4/0x3020 [ 373.563122][T15551] do_syscall_64+0x136/0x3c0 [ 373.567746][T15551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.573669][T15551] [ 373.576097][T15551] value changed: 0x0000000000004266 -> 0x000000000000426c [ 373.583235][T15551] [ 373.585745][T15551] Reported by Kernel Concurrency Sanitizer on: [ 373.591932][T15551] CPU: 0 UID: 0 PID: 15551 Comm: syz.5.3927 Not tainted syzkaller #0 PREEMPT(lazy) [ 373.601331][T15551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 373.611494][T15551] ================================================================== [ 373.637978][T15585] loop6: detected capacity change from 0 to 512 [ 373.672891][T15585] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 373.687272][T15585] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 373.796741][T15584] syz.6.3935 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=1, oom_score_adj=1000 [ 373.846016][T15584] CPU: 1 UID: 0 PID: 15584 Comm: syz.6.3935 Not tainted syzkaller #0 PREEMPT(lazy) [ 373.846051][T15584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 373.846064][T15584] Call Trace: [ 373.846112][T15584] [ 373.846120][T15584] __dump_stack+0x1d/0x30 [ 373.846145][T15584] dump_stack_lvl+0x95/0xd0 [ 373.846166][T15584] dump_stack+0x15/0x1b [ 373.846213][T15584] dump_header+0x80/0x240 [ 373.846234][T15584] oom_kill_process+0x295/0x350 [ 373.846266][T15584] out_of_memory+0x981/0xbc0 [ 373.846318][T15584] try_charge_memcg+0x621/0xa00 [ 373.846345][T15584] __obj_cgroup_charge+0x105/0x230 [ 373.846374][T15584] __memcg_slab_post_alloc_hook+0x492/0x860 [ 373.846456][T15584] kmem_cache_alloc_node_noprof+0x24f/0x3d0 [ 373.846480][T15584] ? dup_task_struct+0x5a/0x6a0 [ 373.846586][T15584] ? dup_task_struct+0x5a/0x6a0 [ 373.846608][T15584] dup_task_struct+0x5a/0x6a0 [ 373.846645][T15584] copy_process+0x5a0/0x2310 [ 373.846669][T15584] ? __rcu_read_unlock+0x33/0x70 [ 373.846696][T15584] ? folio_mark_accessed+0x12e/0x3a0 [ 373.846718][T15584] ? copy_clone_args_from_user+0x431/0x4f0 [ 373.846771][T15584] kernel_clone+0x1c0/0x5f0 [ 373.846795][T15584] __se_sys_clone3+0x1f5/0x230 [ 373.846829][T15584] __x64_sys_clone3+0x31/0x40 [ 373.846909][T15584] x64_sys_call+0x580/0x3020 [ 373.846939][T15584] do_syscall_64+0x136/0x3c0 [ 373.846971][T15584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.847035][T15584] RIP: 0033:0x7f088d20eec9 [ 373.847056][T15584] Code: 90 b8 01 00 00 00 b9 01 00 00 00 eb ec 0f 1f 40 00 b8 ea ff ff ff 48 85 ff 74 28 48 85 d2 74 23 49 89 c8 b8 b3 01 00 00 0f 05 <48> 85 c0 7c 14 74 01 c3 31 ed 4c 89 c7 ff d2 48 89 c7 b8 3c 00 00 [ 373.847075][T15584] RSP: 002b:00007ffffbac6f08 EFLAGS: 00000206 ORIG_RAX: 00000000000001b3 [ 373.847112][T15584] RAX: ffffffffffffffda RBX: 00007f088d1ca460 RCX: 00007f088d20eec9 [ 373.847129][T15584] RDX: 00007f088d1ca460 RSI: 0000000000000058 RDI: 00007ffffbac6f60 [ 373.847145][T15584] RBP: 00007f088bc466c0 R08: 00007f088bc466c0 R09: 00007ffffbac7047 [ 373.847161][T15584] R10: 0000000000000008 R11: 0000000000000206 R12: ffffffffffffffe8 [ 373.847176][T15584] R13: 000000000000006e R14: 00007ffffbac6f60 R15: 00007ffffbac7048 [ 373.847200][T15584] [ 373.847217][T15584] memory: usage 307200kB, limit 307200kB, failcnt 197 [ 374.045989][ T28] kauditd_printk_skb: 69 callbacks suppressed [ 374.046006][ T28] audit: type=1326 audit(1786261839.853:4022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15575 comm="syz.3.3933" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=39 compat=0 ip=0x7f4497197e57 code=0x0 [ 374.081746][T15584] memory+swap: usage 83328kB, limit 9007199254740988kB, failcnt 0 [ 374.129804][T15584] kmem: usage 55304kB, limit 9007199254740988kB, failcnt 0 [ 374.147806][T15584] Memory cgroup stats for /syz6: [ 374.148135][T15584] cache 4296704 [ 374.169432][T15584] rss 315392 [ 374.182010][T15584] shmem 4280320 [ 374.191401][T15590] netlink: 'syz.2.3940': attribute type 12 has an invalid length. [ 374.199945][T15590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3940'. [ 374.218622][T15584] mapped_file 0 [ 374.222060][T15590] netlink: 'syz.2.3940': attribute type 12 has an invalid length. [ 374.230101][T15590] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3940'. [ 374.231401][T15584] dirty 0 [ 374.239149][ T2206] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.250409][ T2206] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.257674][T15584] writeback 0 [ 374.260469][ T2206] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.270275][T15584] workingset_refault_anon 93 [ 374.277110][T15584] workingset_refault_file 0 [ 374.282457][T15584] swap 1052672 [ 374.285981][T15584] swapcached 2117632 [ 374.290671][T15584] pgpgin 161271 [ 374.295636][T15584] pgpgout 160145 [ 374.297032][ T2206] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 374.299330][T15584] pgfault 127711 [ 374.311397][T15584] pgmajfault 1580 [ 374.315843][T15584] inactive_anon 167936 [ 374.320021][T15584] active_anon 4427776 [ 374.324441][T15584] inactive_file 0 [ 374.328288][T15584] active_file 16384 [ 374.332215][T15584] unevictable 0 [ 374.335732][T15584] hierarchical_memory_limit 314572800 [ 374.341137][T15584] hierarchical_memsw_limit 9223372036854771712 [ 374.347920][T15584] total_cache 4296704 [ 374.352116][T15584] total_rss 315392 [ 374.355880][T15584] total_shmem 4280320 [ 374.359888][T15584] total_mapped_file 0 [ 374.363989][T15584] total_dirty 0 [ 374.367474][T15584] total_writeback 0 [ 374.371348][T15584] total_workingset_refault_anon 93 [ 374.376901][T15584] total_workingset_refault_file 0 [ 374.382704][T15584] total_swap 1052672 [ 374.386654][T15584] total_swapcached 2117632 [ 374.391142][T15584] total_pgpgin 161271 [ 374.395205][T15584] total_pgpgout 160145 [ 374.399385][T15584] total_pgfault 127711 [ 374.403519][T15584] total_pgmajfault 1580 [ 374.407809][T15584] total_inactive_anon 167936 [ 374.412878][T15584] total_active_anon 4427776 [ 374.417391][T15584] total_inactive_file 0 [ 374.421604][T15584] total_active_file 16384 [ 374.425952][T15584] total_unevictable 0 [ 374.429946][T15584] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz6,task_memcg=/syz6,task=syz.6.3935,pid=15584,uid=0 [ 374.445204][T15584] Memory cgroup out of memory: Killed process 15584 (syz.6.3935) total-vm:96236kB, anon-rss:1428kB, file-rss:22180kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 374.469869][T10700] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 382.831704][ T4158] netdevsim netdevsim4 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.842998][ T2206] netdevsim netdevsim4 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.871012][ T9754] bond4 (unregistering): (slave ip6gretap1): Releasing active interface [ 382.888182][ T9754] bond0 (unregistering): (slave erspan1): Releasing active interface [ 382.896732][ T9754] erspan1 (unregistering): left promiscuous mode [ 382.907737][ T9754] bond3 (unregistering): (slave geneve2): Releasing active interface [ 382.922430][ T9754] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 382.938605][ T9754] bond5 (unregistering): (slave bridge6): Releasing backup interface [ 382.946941][ T9754] bridge6 (unregistering): left promiscuous mode [ 382.957028][ T9754]  (unregistering): Released all slaves [ 382.966946][ T9754] bond1 (unregistering): Released all slaves [ 382.975871][ T9754] bond2 (unregistering): (slave veth5): Removing an active aggregator [ 382.984514][ T9754] bond2 (unregistering): (slave veth5): Releasing backup interface [ 382.993045][ T9754] bond2 (unregistering): Released all slaves [ 383.003096][ T9754] bond3 (unregistering): Released all slaves [ 383.011401][ T9754] bond0 (unregistering): Released all slaves [ 383.021604][ T9754] bond4 (unregistering): Released all slaves [ 383.030489][ T9754] bond5 (unregistering): Released all slaves [ 383.041805][ T4158] netdevsim netdevsim4 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.050037][ T4158] netdevsim netdevsim4 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.125184][ T9754] hsr_slave_0: left promiscuous mode [ 383.130961][ T9754] hsr_slave_1: left promiscuous mode [ 383.147654][ T28] audit: type=1400 audit(1786261848.953:4023): avc: denied { write } for pid=15596 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 383.174960][ T28] audit: type=1400 audit(1786261848.973:4024): avc: denied { write } for pid=15607 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 383.234758][ T3019] 8021q: adding VLAN 0 to HW filter on device eth5 [ 383.311085][ T28] audit: type=1400 audit(1786261849.113:4025): avc: denied { write } for pid=15610 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 383.336203][ T28] audit: type=1400 audit(1786261849.143:4026): avc: denied { write } for pid=15621 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 383.348303][ T3019] 8021q: adding VLAN 0 to HW filter on device eth6 [ 383.434490][ T28] audit: type=1400 audit(1786261849.243:4027): avc: denied { write } for pid=15624 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 383.457752][ T28] audit: type=1400 audit(1786261849.243:4028): avc: denied { write } for pid=15635 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1