last executing test programs: 5m5.964656621s ago: executing program 32 (id=76): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000140)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}], 0x10) 5m3.701158155s ago: executing program 33 (id=121): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x989, 0x0) 5m1.709989813s ago: executing program 34 (id=141): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x5c, 0x24, 0xd0f, 0x3, 0xfffffffc, {0x60, 0x0, 0x0, r1, {0x0, 0x3}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x6, 0x1d, 0x407, 0x2, 0x0, 0x3, 0x4}}, {0x4}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x1d4}, 0x8840) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'veth1_macvtap\x00', &(0x7f0000000340)=@ethtool_perm_addr={0x4b}}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000740)={0x0, 0x0, 0x0}, 0x4) 4m49.663070578s ago: executing program 35 (id=297): r0 = socket(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r0, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r0, &(0x7f00000005c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000b4bffc)=0x8, 0x4) setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000080)={0x0, 0x2710}, 0x10) write(r0, &(0x7f0000000000)='\"', 0x1) 4m39.670560044s ago: executing program 36 (id=419): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x5, 0x4, 0x8, 0xf}, 0x50) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000500)={r1}, 0x4) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x19, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r2, r0}, 0xc) 4m17.018584043s ago: executing program 3 (id=843): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000005c0)}], 0x1}}], 0x1, 0x44845) connect$can_j1939(r1, &(0x7f0000000000)={0x1d, r2, 0x0, {0x0, 0xf0, 0x2}, 0xff}, 0x18) 4m16.961033045s ago: executing program 3 (id=845): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) socket$inet_tcp(0x2, 0x1, 0x0) get_mempolicy(0x0, 0x0, 0x400, &(0x7f00000ce000/0x1000)=nil, 0x3) ioctl$XFS_IOC_GOINGDOWN(r0, 0x8004587d, &(0x7f0000000100)=0x1) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8810) 4m16.711883902s ago: executing program 3 (id=847): unshare(0x400) dup(0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x3}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x23, 0x4, 0x2, 0x40, r0}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{r2}, &(0x7f0000000980), &(0x7f00000002c0)=r1}, 0x20) 4m16.617651565s ago: executing program 3 (id=848): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) mount$bind(&(0x7f0000000200)='.\x00', &(0x7f00000004c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x80000, 0x0) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x107) 4m16.617365165s ago: executing program 3 (id=849): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.0/streaming_maxpacket\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) write(r0, &(0x7f0000000780)='1', 0x1) 4m16.397657011s ago: executing program 3 (id=853): syz_open_dev$loop(&(0x7f0000000180), 0x8000000000000000, 0x2000) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) 4m16.294874214s ago: executing program 37 (id=853): syz_open_dev$loop(&(0x7f0000000180), 0x8000000000000000, 0x2000) r0 = socket(0x10, 0x3, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0xa00e1, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0xa}, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r2 = socket(0x1d, 0x2, 0x6) mount$9p_fd(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000040), 0x3000084, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r2]) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x14, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x14}}, 0x0) 3m39.10059302s ago: executing program 8 (id=1268): socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_config_ext={0x4, 0xf}, 0x116414, 0x8, 0x11000, 0x5, 0x2, 0x90000011, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000001200000000000000000095"], &(0x7f0000000c00)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r1, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) 3m37.408012609s ago: executing program 8 (id=1289): r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x4, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) accept(r0, 0x0, 0x0) 3m36.437585816s ago: executing program 8 (id=1297): bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000c40)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bc09"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000001340)=""/4108, 0x100c}], 0x1}, 0x2002) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={0x0, 0x0}, 0x28) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c034002040000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa, 0x0, 0x0, 0x4000}, 0x0) 3m36.277892971s ago: executing program 8 (id=1298): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x12) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000380)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0xb) 3m36.157764934s ago: executing program 8 (id=1299): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0)="a6", 0x1, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='scalable', 0x8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x3b071, 0xffffffffffffffff, 0x0) shutdown(r0, 0x1) 3m34.177572181s ago: executing program 8 (id=1318): setxattr(0x0, &(0x7f00000001c0)=@known='trusted.syz\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x70}, &(0x7f00000001c0)=0x8) 3m34.087011414s ago: executing program 38 (id=1318): setxattr(0x0, &(0x7f00000001c0)=@known='trusted.syz\x00', 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={0x0, 0x70}, &(0x7f00000001c0)=0x8) 3m28.320501198s ago: executing program 1 (id=1350): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000280)='cdg', 0x3) r1 = socket$inet6(0xa, 0x3, 0x8c) connect$inet6(r1, 0x0, 0x0) close(0x3) 3m28.085266504s ago: executing program 1 (id=1353): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f00000003c0)={0x40004042, 0xfffffff8}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) close(0x3) 3m27.946299228s ago: executing program 1 (id=1357): memfd_create(&(0x7f00000012c0)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\x97d\x00\x00\x00\x00\x00\x00\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea\x00\x00\x00\x00\x00\x00\x00\x00\x03\xc23l\x9c\xda\xed\x98\x0fK=X\xfdY`l\xe7\x00K\xc2K\xb34\xd8\x1e\xa7\nEJ\x9b\x1bb\x80|`\xfb\x16\xcf5F\xac\xae=r\x8c)\x97\x9e7\xd7\x01\x0e\a\x17F\xb8\x1eD\r-\x11o\xa1X\x90\x8f^\xf0S\xb2\xce\x06\xa4\x8e\xc6\x9a:\xd9\x02\x90\x8db\xee\xc7}\xb0W\xea\xcbm\x17.%\"\xec\x9d\x90\xb7[W\xce\xb9^\xa3|\xd4\xeb\xc1\xcd@\x15n/\xbf\x86\xea\xe9O\xaf\xee\x88W\x0f00~\xf2\xe9\xcdm\xb9e|O.\xc8\x85\x1a\xe9\xcf\xe5\x1e\x86\xaa\xed|\x15i\xeb4pv\"\fd\xa4\xf4\xc0\xac\x8eO\xb8\xa8\x8e\x9c\x0f\xf9\x80\x90\xdf3[\xee\r\x88\x9f', 0x6) openat$urandom(0xffffffffffffff9c, &(0x7f00000005c0), 0x101000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000fee000/0x12000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m27.807282211s ago: executing program 1 (id=1360): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect(0x2, 0x3f, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2400, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000100)=0x1) ioctl$PPPIOCATTCHAN(r1, 0x4020744f, 0x0) 3m27.155977407s ago: executing program 1 (id=1364): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x1a1280, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac3) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 3m26.909923993s ago: executing program 1 (id=1365): connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x1, 0x39c}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) io_uring_enter(r0, 0x124, 0x14, 0x17, 0x0, 0x0) 3m11.721973292s ago: executing program 39 (id=1365): connect$inet(0xffffffffffffffff, &(0x7f0000000480)={0x2, 0x4, @multicast2}, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f680, 0x1, 0x39c}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) io_uring_enter(r0, 0x124, 0x14, 0x17, 0x0, 0x0) 2m44.393838163s ago: executing program 9 (id=1730): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000e5610a1301af0627a144ae16020000000000001103000000ffffffff0000ffffffe5000000000000000000"], 0x0, 0x37}, 0x28) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x480}], 0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, r0, 0x1, 0x4}, 0x50) epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x42000, 0x24}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x12, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40680c5}, 0x0) 2m43.461507286s ago: executing program 9 (id=1736): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000, 0x0, 0x0, 0x0, 0x401}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x24008094) 2m43.202376043s ago: executing program 9 (id=1737): ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) lstat(0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd6, 0x0, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000300)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000140)={0x15, 0x110, 0xfa00, {r1, 0x44, 0x30, 0x30, 0x0, @in6={0x1b, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x10000bff}, @ib={0x1b, 0x20d9, 0x100fff, {"4a50abf0c8ed50f638facd57de629163"}, 0x0, 0x1, 0xf35}}}, 0x118) 2m43.061632736s ago: executing program 9 (id=1738): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r0 = socket(0x2, 0x3, 0x6) bind$inet(r0, &(0x7f0000000080)={0x2, 0xfffa, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f00000000c0)=0x6, 0x4) sendto$inet(r0, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x4e24, @broadcast}, 0x10) sendto$inet(r0, &(0x7f00000023c0)="8ce2ad4d4f95e087a7846d3f81", 0x14, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) syz_extract_tcp_res$synack(&(0x7f0000000100), 0x1, 0x0) 2m42.954260989s ago: executing program 9 (id=1739): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./rpc_pipefs/gssd/clntXX/gssd\x00', 0x1a1280, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac3) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 2m42.643355647s ago: executing program 9 (id=1740): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) listen(r0, 0x364) listen(r1, 0x0) 2m27.593779512s ago: executing program 40 (id=1740): r0 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) listen(r0, 0x364) listen(r1, 0x0) 47.583855734s ago: executing program 6 (id=2775): openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = epoll_create1(0x80000) r2 = fcntl$dupfd(r0, 0x0, r0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000040)={0x20000000}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f00000001c0)={0x10000014}) epoll_pwait(r1, &(0x7f0000000000)=[{}, {}], 0x2, 0x1, 0x0, 0x0) 47.463754397s ago: executing program 6 (id=2777): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000014c0)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x5, 0x9}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4004) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@gettfilter={0x2c, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0xc}, {0x0, 0xfff1}}, [{0x8, 0xb, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 47.243122432s ago: executing program 6 (id=2781): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x1, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000000)={0x622, 0x40001000}) 47.111218046s ago: executing program 6 (id=2794): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x524, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000000), 0xfd, 0x4cb, &(0x7f0000000180)="$eJzs3M1vG0UbAPBnHSdp+vEmbykfLYUWCqKASJq0QIU4UAQSB5CQuJRjSEIJTRuUpohWFQQO5Ygqca84IvEXcIILAk5IvZY7qlShXlqKkIzW3nWcxE4c105o/ftJsWfWa8883hl7ZifeALrW/vQmidgeEVcjYrCSXbrD/srdrRsXJv66cWEiiVLpnT+T8n43b1yYyHfNn7ctzyws3V7rzLnzJ8dnZqbmsvzI/KmPRs6cO//c9KnxE1Mnpk6PHT165PDoiy+MPd+48r1rx1dbp5t7Pp3du/uNdy+9NXH80nu/fJfk8S+J4+O1X7Q5++ts68kTT7arlP+IHeXbgfJtUsy3FjavQjQlbZDFrCtdjcHoierBi8F4/YtNrRzQUat/hQ5FRGlRkt3XbgPuYknTvblXv4d7SvZFn0QsTKRz4Nr5fDe4fqwyAUrjvpX9VR4pVmevvdX5bfsVI/pj4fbl4wu3L8fieYi+DhUHABA/HKvc52O/xfFfoVi73yvZ2tBQRPw/InZGxH0RsSsi7o+IByLiwYh4qOY59dZ9llu+SLJy/Fm41lJgTbr+bMTL2drW0vFfde1iqCfL7SjH35u8Pz0zdSgi/hcRB6O3P82PrlLGj69d+SpLrhjXpfEfz8Z/6V9afj4WzOpxrdi/9DmT4/Pjdxp37vrnEXuK9eJPqisB6XHcHRF79rVWxvQz3+5t9Nja8ddRXHZ/B0rfRDxVOf4LsSz+XLL6+uTIlpiZOjSSt4qVfv3t4tuNym8p/jZKj//Wuu2/Gv9QUrtee2b9ZVz8/cuGc8om2/+SfpO2/75kaVf6ZHx+fm40oi95s5zvK39ipdtj5X5ji/un8R88UL//74zFd+LhiEgb8SMR8WhE7Mvq/lhEPB4RB1aJ/+dXn/iw9fg7K41/cu3j/8HT1ePfMJGvba94qOfkT9+XH8kP2dAq8SdR5/gfKacOZlua+fxbtaZzd9KaAQAA4O5TiIjtkRSGq+lCYXi48v/yu2JrYWb2pZGI2bOnJyu/ERiK3kJ+pmuwej40FkazaX1+fnRsWf5wdt74656Bcn54YnZmcrODhy63rUH/T/3Rs9m1AzquDetowF2q1f5fKpU+a3NVgA3m+x+6l/4P3atO/x9Ylu/fqLoAG6um/xfyTM3E/p/F3wkD95pG4/8rG1wPYOOZ/0P30v+he+n/0JWyX8IXo6lfy7eQiOLa+6SfPw336YmIjlSs9aeXSltWXuWgkpg+24GqVhN9bXzB7cuvkjC4vteJwjoLTWrb2JZ1XKNhRSI69PZ2KvF3drHNDSgr7UpzA417U/OJzf5kAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaI9/AwAA//+DutIv") close(0xffffffffffffffff) creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000180)='./bus\x00', 0x8000, 0x109) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5b966d61fdcf335263bd9bbba95216817e8d59825910e81ce13dc577edb48b001d0000000000000000f0ffffff12fb00000000000000000200", "f2835973db229a4c6681000000004430eaf04faf0000000000b60000000100", [0x8, 0x8]}) 46.253568677s ago: executing program 6 (id=2789): r0 = gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x0, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0) unshare(0x6a040000) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 44.902010791s ago: executing program 6 (id=2808): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0x19e, &(0x7f0000000a00)=ANY=[], 0x0) 44.692106586s ago: executing program 41 (id=2808): mkdirat(0xffffffffffffff9c, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="10000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r2}, &(0x7f0000000000), &(0x7f0000000040)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r3, r1}, 0x14) syz_emit_ethernet(0x19e, &(0x7f0000000a00)=ANY=[], 0x0) 3.080265053s ago: executing program 2 (id=3295): write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{}, 0x0, &(0x7f00000002c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x3}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'veth1_to_bond\x00', 0x800}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa5, 0x8, 0x0, 0x0}}, 0x10) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x8946, &(0x7f0000000080)) 3.025205385s ago: executing program 2 (id=3296): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x80000000, 0x0, 'queue0\x00', 0x32a}) write$sndseq(r1, &(0x7f0000000000)=[{0x1e, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1001a) close_range(r0, 0xffffffffffffffff, 0x400000000000000) 2.933863857s ago: executing program 2 (id=3297): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x80049363, 0x0) 2.492691447s ago: executing program 4 (id=3301): openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x8002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xfd2, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0xc, 0xa0002f5}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x0, 0x80000002, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.479598848s ago: executing program 2 (id=3302): r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xb, &(0x7f0000000000), 0x0) r1 = gettid() tkill(r1, 0x11) 2.346632622s ago: executing program 5 (id=3315): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000300)={0xa, 0x2, 0xfffffffc, @empty, 0x80000001}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f0000000200)=0x6, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r1 = dup(r0) sendto$packet(r1, &(0x7f0000000400), 0x5b5ffb81, 0x24005010, 0x0, 0x0) pselect6(0x40, &(0x7f0000000600)={0x2, 0x8, 0x35, 0xc5, 0x7ff, 0xfffffffffffffff7, 0xfffffffffffffff7, 0xc7}, &(0x7f0000000640)={0x8, 0xe, 0x6, 0x8000000000000001, 0x8, 0x3, 0x5, 0xffffffffffff48e5}, 0x0, 0x0, 0x0) connect$unix(r1, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) 2.345935882s ago: executing program 4 (id=3306): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x100000019, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x34000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40) recvmmsg(r2, &(0x7f0000005040)=[{{0x0, 0x0, 0x0}, 0x80000000}, {{&(0x7f0000000300)=@sco, 0x80, &(0x7f00000037c0)=[{&(0x7f0000000380)=""/197, 0xc5}, {&(0x7f0000000480)=""/191, 0xbf}, {&(0x7f0000000540)=""/62, 0x3e}, {&(0x7f00000027c0)=""/4096, 0x1000}], 0x4, &(0x7f0000003800)=""/68, 0x44}, 0x4}, {{&(0x7f0000003880)=@phonet, 0x80, &(0x7f00000049c0)=[{&(0x7f0000003900)=""/4096, 0x1000}, {&(0x7f0000004900)=""/50, 0x32}, {&(0x7f0000004940)=""/33, 0x21}, {&(0x7f0000004980)=""/12, 0xc}], 0x4, &(0x7f0000004a00)=""/31, 0x1f}, 0x6}, {{&(0x7f0000004a40)=@can, 0x80, &(0x7f0000004e40)=[{&(0x7f0000004ac0)=""/42, 0x2a}, {&(0x7f0000004b00)=""/162, 0xa2}, {&(0x7f0000004bc0)=""/90, 0x5a}, {&(0x7f0000004c40)=""/227, 0xe3}, {&(0x7f0000004d40)=""/214, 0xd6}], 0x5}, 0x7}, {{&(0x7f0000004ec0)=@pppol2tpv3, 0x80, 0x0, 0x0, &(0x7f0000004fc0)=""/69, 0x45}, 0x6}], 0x5, 0x40000000, 0x0) 1.566360421s ago: executing program 2 (id=3307): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000540)='./file1\x00', 0x3010018, &(0x7f0000000040), 0x5, 0x4c3, &(0x7f0000000fc0)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.stat\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x4, @perf_bp={0x0, 0xe}, 0x2010, 0x0, 0x0, 0x0, 0x8, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pwritev2(0xffffffffffffffff, 0x0, 0x0, 0x3f7, 0x3, 0x10) semtimedop(0x0, 0x0, 0x0, 0x0) semctl$SETVAL(0x0, 0x4, 0x10, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000200)={0x200, 0x8, 0x4, 0xfffffffc}) 1.564869811s ago: executing program 5 (id=3309): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r0 = socket(0x2b, 0x1, 0x1) setsockopt$inet6_tcp_int(r0, 0x6, 0x2c, &(0x7f0000000540)=0x3, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000240)=r2}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x53f, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x8}, 0x50) 1.507877452s ago: executing program 7 (id=3311): socket$inet_tcp(0x2, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x2f64, &(0x7f0000000040)={0x0, 0x36e, 0xc000, 0x2, 0x240}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x0, 0x0, &(0x7f0000000680)='syzkaller\x00', 0x1, 0x8, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f0000000000)={0xb, 0x29, 0x2, {0x401}}, 0xb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x1000040, &(0x7f0000000040)={[{@barrier}, {@journal_async_commit}, {@quota}, {@abort}, {@init_itable}, {@nodioread_nolock}]}, 0xf9, 0x5af, &(0x7f00000013c0)="$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") 1.420457114s ago: executing program 4 (id=3312): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) waitid(0x2, r0, 0x0, 0x4, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) 1.355301266s ago: executing program 5 (id=3313): r0 = gettid() tkill(r0, 0x11) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) rt_sigtimedwait(&(0x7f0000000000)={[0x1000]}, 0x0, &(0x7f0000000040)={0x77359400}, 0x8) 1.335772177s ago: executing program 0 (id=3314): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) shutdown(0xffffffffffffffff, 0x1) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99925bd700000000000fc00000000000000007fbb4b05000000ac1e00010000000000000000a05d000000000000000000000a"], 0xb8}}, 0x0) sendmsg$rds(0xffffffffffffffff, &(0x7f0000001e00)={&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x10) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x2500, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) 1.1857273s ago: executing program 0 (id=3316): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0/file0\x00', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) wait4(0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f00000005c0)='./cgroup/../file0/file0\x00') r1 = openat$cgroup_type(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000180), 0x9) 1.18547745s ago: executing program 7 (id=3317): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="c709bc297d2688e026", 0x9}], 0x1}}], 0x1, 0x41) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r2, 0x1, {0x1, 0xf0, 0x3}}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x24, 0x11, 0x1, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xb, 0xfff2}, {0xfff1, 0x9}, {0x2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 1.097000152s ago: executing program 0 (id=3319): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x2a0471a, &(0x7f0000000280)={[{}]}, 0x82, 0x499, &(0x7f0000000840)="$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") rename(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000180)='./file1\x00') r0 = open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) pwritev2(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x2000, 0x0, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x48) pwrite64(r1, &(0x7f0000003a80)='\t', 0x1, 0x8000c61) 1.045208644s ago: executing program 5 (id=3320): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000)=0x4a3, 0x4) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000240)=0xc8, 0x4) recvmmsg(r0, &(0x7f0000000040), 0x3fffdf2, 0x45833af92e4b39ff, 0x0) 981.666356ms ago: executing program 7 (id=3321): r0 = getpgrp(0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r4, &(0x7f0000000100)='.\x00', 0x9000, &(0x7f0000001dc0)={0x0, 0x89, 0x20000, {r4}}, 0x20) 950.667676ms ago: executing program 5 (id=3322): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc090, 0x4, @perf_config_ext={0x0, 0x16}, 0x1a1ed, 0x0, 0x11000, 0x1, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0x0, 0x25dfdbfd, {0x2}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_FDB={0x4}, @NHA_OIF={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x48800}, 0x20044000) io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x10, 0xa0002f5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00'}, 0x94) writev(0xffffffffffffffff, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) 875.207098ms ago: executing program 7 (id=3323): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "03c0000000000500", "9e8ecc7bb535277672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "dc5db43f", "a1034200000102a0"}, 0x38) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000002800000060ec97000fc83a00fe8000000000000000000000000000aaff0200"/51], 0xffe) 835.815089ms ago: executing program 5 (id=3324): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) io_setup(0x2, &(0x7f0000000000)=0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0x1) syz_clone3(&(0x7f0000000300)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) pselect6(0x40, &(0x7f0000000100)={0xa, 0x8, 0x15, 0x20000000000006, 0x7fff, 0x97, 0x27ff, 0x50d6}, 0x0, 0x0, 0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r2, 0x0}]) sendmmsg$inet6(r0, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e1f, 0x1, @private0, 0x1}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000040)="a4", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e21, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0xf}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000880)='M', 0x1}], 0x1}}], 0x2, 0x40001) shutdown(r0, 0x1) 829.927839ms ago: executing program 0 (id=3325): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x80008, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x152, 0x1, 0x0, 0x2, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3801000010000100fefffffffddbdf25fe889637429010eb0f82000000000001fc010000000000000000000000000001000107144e230005000000803c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff000000000000000000000000000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffff0200000000000000ffffffffffffffff2a000000000000001f00000000000000b80700000000000002000000fcffffffbcfbffff2abd700000000000020001002000000000000000480003006465666c617465"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x15}, @in=@private=0xa010100, 0x4e1f, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x80000000, 0x0, 0xffffffffffeffffa}, {}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x4d4, 0x32}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x0, 0x0, 0xb7, 0x9, 0xfffffffe, 0x3}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 460.509428ms ago: executing program 2 (id=3326): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/tracing/trace_pipe\x00', 0x800, 0xc2) mount$9p_fd(0x0, 0x0, 0x0, 0x2008040, 0x0) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x3}, 0x4) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 459.793368ms ago: executing program 7 (id=3327): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2112, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x657a, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000060000000400000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 418.634759ms ago: executing program 4 (id=3328): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000037c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@ipv6_deladdrlabel={0x38, 0x48, 0x301, 0x70bd2d, 0x25dfdbfc, {0xa, 0x0, 0x80, 0x0, 0x0, 0x5}, [@IFAL_LABEL={0x8, 0x2, 0x4}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000881}, 0x44040) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000400)={{0x0, 0x1}, 0x1000000, 0xfffffc, 0xb, {0x0, 0x88}, 0x2, 0x20}) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8, 0xfffffff5) mount(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000080)='trans=tcp,') getdents(r0, &(0x7f0000000080)=""/189, 0xbd) 288.548722ms ago: executing program 4 (id=3329): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)=@delchain={0x30, 0x64, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {0x10, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}}, 0x4040004) 280.512123ms ago: executing program 0 (id=3330): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setresuid(0x0, 0xee00, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x331f, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xd, 0x10b}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0xfffffffffffffe3a, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40080c1}, 0x20000054) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x20000000000002d2, &(0x7f0000000000)=[{0x6, 0x29, 0x0, 0x7fff0000}]}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 250.153863ms ago: executing program 4 (id=3331): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002e000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff90850000007300000095000000000000002f81c461b3fea834ceb0e17d9838c2830ca7ce46e581a192326a3698c79205e02f1561b0a3c595448e9f7024b45fb2006c9917fe2a42fcd2ce278009682dc8f7c867b177ec5bd50b92aedef35b6cd87b56690b4c96f63ab021ee1cf616d8af7491"], &(0x7f0000000080)='GPL\x00'}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d34, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x14039, 0xba, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500030000120800040043000000a8001600a400014020000c00ffffff7fb94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) r2 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="0206e7ec02000000ffffffff006d97dc", 0x10}], 0x1}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x7c}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 101.221207ms ago: executing program 7 (id=3332): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r2, 0xf}, &(0x7f0000000440)=0x8) 0s ago: executing program 0 (id=3333): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x3c, 0x2, {{0x1ff, 0x4, 0x0, 0x0, 0xfffffffd, 0x8}, [@TCA_NETEM_ECN={0x8, 0x7, 0x1}, @TCA_NETEM_LOSS={0x18, 0x5, 0x0, 0x1, [@NETEM_LOSS_GE={0x14, 0x2, {0xfffffff7, 0x0, 0xed, 0x6}}]}]}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x0) sendto$packet(r0, &(0x7f00000002c0)="44c33b69ebc9e05e9bdec0c288a8", 0xe, 0x6f4fef9cab2ede47, &(0x7f0000000440)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x14) kernel console output (not intermixed with test programs): rtner for any adapters in the bond [ 190.438314][T10311] bond3: (slave dummy0): Enslaving as a backup interface with an up link [ 190.539256][ T12] bond3: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 190.785600][T10321] bond4: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 190.804173][T10321] bond4 (unregistering): Released all slaves [ 191.023536][T10326] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 192.127590][T10337] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1797'. [ 192.168198][T10337] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.175736][T10337] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.218258][T10342] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=10342 comm=syz.5.1797 [ 192.272284][T10337] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1797'. [ 195.688519][T10363] bond1: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 195.705628][ T28] audit: type=1400 audit(1786760453.248:1767): avc: denied { watch } for pid=10357 comm="syz.0.1815" path="/sys" dev="proc" ino=4026531854 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_t tclass=dir permissive=1 [ 195.711586][T10363] bond1 (unregistering): Released all slaves [ 195.845276][T10368] loop4: detected capacity change from 0 to 512 [ 195.879592][T10368] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 195.914184][T10368] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 195.934332][T10368] System zones: 1-12 [ 195.960812][T10368] EXT4-fs (loop4): 1 truncate cleaned up [ 195.970892][T10368] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 196.082467][ T28] audit: type=1400 audit(1786760453.628:1768): avc: denied { write } for pid=10367 comm="syz.4.1808" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 196.118346][T10374] netlink: 'syz.0.1809': attribute type 1 has an invalid length. [ 196.180488][ T28] audit: type=1400 audit(1786760453.698:1769): avc: denied { write } for pid=10376 comm="syz.4.1808" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 196.271031][T10374] 8021q: adding VLAN 0 to HW filter on device bond4 [ 196.331443][T10377] bond4: (slave gretap1): Enslaving as a backup interface with an up link [ 196.436242][ T68] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 196.478421][T10379] bond4: (slave dummy0): Enslaving as a backup interface with an up link [ 196.557089][ T5218] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 196.619963][T10376] syz.4.1808 (10376) used greatest stack depth: 9472 bytes left [ 196.694071][ T9944] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 196.884686][ T28] audit: type=1400 audit(1786760454.428:1770): avc: denied { cpu } for pid=10391 comm="syz.4.1817" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 198.115999][T10404] gretap0 speed is unknown, defaulting to 1000 [ 198.139321][T10404] lo speed is unknown, defaulting to 1000 [ 198.284925][T10416] loop4: detected capacity change from 0 to 512 [ 198.342379][T10416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.414488][T10416] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.529939][ T28] audit: type=1400 audit(1786760456.078:1771): avc: denied { write } for pid=10415 comm="syz.4.1831" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 198.613582][ T28] audit: type=1400 audit(1786760456.158:1772): avc: denied { write } for pid=10415 comm="syz.4.1831" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.244609][T10404] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.251898][T10404] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.260640][T10404] bridge_slave_0: entered allmulticast mode [ 199.268687][T10404] bridge_slave_0: entered promiscuous mode [ 199.278475][T10404] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.285812][T10404] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.296273][T10404] bridge_slave_1: entered allmulticast mode [ 199.304914][T10404] bridge_slave_1: entered promiscuous mode [ 199.344249][T10404] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 199.387142][T10404] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 199.480363][T10404] team0: Port device team_slave_0 added [ 199.503907][T10404] team0: Port device team_slave_1 added [ 199.562229][T10404] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 199.579082][ T9944] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.597185][T10404] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.645429][T10404] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.708604][T10404] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.721489][T10404] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 199.760731][T10404] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.917149][T10404] hsr_slave_0: entered promiscuous mode [ 199.948742][T10404] hsr_slave_1: entered promiscuous mode [ 199.972469][T10404] debugfs: 'hsr0' already exists in 'hsr' [ 199.988210][T10404] Cannot create hsr debugfs directory [ 200.277239][ T7890] netdevsim netdevsim9 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.288984][ T7890] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.369135][ T7890] netdevsim netdevsim9 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.381716][ T7890] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.438457][ T7890] netdevsim netdevsim9 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.470926][ T7890] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.555093][ T7890] netdevsim netdevsim9 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 200.585406][ T7890] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.765095][ T7890] bridge_slave_1: left allmulticast mode [ 200.775047][ T7890] bridge_slave_1: left promiscuous mode [ 200.811932][ T7890] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.825566][ T28] audit: type=1400 audit(1786760458.368:1773): avc: denied { write } for pid=10442 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 200.859494][ T7890] bridge_slave_0: left allmulticast mode [ 200.871267][ T7890] bridge_slave_0: left promiscuous mode [ 200.888545][ T7890] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.950491][ T28] audit: type=1400 audit(1786760458.498:1774): avc: denied { write } for pid=10454 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 201.870679][ T7890] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 201.879186][ T7890] ip6gre1 (unregistering): left promiscuous mode [ 202.042934][ T7890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.060894][ T7890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.074487][ T7890] bond0 (unregistering): Released all slaves [ 202.099971][ T7890] bond1 (unregistering): Released all slaves [ 202.171799][ T7890] IPVS: stopping backup sync thread 9231 ... [ 202.188210][T10404] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 202.210328][T10404] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 202.229266][T10404] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 202.260471][T10404] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 202.280601][T10404] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 202.300822][T10404] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 202.322941][T10404] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 202.370094][T10404] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 202.433546][ T7890] hsr_slave_0: left promiscuous mode [ 202.455363][ T7890] hsr_slave_1: left promiscuous mode [ 202.475298][ T7890] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.486822][ T7890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.560640][ T7890] veth1_macvtap: left promiscuous mode [ 202.578241][ T7890] veth0_macvtap: left promiscuous mode [ 202.587795][ T7890] veth1_vlan: left promiscuous mode [ 202.593153][ T7890] veth0_vlan: left promiscuous mode [ 202.621974][ T28] audit: type=1400 audit(1786760460.168:1775): avc: denied { write } for pid=10456 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.748098][ T28] audit: type=1400 audit(1786760460.298:1776): avc: denied { write } for pid=10471 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 202.922959][ T7890] team0 (unregistering): Port device team_slave_1 removed [ 202.955711][ T7890] team0 (unregistering): Port device team_slave_0 removed [ 203.096443][ T5218] smc: removing ib device syz0 [ 203.155805][ T9456] lo speed is unknown, defaulting to 1000 [ 203.178765][ T9456] syz0: Port: 1 Link DOWN [ 203.222202][ T28] audit: type=1400 audit(1786760460.768:1777): avc: denied { write } for pid=10473 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.364971][ T28] audit: type=1400 audit(1786760460.908:1778): avc: denied { write } for pid=10486 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.407558][T10404] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.474789][T10404] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.535188][ T68] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.542431][ T68] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.632556][ T68] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.639876][ T68] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.841877][ T28] audit: type=1400 audit(1786760461.388:1779): avc: denied { write } for pid=10491 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.965601][ T28] audit: type=1400 audit(1786760461.508:1780): avc: denied { write } for pid=10504 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.292370][T10404] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.413077][ T28] audit: type=1400 audit(1786760461.958:1781): avc: denied { write } for pid=10509 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.519537][ T28] audit: type=1400 audit(1786760462.068:1782): avc: denied { write } for pid=10531 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.769762][T10404] veth0_vlan: entered promiscuous mode [ 204.805328][T10404] veth1_vlan: entered promiscuous mode [ 204.864604][T10404] veth0_macvtap: entered promiscuous mode [ 204.877281][T10404] veth1_macvtap: entered promiscuous mode [ 204.911450][T10404] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.933764][T10404] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.028345][ T7899] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.049647][ T7899] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.086753][ T7890] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.109749][ T7890] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.200222][T10567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1839'. [ 205.524865][T10587] bond1: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 205.560437][T10587] bond1 (unregistering): Released all slaves [ 205.670214][T10596] netlink: 'syz.4.1830': attribute type 1 has an invalid length. [ 205.928568][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 205.928590][ T28] audit: type=1400 audit(1786760463.478:1788): avc: denied { write } for pid=10576 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.136096][ T28] audit: type=1400 audit(1786760463.678:1789): avc: denied { create } for pid=10614 comm="syz.4.1838" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 206.202894][ T28] audit: type=1400 audit(1786760463.708:1790): avc: denied { ioctl } for pid=10614 comm="syz.4.1838" path="socket:[27005]" dev="sockfs" ino=27005 ioctlcmd=0x48d2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 206.300225][ T28] audit: type=1400 audit(1786760463.728:1791): avc: denied { execmod } for pid=10615 comm="syz.6.1837" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=27000 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 206.411037][T10630] loop4: detected capacity change from 0 to 512 [ 206.436580][ T28] audit: type=1400 audit(1786760463.728:1792): avc: denied { write } for pid=10619 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 206.484006][T10630] EXT4-fs (loop4): 1 truncate cleaned up [ 206.513364][T10630] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 206.753833][ T9944] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.115636][ T28] audit: type=1400 audit(1786760464.658:1793): avc: denied { write } for pid=10633 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.260867][ T28] audit: type=1400 audit(1786760464.808:1794): avc: denied { write } for pid=10690 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.562834][T10700] tipc: Failed to remove unknown binding: 66,1,1/0:958018165/958018167 [ 207.815136][ T28] audit: type=1400 audit(1786760465.358:1795): avc: denied { write } for pid=10692 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 207.966168][ T28] audit: type=1400 audit(1786760465.508:1796): avc: denied { write } for pid=10716 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 208.518858][ T28] audit: type=1400 audit(1786760466.068:1797): avc: denied { write } for pid=10721 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 209.401982][T10771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1872'. [ 209.442026][T10773] loop6: detected capacity change from 0 to 512 [ 209.480492][T10773] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 209.518058][T10773] EXT4-fs (loop6): 1 truncate cleaned up [ 209.536961][T10773] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.945044][T10797] netlink: 'syz.2.1869': attribute type 1 has an invalid length. [ 210.003555][T10797] 8021q: adding VLAN 0 to HW filter on device bond1 [ 210.054735][T10800] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 210.105318][T10797] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 210.117855][ T7862] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 210.292096][ T7872] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 210.359940][T10404] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.481103][T10826] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1876'. [ 210.512522][T10826] netlink: 'syz.6.1876': attribute type 30 has an invalid length. [ 210.534295][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1876'. [ 210.546239][T10826] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1876'. [ 210.578122][T10826] netlink: 'syz.6.1876': attribute type 30 has an invalid length. [ 210.605277][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1876'. [ 210.766109][ T3020] 8021q: adding VLAN 0 to HW filter on device eth5 [ 211.144340][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 211.144362][ T28] audit: type=1400 audit(1786760468.688:1807): avc: denied { write } for pid=10847 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.312017][ T28] audit: type=1400 audit(1786760468.858:1808): avc: denied { write } for pid=10863 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.424473][ T3020] 8021q: adding VLAN 0 to HW filter on device eth6 [ 211.790618][ T28] audit: type=1400 audit(1786760469.338:1809): avc: denied { write } for pid=10866 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.883687][ T28] audit: type=1400 audit(1786760469.428:1810): avc: denied { write } for pid=10881 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 211.948073][ T3020] 8021q: adding VLAN 0 to HW filter on device eth7 [ 212.231646][ T28] audit: type=1400 audit(1786760469.778:1811): avc: denied { write } for pid=10885 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.309264][ T28] audit: type=1400 audit(1786760469.858:1812): avc: denied { write } for pid=10896 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.370731][ T3020] 8021q: adding VLAN 0 to HW filter on device eth8 [ 212.602327][ T28] audit: type=1326 audit(1786760470.148:1813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.5.1886" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 212.651491][T10912] netlink: 'syz.6.1884': attribute type 1 has an invalid length. [ 212.678199][ T28] audit: type=1326 audit(1786760470.148:1814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.5.1886" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 212.708316][ T28] audit: type=1326 audit(1786760470.148:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.5.1886" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 212.736056][ T28] audit: type=1326 audit(1786760470.148:1816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10902 comm="syz.5.1886" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 212.957346][T10924] loop6: detected capacity change from 0 to 128 [ 213.659972][T10945] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1901'. [ 213.716199][T10947] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1902'. [ 213.921047][T10954] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1905'. [ 216.004493][T11010] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1924'. [ 216.099939][T11013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1927'. [ 216.462082][T11027] gretap0 speed is unknown, defaulting to 1000 [ 216.499813][T11032] netlink: 'syz.0.1934': attribute type 1 has an invalid length. [ 216.573402][T11032] 8021q: adding VLAN 0 to HW filter on device bond5 [ 216.686937][ T5226] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 216.710666][T11036] bond5: (slave gretap2): Enslaving as an active interface with an up link [ 216.815816][T11032] bond4: (slave dummy0): Releasing backup interface [ 216.836988][ T7889] bond5: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 216.859756][T11032] bond5: (slave dummy0): Enslaving as a backup interface with an up link [ 217.008596][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 217.008615][ T28] audit: type=1400 audit(1786760474.558:1848): avc: denied { connect } for pid=11037 comm="syz.0.1936" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 217.348246][T11047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1940'. [ 217.392206][T11047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1940'. [ 217.661916][ T28] audit: type=1400 audit(1786760475.208:1849): avc: denied { write } for pid=11057 comm="syz.2.1944" name="functions" dev="configfs" ino=18796 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 217.735871][ T28] audit: type=1400 audit(1786760475.218:1850): avc: denied { write } for pid=11057 comm="syz.2.1944" name="ep.0" dev="configfs" ino=25572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 217.762998][T11060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1945'. [ 218.090813][T11070] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.098398][T11070] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.405240][T11070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.464778][T11070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.736829][ T5226] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.767035][ T7862] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.779074][ T5226] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.819680][ T7889] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.968257][T11091] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1957'. [ 221.873140][ T28] audit: type=1400 audit(1786760479.418:1851): avc: denied { mount } for pid=11163 comm="syz.6.1984" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 222.406937][ T28] audit: type=1400 audit(1786760479.948:1852): avc: denied { unmount } for pid=10404 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 222.592477][ T28] audit: type=1326 audit(1786760480.138:1853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11179 comm="syz.0.1989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a94be0d9 code=0x7ffc0000 [ 222.733782][ T28] audit: type=1326 audit(1786760480.138:1854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11179 comm="syz.0.1989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a94be0d9 code=0x7ffc0000 [ 222.777081][ T28] audit: type=1326 audit(1786760480.138:1855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11179 comm="syz.0.1989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a94be0d9 code=0x7ffc0000 [ 222.826499][ T28] audit: type=1326 audit(1786760480.178:1856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11179 comm="syz.0.1989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7ff9a94be0d9 code=0x7ffc0000 [ 222.945492][ T28] audit: type=1326 audit(1786760480.258:1857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11179 comm="syz.0.1989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a94be0d9 code=0x7ffc0000 [ 222.983001][T11195] sch_fq: defrate 0 ignored. [ 223.032824][ T28] audit: type=1326 audit(1786760480.258:1858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11179 comm="syz.0.1989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7ff9a94bde42 code=0x7ffc0000 [ 223.124731][ T28] audit: type=1326 audit(1786760480.258:1859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11179 comm="syz.0.1989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7ff9a94bded7 code=0x7ffc0000 [ 223.198260][ T28] audit: type=1326 audit(1786760480.258:1860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11179 comm="syz.0.1989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ff9a947add1 code=0x7ffc0000 [ 223.342543][ T28] audit: type=1326 audit(1786760480.258:1861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11179 comm="syz.0.1989" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7ff9a94beec9 code=0x7ffc0000 [ 223.597230][T11230] netlink: 'syz.5.2000': attribute type 1 has an invalid length. [ 223.974504][T11230] 8021q: adding VLAN 0 to HW filter on device bond4 [ 224.077765][ T7862] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 224.091822][T11241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2001'. [ 224.111219][T11233] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 224.140992][T11236] bond3: (slave dummy0): Releasing backup interface [ 224.167856][T11236] bond4: (slave dummy0): Enslaving as a backup interface with an up link [ 224.228145][ T7890] bond4: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 224.838203][T11261] serio: Serial port ttyS3 [ 225.944934][T11302] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2016'. [ 226.112839][T11313] netlink: 'syz.4.2018': attribute type 1 has an invalid length. [ 226.158976][T11313] 8021q: adding VLAN 0 to HW filter on device bond1 [ 226.328793][T11313] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 226.379166][ T5234] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 226.389192][T11322] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 226.418246][T11321] gretap0 speed is unknown, defaulting to 1000 [ 226.523212][ T5234] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 227.079083][T11286] Set syz0 is full, maxelem 65536 reached [ 227.280969][T11341] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.288571][T11341] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.797380][T11359] netlink: 'syz.0.2033': attribute type 1 has an invalid length. [ 227.881535][T11341] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 227.894562][T11341] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.015880][T11359] 8021q: adding VLAN 0 to HW filter on device bond6 [ 228.063494][T11361] bond6: (slave gretap3): Enslaving as a backup interface with an up link [ 228.076657][T11363] bond5: (slave dummy0): Releasing backup interface [ 228.103439][T11363] bond6: (slave dummy0): Enslaving as a backup interface with an up link [ 228.128063][ T7889] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 228.147335][ T5234] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.176522][ T5234] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.228649][ T5226] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.255949][T11367] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2045'. [ 228.287464][ T5226] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.307757][ T7889] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 228.396610][T11375] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2038'. [ 228.582878][T11383] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2042'. [ 228.626189][ T28] kauditd_printk_skb: 62 callbacks suppressed [ 228.626211][ T28] audit: type=1400 audit(1786760486.168:1924): avc: denied { cmd } for pid=11381 comm="syz.6.2040" path="socket:[28678]" dev="sockfs" ino=28678 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 228.741402][T11383] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.802667][T11383] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.865566][T11383] bond0 (unregistering): Released all slaves [ 228.931207][T11398] netlink: 'syz.2.2049': attribute type 1 has an invalid length. [ 228.984848][T11398] 8021q: adding VLAN 0 to HW filter on device bond2 [ 229.052374][T11398] bond2: (slave gretap2): Enslaving as a backup interface with an up link [ 229.097035][ T7862] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 229.143244][T11398] bond1: (slave dummy0): Releasing backup interface [ 229.189338][T11398] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 229.241154][ T5236] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 229.449993][ T28] audit: type=1400 audit(1786760486.998:1925): avc: denied { read } for pid=11415 comm="syz.2.2055" path="socket:[28197]" dev="sockfs" ino=28197 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 230.277954][T11450] netlink: 'syz.0.2068': attribute type 1 has an invalid length. [ 230.322475][T11450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 230.378148][T11452] bond0: (slave gretap4): Enslaving as a backup interface with an up link [ 230.438781][ T7890] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 230.450224][T11450] bond6: (slave dummy0): Releasing backup interface [ 230.478568][T11450] bond0: (slave dummy0): Enslaving as a backup interface with an up link [ 230.515722][T11457] netlink: 88 bytes leftover after parsing attributes in process `syz.6.2072'. [ 230.552329][ T28] audit: type=1400 audit(1786760488.098:1926): avc: denied { ioctl } for pid=11458 comm="syz.2.2073" path="socket:[28251]" dev="sockfs" ino=28251 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 230.610460][ T7890] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 230.820439][T11472] gretap0 speed is unknown, defaulting to 1000 [ 231.761264][T11495] netlink: 'syz.4.2087': attribute type 4 has an invalid length. [ 232.833830][ T28] audit: type=1400 audit(1786760490.368:1927): avc: denied { ioctl } for pid=11523 comm="syz.0.2097" path="socket:[28863]" dev="sockfs" ino=28863 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 232.889425][T11514] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.896956][T11514] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.158009][T11514] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.173282][T11514] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.834469][T11546] tipc: Started in network mode [ 233.839818][T11546] tipc: Node identity ac141441, cluster identity 4711 [ 233.853639][T11546] tipc: Enabled bearer , priority 10 [ 233.880058][T11519] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 233.907169][T11519] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.917503][T11519] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 233.966874][ T5236] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.976254][ T5236] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.999549][ T5236] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.024195][ T5236] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.046268][T11549] netlink: 'syz.4.2104': attribute type 4 has an invalid length. [ 234.132574][T11519] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.142961][T11519] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.216078][ T28] audit: type=1400 audit(1786760491.758:1928): avc: denied { setcurrent } for pid=11554 comm="syz.4.2106" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 234.236672][T11519] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 234.371323][T11560] netlink: 'syz.4.2108': attribute type 21 has an invalid length. [ 234.448539][T11560] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2108'. [ 234.660934][T11519] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.686040][T11519] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.696360][T11519] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 234.872529][ T9439] IPVS: starting estimator thread 0... [ 235.009095][T11579] IPVS: using max 2304 ests per chain, 115200 per kthread [ 235.148073][T11519] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.158502][T11519] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.168813][T11519] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 235.328523][ T849] tipc: Node number set to 2886997057 [ 235.432897][ T5226] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.443401][ T5226] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 235.453906][ T5226] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 235.494253][ T7890] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.504885][ T7890] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 235.525280][ T7890] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 235.541443][ T7890] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.559532][ T7890] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 235.578289][ T7890] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 235.608831][ T7890] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 235.643167][ T7890] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 235.672787][ T7890] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 237.029968][T11627] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2133'. [ 237.190407][T11646] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2139'. [ 237.335797][T11655] tipc: Started in network mode [ 237.341404][T11655] tipc: Node identity ac141441, cluster identity 4711 [ 237.350019][T11655] tipc: Enabled bearer , priority 10 [ 237.538045][T11666] loop4: detected capacity change from 0 to 164 [ 237.570057][T11666] Unable to read rock-ridge attributes [ 238.467387][ T9501] tipc: Node number set to 2886997057 [ 238.650472][T11713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 238.676920][T11713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 239.897779][T11745] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2177'. [ 239.960681][T11745] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.995470][T11745] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.039893][T11745] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 240.089641][T11745] bond0 (unregistering): Released all slaves [ 240.195862][T11754] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2179'. [ 240.455076][ T28] audit: type=1326 audit(1786760497.998:1929): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.5.2182" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 240.519588][ T28] audit: type=1326 audit(1786760498.028:1930): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.5.2182" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 240.630793][ T28] audit: type=1326 audit(1786760498.038:1931): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.5.2182" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 240.710563][T11768] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2185'. [ 240.780134][ T28] audit: type=1326 audit(1786760498.038:1932): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.5.2182" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 240.805766][ T28] audit: type=1326 audit(1786760498.038:1933): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.5.2182" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 240.867933][ T28] audit: type=1326 audit(1786760498.048:1934): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.5.2182" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 240.911895][ T28] audit: type=1326 audit(1786760498.048:1935): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.5.2182" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 240.937459][ T28] audit: type=1326 audit(1786760498.048:1936): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.5.2182" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 241.000323][ T28] audit: type=1326 audit(1786760498.048:1937): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.5.2182" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 241.046651][ T28] audit: type=1326 audit(1786760498.048:1938): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11759 comm="syz.5.2182" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 241.161525][T11781] loop4: detected capacity change from 0 to 1024 [ 241.296998][T11781] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 241.310107][T11781] ext4 filesystem being mounted at /79/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 241.462786][T11781] EXT4-fs error (device loop4): ext4_map_blocks:833: inode #15: comm syz.4.2191: lblock 0 mapped to illegal pblock 0 (length 1) [ 241.554311][T11781] EXT4-fs (loop4): Remounting filesystem read-only [ 241.594710][T11781] EXT4-fs (loop4): shut down requested (2) [ 241.655846][ T9944] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 242.872959][T11843] netlink: 'syz.2.2215': attribute type 3 has an invalid length. [ 242.880890][T11843] netlink: 'syz.2.2215': attribute type 1 has an invalid length. [ 242.888636][T11843] netlink: 181400 bytes leftover after parsing attributes in process `syz.2.2215'. [ 244.214258][T11853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 244.241603][T11853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 244.463175][T11868] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2223'. [ 244.504412][ T9452] gretap0 speed is unknown, defaulting to 1000 [ 244.517850][ T9452] syz1: Port: 1 Link DOWN [ 244.539794][ T5226] netdevsim netdevsim5 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.569154][ T5226] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 20004 - 0 [ 244.598810][ T5226] netdevsim netdevsim5 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 244.613862][ T5226] netdevsim netdevsim5 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.629381][ T5226] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 20004 - 0 [ 244.638755][ T5226] netdevsim netdevsim5 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 244.676361][ T5226] netdevsim netdevsim5 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.698832][ T5226] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 20004 - 0 [ 244.719388][ T5226] netdevsim netdevsim5 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 244.753240][ T5226] netdevsim netdevsim5 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 244.781485][ T5226] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 20004 - 0 [ 244.807790][ T5226] netdevsim netdevsim5 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 245.577968][T11889] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2233'. [ 245.767231][T11845] Set syz0 is full, maxelem 65536 reached [ 245.841948][T11899] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2236'. [ 245.887226][T11899] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2236'. [ 245.956282][T11906] cgroup: Setting release_agent not allowed [ 245.962551][ T28] kauditd_printk_skb: 51 callbacks suppressed [ 245.962623][ T28] audit: type=1400 audit(1786760503.498:1990): avc: denied { mounton } for pid=11905 comm="syz.5.2242" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 246.036862][ T5226] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.048237][ T5226] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.083872][ T5226] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.109321][ T5226] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 246.512723][T11924] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2249'. [ 246.603176][T11922] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 247.151129][ T28] audit: type=1400 audit(1786760504.698:1991): avc: denied { bind } for pid=11938 comm="syz.2.2253" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 247.698695][T11950] 8021q: VLANs not supported on syzkaller0 [ 249.020886][T11980] netlink: 'syz.4.2272': attribute type 1 has an invalid length. [ 249.069361][T11980] bond2: entered promiscuous mode [ 249.100267][T11980] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.277762][T11934] Set syz0 is full, maxelem 65536 reached [ 249.317584][T11983] bond2: (slave veth3): making interface the new active one [ 249.325210][T11983] veth3: entered promiscuous mode [ 249.335653][T11983] bond2: (slave veth3): Enslaving as an active interface with an up link [ 249.753413][ T28] audit: type=1400 audit(1786760507.298:1992): avc: denied { listen } for pid=12001 comm="syz.4.2279" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 250.278445][T12027] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2288'. [ 250.288427][T12027] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2288'. [ 251.314474][T12052] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2297'. [ 251.393152][ T28] audit: type=1400 audit(1786760508.938:1993): avc: denied { nlmsg_read } for pid=12053 comm="syz.6.2298" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 251.573432][T12060] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2300'. [ 251.622751][T12060] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2300'. [ 251.740710][ T7890] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.763478][ T7890] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.788322][ T7890] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 251.814196][ T7890] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.659138][T12081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2308'. [ 252.719504][T12081] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2308'. [ 253.123444][T12087] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.233126][T12087] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.404493][T12087] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.576306][T12087] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 253.827158][ T7890] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.906672][ T5234] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.026772][ T7890] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.095813][ T5234] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 254.835561][T12103] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 255.029016][ T28] audit: type=1400 audit(1786760512.578:1994): avc: denied { write } for pid=12107 comm="syz.6.2317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 255.548486][T12122] netlink: 'syz.6.2323': attribute type 1 has an invalid length. [ 255.603899][T12124] loop4: detected capacity change from 0 to 512 [ 255.702123][T12122] bond1: entered promiscuous mode [ 255.753163][T12124] EXT4-fs error (device loop4): ext4_orphan_get:1399: inode #15: comm syz.4.2324: iget: bad i_size value: 38620345925642 [ 255.796631][T12122] 8021q: adding VLAN 0 to HW filter on device bond1 [ 255.887268][T12124] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 255.887852][T12124] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.2324: couldn't read orphan inode 15 (err -117) [ 255.897340][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 255.897360][ C1] EXT4-fs (loop4): initial error at time 1786760513: ext4_orphan_get:1399: inode 15 [ 255.897394][ C1] EXT4-fs (loop4): last error at time 1786760513: ext4_orphan_get:1399: inode 15 [ 255.957197][T12124] loop4: lost filesystem error report for type 5 error -117 [ 255.959886][T12124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 256.065267][ T28] audit: type=1400 audit(1786760513.608:1995): avc: denied { write } for pid=12120 comm="syz.4.2324" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 256.126631][T12131] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 256.239016][T12124] EXT4-fs (loop4): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 108 with error 28 [ 256.306662][T12124] EXT4-fs (loop4): This should not happen!! Data will be lost [ 256.306662][T12124] [ 256.353834][T12124] EXT4-fs (loop4): Total free blocks count 0 [ 256.379607][T12124] EXT4-fs (loop4): Free/Dirty block details [ 256.403620][T12124] EXT4-fs (loop4): free_blocks=0 [ 256.431574][T12124] EXT4-fs (loop4): dirty_blocks=112 [ 256.451855][T12124] EXT4-fs (loop4): Block reservation details [ 256.480033][T12124] EXT4-fs (loop4): i_reserved_data_blocks=112 [ 256.525211][T12133] EXT4-fs (loop4): shut down requested (0) [ 256.905766][T12129] bond1: (slave veth7): making interface the new active one [ 256.971679][T12129] veth7: entered promiscuous mode [ 257.010211][T12136] 9pnet: p9_errstr2errno: server reported unknown error 0x00000000 [ 257.018940][T12129] bond1: (slave veth7): Enslaving as an active interface with an up link [ 257.242558][T12143] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2329'. [ 257.284850][T12144] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 257.432071][T12148] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 257.471998][T12148] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 257.673337][T12153] loop4: detected capacity change from 0 to 512 [ 257.723606][T12153] EXT4-fs: Ignoring removed nomblk_io_submit option [ 257.763939][T12153] EXT4-fs: Ignoring removed i_version option [ 257.815184][T12153] EXT4-fs (loop4): 1 orphan inode deleted [ 257.837577][T12153] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.961202][T12162] netlink: 'syz.0.2337': attribute type 1 has an invalid length. [ 257.995010][T12162] 8021q: adding VLAN 0 to HW filter on device bond8 [ 258.025783][T12162] team0: Port device syz_tun removed [ 258.042470][T12162] bond8: (slave syz_tun): Enslaving as a backup interface with an up link [ 258.181112][T12167] netlink: 3068 bytes leftover after parsing attributes in process `syz.0.2339'. [ 258.205436][T12167] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.2339'. [ 259.401585][ T28] audit: type=1400 audit(1786760516.948:1996): avc: denied { watch watch_reads } for pid=12188 comm="syz.2.2347" path="/149/file0" dev="tmpfs" ino=791 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 260.336690][ T27] rcu_tasks_wait_gp: rcu_tasks grace period number 9 (since boot) is 1030 jiffies old. [ 260.486772][ T28] audit: type=1400 audit(1786760518.028:1997): avc: denied { read } for pid=12209 comm="syz.2.2355" name="rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 260.552457][ T28] audit: type=1400 audit(1786760518.028:1998): avc: denied { open } for pid=12209 comm="syz.2.2355" path="/dev/rtc0" dev="devtmpfs" ino=244 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 260.606631][ T9944] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.392370][ T28] audit: type=1326 audit(1786760518.928:1999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12240 comm="syz.5.2369" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 261.473094][ T28] audit: type=1326 audit(1786760518.928:2000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12240 comm="syz.5.2369" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 261.547688][ T28] audit: type=1326 audit(1786760518.928:2001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12240 comm="syz.5.2369" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 261.604450][ T28] audit: type=1326 audit(1786760518.928:2002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12240 comm="syz.5.2369" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 261.659785][ T28] audit: type=1326 audit(1786760518.928:2003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12240 comm="syz.5.2369" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 261.731233][ T28] audit: type=1326 audit(1786760518.928:2004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12240 comm="syz.5.2369" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 261.744514][T12250] scsi_strcpy_devinfo: vendor string '¼QTò?¬Ý]Ð+É,r' is too long [ 261.804974][ T28] audit: type=1326 audit(1786760518.928:2005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12240 comm="syz.5.2369" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 262.128404][T12268] loop4: detected capacity change from 0 to 512 [ 262.152116][T12268] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 262.204028][T12268] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 262.226624][T12268] ext4 filesystem being mounted at /114/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 262.462038][ T9944] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 262.994642][T12324] loop6: detected capacity change from 0 to 1024 [ 263.039794][T12324] EXT4-fs: Ignoring removed nomblk_io_submit option [ 263.172852][T12324] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 263.479210][T12340] netlink: 105116 bytes leftover after parsing attributes in process `syz.2.2400'. [ 263.527794][T10404] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 263.920245][T12360] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2402'. [ 263.929908][T12360] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2402'. [ 264.377051][T12378] loop4: detected capacity change from 0 to 128 [ 264.813065][T12398] loop6: detected capacity change from 0 to 128 [ 264.847079][T12398] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 264.885003][T12398] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 265.008448][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 265.008516][ T28] audit: type=1400 audit(1786760522.558:2022): avc: denied { write } for pid=12397 comm="syz.6.2424" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.229814][ T28] audit: type=1326 audit(1786760522.768:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12408 comm="syz.0.2428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a94be0d9 code=0x7ffc0000 [ 265.283797][T10404] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 265.293349][ T28] audit: type=1326 audit(1786760522.768:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12408 comm="syz.0.2428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a94be0d9 code=0x7ffc0000 [ 265.345669][ T28] audit: type=1326 audit(1786760522.788:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12408 comm="syz.0.2428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7ff9a94be0d9 code=0x7ffc0000 [ 265.398149][ T28] audit: type=1326 audit(1786760522.788:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12408 comm="syz.0.2428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a94be0d9 code=0x7ffc0000 [ 265.447960][ T28] audit: type=1326 audit(1786760522.798:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12408 comm="syz.0.2428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7ff9a94be0d9 code=0x7ffc0000 [ 265.487108][T12410] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 265.507999][ T28] audit: type=1326 audit(1786760522.798:2028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12408 comm="syz.0.2428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a94be0d9 code=0x7ffc0000 [ 265.561834][ T28] audit: type=1326 audit(1786760522.798:2029): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12408 comm="syz.0.2428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9a94be0d9 code=0x7ffc0000 [ 265.616594][ T28] audit: type=1326 audit(1786760522.798:2030): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12408 comm="syz.0.2428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a94be0d9 code=0x7ffc0000 [ 265.670696][ T28] audit: type=1326 audit(1786760522.808:2031): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12408 comm="syz.0.2428" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7ff9a94be0d9 code=0x7ffc0000 [ 265.775199][T12412] loop6: detected capacity change from 0 to 1024 [ 266.142119][T12412] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8840c028, mo2=0002] [ 266.168723][T12416] loop4: detected capacity change from 0 to 512 [ 266.176056][T12416] EXT4-fs: Ignoring removed orlov option [ 266.189053][T12416] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 266.272887][T12416] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 266.332269][T12412] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 266.683061][T10404] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 267.273900][T12443] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2441'. [ 267.439254][T12448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2444'. [ 267.616036][T12455] team0: entered allmulticast mode [ 267.633091][T12455] team_slave_0: entered allmulticast mode [ 267.659093][T12455] team_slave_1: entered allmulticast mode [ 267.893337][T12462] loop6: detected capacity change from 0 to 1024 [ 268.107888][T12462] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002] [ 268.299139][T12462] System zones: 0-1, 3-12 [ 268.337442][T12462] EXT4-fs (loop6): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 268.600099][T10404] EXT4-fs (loop6): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 268.879400][T12497] loop6: detected capacity change from 0 to 512 [ 268.958504][T12497] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 268.967517][ T5226] rpcbind: server 127.0.0.1 not responding, timed out [ 269.225812][T12497] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 269.268722][T12497] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 269.949351][T10404] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 270.157934][T12538] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2480'. [ 270.382871][ T28] kauditd_printk_skb: 5 callbacks suppressed [ 270.382888][ T28] audit: type=1400 audit(1786760527.928:2037): avc: denied { bind } for pid=12544 comm="syz.5.2483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 270.442802][ T28] audit: type=1400 audit(1786760527.938:2038): avc: denied { setopt } for pid=12544 comm="syz.5.2483" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 270.718740][ T28] audit: type=1400 audit(1786760528.268:2039): avc: denied { create } for pid=12552 comm="syz.6.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 272.166369][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2492'. [ 272.187208][T12560] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2492'. [ 273.373808][T12618] unsupported nlmsg_type 40 [ 273.585346][ T28] audit: type=1400 audit(1786760531.128:2040): avc: denied { write } for pid=12612 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 273.717610][ T28] audit: type=1400 audit(1786760531.268:2041): avc: denied { write } for pid=12638 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.167684][T12653] netlink: 260 bytes leftover after parsing attributes in process `syz.2.2515'. [ 274.176822][T12653] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2515'. [ 274.308492][T12664] team0 (unregistering): left allmulticast mode [ 274.321243][ T28] audit: type=1400 audit(1786760531.868:2042): avc: denied { write } for pid=12643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.358200][T12664] team_slave_0: left allmulticast mode [ 274.369332][T12664] team_slave_1: left allmulticast mode [ 274.391996][T12664] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 274.420715][T12664] team0 (unregistering): Port device team_slave_0 removed [ 274.447411][T12664] team0 (unregistering): Failed to send options change via netlink (err -105) [ 274.470193][T12664] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 274.497845][T12664] team0 (unregistering): Port device team_slave_1 removed [ 274.511871][ T28] audit: type=1400 audit(1786760532.048:2043): avc: denied { write } for pid=12670 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 274.746776][T12682] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2524'. [ 275.265490][T12685] netlink: 168 bytes leftover after parsing attributes in process `syz.0.2527'. [ 276.184919][T12712] netlink: 830 bytes leftover after parsing attributes in process `syz.5.2536'. [ 276.204110][T12712] netlink: 'syz.5.2536': attribute type 10 has an invalid length. [ 276.212494][T12712] netlink: 2 bytes leftover after parsing attributes in process `syz.5.2536'. [ 276.378565][T12620] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 276.510261][ T28] audit: type=1400 audit(1786760534.058:2044): avc: denied { view } for pid=12725 comm="syz.0.2542" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 276.786791][ T28] audit: type=1400 audit(1786760534.328:2045): avc: denied { rename } for pid=12731 comm="syz.0.2544" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=3127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 277.158924][ T28] audit: type=1400 audit(1786760534.698:2046): avc: denied { append } for pid=12755 comm="syz.2.2553" name="001" dev="devtmpfs" ino=165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 277.234382][ T28] audit: type=1326 audit(1786760534.738:2047): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12755 comm="syz.2.2553" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f793bc1e0d9 code=0x0 [ 277.506361][T12771] loop4: detected capacity change from 0 to 1024 [ 277.557746][T12771] EXT4-fs (loop4): bad geometry: first data block 0 is beyond end of filesystem (0) [ 277.636055][ T28] audit: type=1400 audit(1786760535.178:2048): avc: denied { write } for pid=12763 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 277.759397][ T28] audit: type=1400 audit(1786760535.308:2049): avc: denied { write } for pid=12783 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.206770][T12806] team_slave_1: entered promiscuous mode [ 278.268411][ T28] audit: type=1400 audit(1786760535.808:2050): avc: denied { write } for pid=12787 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.427341][ T28] audit: type=1400 audit(1786760535.968:2051): avc: denied { write } for pid=12817 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 278.523602][T12815] netlink: 'syz.5.2563': attribute type 1 has an invalid length. [ 278.554977][T12815] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.2563'. [ 278.577736][T12815] netlink: 9 bytes leftover after parsing attributes in process `syz.5.2563'. [ 278.906805][ T7862] rpcbind: server 127.0.0.1 not responding, timed out [ 278.956159][T12793] team_slave_1: left promiscuous mode [ 278.976168][T12832] netlink: 6 bytes leftover after parsing attributes in process `syz.5.2568'. [ 279.001770][T12832] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 279.112775][T12835] gretap0 speed is unknown, defaulting to 1000 [ 279.957530][T12863] loop4: detected capacity change from 0 to 512 [ 279.984755][T12863] FAT-fs (loop4): data area starts beyond volume (199892 > 45184) [ 280.014523][T12863] FAT-fs (loop4): Can't find a valid FAT filesystem [ 280.122886][T12867] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 280.153518][T12867] team0 (unregistering): Port device team_slave_0 removed [ 280.183027][T12867] team0 (unregistering): Failed to send options change via netlink (err -105) [ 280.203992][T12867] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 280.221291][T12867] team0 (unregistering): Port device team_slave_1 removed [ 280.275603][T12870] netlink: 'syz.2.2594': attribute type 1 has an invalid length. [ 280.320281][T12870] 8021q: adding VLAN 0 to HW filter on device bond3 [ 280.401939][T12874] bond3: (slave geneve2): making interface the new active one [ 280.444498][T12874] bond3: (slave geneve2): Enslaving as an active interface with an up link [ 280.517344][ T36] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.543684][ T36] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.585785][ T36] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.615887][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.455896][T12901] loop6: detected capacity change from 0 to 128 [ 281.480800][T12901] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 281.523498][T12901] ext4 filesystem being mounted at /128/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 281.617885][ T28] audit: type=1400 audit(1786760539.158:2052): avc: denied { write } for pid=12900 comm="syz.6.2595" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 281.713424][T12909] netlink: 'syz.2.2598': attribute type 4 has an invalid length. [ 281.725438][T12909] netlink: 'syz.2.2598': attribute type 4 has an invalid length. [ 281.726173][ T28] audit: type=1400 audit(1786760539.188:2053): avc: denied { write } for pid=12900 comm="syz.6.2595" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 281.780270][T10404] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 281.800089][ T28] audit: type=1400 audit(1786760539.198:2054): avc: denied { write } for pid=12900 comm="syz.6.2595" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 281.851642][ T28] audit: type=1400 audit(1786760539.198:2055): avc: denied { write } for pid=12900 comm="syz.6.2595" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 281.919096][ T28] audit: type=1400 audit(1786760539.208:2056): avc: denied { create } for pid=12900 comm="syz.6.2595" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 281.961820][T12918] netlink: 'syz.5.2601': attribute type 1 has an invalid length. [ 282.006655][ T28] audit: type=1400 audit(1786760539.208:2057): avc: denied { write } for pid=12900 comm="syz.6.2595" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 282.045719][T12918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 282.119636][ T28] audit: type=1400 audit(1786760539.208:2058): avc: denied { write } for pid=12900 comm="syz.6.2595" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 282.167082][T12921] bond0: (slave geneve3): making interface the new active one [ 282.196054][ T28] audit: type=1400 audit(1786760539.208:2059): avc: denied { rename } for pid=12900 comm="syz.6.2595" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=chr_file permissive=1 [ 282.254379][T12921] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 282.290418][ T28] audit: type=1400 audit(1786760539.218:2060): avc: denied { write } for pid=12900 comm="syz.6.2595" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 282.292946][T12923] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2602'. [ 282.329462][ T5226] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.358798][ T5226] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.371125][ T28] audit: type=1400 audit(1786760539.228:2061): avc: denied { write } for pid=12900 comm="syz.6.2595" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 282.418522][ T5226] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 282.439011][ T5226] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.273303][T12873] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 283.731532][T12974] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.2621'. [ 283.868865][T12976] netlink: 'syz.0.2623': attribute type 1 has an invalid length. [ 283.876651][T12976] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.2623'. [ 283.885968][T12976] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2623'. [ 284.789016][T12994] netlink: 'syz.6.2628': attribute type 1 has an invalid length. [ 284.853199][T12994] 8021q: adding VLAN 0 to HW filter on device bond2 [ 284.958945][T12994] bond2: (slave geneve2): making interface the new active one [ 284.970069][T12994] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 284.978866][ T5226] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.014120][ T5226] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.028349][ T5226] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.066765][ T5226] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.210862][T13007] loop6: detected capacity change from 0 to 1024 [ 285.225419][T13007] EXT4-fs: Ignoring removed nomblk_io_submit option [ 285.327278][T13007] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 285.901246][T10404] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 287.663456][T13075] gretap0 speed is unknown, defaulting to 1000 [ 288.081761][T13084] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2669'. [ 288.100875][T13084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2669'. [ 289.981302][T13165] netlink: 'syz.5.2700': attribute type 1 has an invalid length. [ 290.030095][T13168] loop4: detected capacity change from 0 to 1764 [ 290.040620][T13166] program syz.6.2699 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 290.041854][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 290.041906][ T28] audit: type=1400 audit(1786760547.588:2065): avc: denied { append } for pid=13164 comm="syz.6.2699" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 290.158771][T13165] bond5: entered promiscuous mode [ 290.187335][T13165] 8021q: adding VLAN 0 to HW filter on device bond5 [ 290.243672][T13171] bond5: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 290.309055][T13171] bond5: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 290.343645][T13171] bond5: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 292.913354][T13216] netlink: 'syz.5.2717': attribute type 1 has an invalid length. [ 292.966084][T13216] 8021q: adding VLAN 0 to HW filter on device bond6 [ 293.074161][T13218] bond6: (slave gretap4): Enslaving as a backup interface with an up link [ 293.088320][ T7872] bond6: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 293.101617][T13221] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2719'. [ 293.166381][T13216] bond6 (unregistering): (slave gretap4): Removing an active aggregator [ 293.181050][T13216] bond6 (unregistering): (slave gretap4): Releasing backup interface [ 293.215917][T13216] bond6 (unregistering): Released all slaves [ 293.857447][T13236] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2725'. [ 293.877434][T13236] syzkaller0: Caught tx_queue_len zero misconfig [ 293.907818][T13236] netlink: 'syz.2.2725': attribute type 1 has an invalid length. [ 294.332696][T13255] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2733'. [ 294.367134][T13255] netlink: 'syz.2.2733': attribute type 7 has an invalid length. [ 294.367576][T13261] netlink: 'syz.6.2735': attribute type 39 has an invalid length. [ 294.386129][T13255] netlink: 'syz.2.2733': attribute type 8 has an invalid length. [ 294.405376][T13255] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2733'. [ 294.510449][T13264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2748'. [ 294.826930][T13285] loop6: detected capacity change from 0 to 1024 [ 294.878063][T13285] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 294.904465][T13287] gretap0 speed is unknown, defaulting to 1000 [ 294.940189][ T28] audit: type=1400 audit(1786760552.488:2066): avc: denied { write } for pid=13286 comm="syz.4.2743" path="socket:[34246]" dev="sockfs" ino=34246 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 295.008113][ T28] audit: type=1400 audit(1786760552.518:2067): avc: denied { write } for pid=13284 comm="syz.6.2742" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 295.073834][ T28] audit: type=1400 audit(1786760552.618:2068): avc: denied { read } for pid=13292 comm="syz.0.2744" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 295.129645][ T7872] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 295.146175][ T7872] EXT4-fs (loop6): Remounting filesystem read-only [ 295.159105][T10404] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.792687][T13318] gretap0 speed is unknown, defaulting to 1000 [ 296.242187][T13315] loop4: detected capacity change from 0 to 512 [ 296.294764][T13330] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2762'. [ 296.324777][T13315] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 296.343980][T13332] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2763'. [ 296.366719][T13315] ext4 filesystem being mounted at /186/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 296.632291][T13347] loop6: detected capacity change from 0 to 128 [ 296.658957][T13347] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 296.691806][T13347] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 296.734086][ T28] audit: type=1400 audit(1786760554.278:2069): avc: denied { write } for pid=13346 comm="syz.6.2768" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 296.786334][T13315] EXT4-fs error (device loop4): ext4_readdir:265: inode #2: block 3: comm syz.4.2756: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 296.814974][T10404] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 297.090336][ T9944] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.152456][T13360] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2772'. [ 297.201991][T13360] loop6: detected capacity change from 0 to 1024 [ 297.210229][T13360] EXT4-fs: Ignoring removed nomblk_io_submit option [ 297.223848][T13360] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0103] [ 297.232681][T13360] System zones: 0-1, 3-36 [ 297.241301][T13360] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 297.296758][ T28] audit: type=1400 audit(1786760554.838:2070): avc: denied { write } for pid=13359 comm="syz.6.2772" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 297.320634][T13364] gretap0 speed is unknown, defaulting to 1000 [ 297.385013][T10404] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.643753][T13380] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2779'. [ 297.643834][ T28] audit: type=1400 audit(1786760555.188:2071): avc: denied { unmount } for pid=13376 comm="syz.4.2778" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 297.937815][T13394] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2784'. [ 297.948146][T13392] loop6: detected capacity change from 0 to 512 [ 297.969549][T13392] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 297.998579][T13392] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm syz.6.2794: bg 0: block 4: invalid block bitmap [ 298.105430][T13394] loop4: detected capacity change from 0 to 1024 [ 298.119541][T13392] loop6: lost filesystem error report for type 5 error -117 [ 298.120087][T13392] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6679: Corrupt filesystem [ 298.127523][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 298.127548][ C0] EXT4-fs (loop6): initial error at time 1786760555: ext4_validate_block_bitmap:432 [ 298.127598][ C0] EXT4-fs (loop6): last error at time 1786760555: ext4_validate_block_bitmap:432 [ 298.169441][T13394] EXT4-fs: Ignoring removed nomblk_io_submit option [ 298.188405][T13394] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e854c01c, mo2=0103] [ 298.196966][T13392] loop6: lost filesystem error report for type 5 error -117 [ 298.199739][T13392] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.2794: invalid indirect mapped block 1 (level 1) [ 298.239616][T13394] System zones: 0-1, 3-36 [ 298.265050][T13394] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.299890][T13392] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 298.300457][T13392] EXT4-fs (loop6): 1 truncate cleaned up [ 298.364069][T13392] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 298.408049][ T28] audit: type=1400 audit(1786760555.958:2072): avc: denied { write } for pid=13393 comm="syz.4.2784" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 298.444501][ T28] audit: type=1400 audit(1786760555.988:2073): avc: denied { write } for pid=13391 comm="syz.6.2794" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 298.471803][ T28] audit: type=1400 audit(1786760556.018:2074): avc: denied { mounton } for pid=13391 comm="syz.6.2794" path="/172/file0/bus" dev="loop6" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 298.656699][ T9944] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.697436][T13392] loop6: detected capacity change from 512 to 64 [ 298.774945][T10404] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.801040][T13411] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2791'. [ 298.853356][T13411] macvlan2: entered promiscuous mode [ 298.859499][T13411] macvlan2: entered allmulticast mode [ 298.869559][T13411] bond9: entered promiscuous mode [ 298.875888][T13411] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 298.910613][T13411] bond9: left promiscuous mode [ 299.368996][T13419] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2793'. [ 299.439948][T13420] uprobe: syz.0.2796:13420 failed to unregister, leaking uprobe [ 299.480595][ T28] audit: type=1400 audit(1786760557.028:2075): avc: denied { map } for pid=13422 comm="syz.2.2795" path="socket:[33762]" dev="sockfs" ino=33762 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 299.689274][T13437] loop4: detected capacity change from 0 to 128 [ 299.726957][T13437] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 299.770469][T13437] ext4 filesystem being mounted at /197/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 299.816561][ T28] audit: type=1400 audit(1786760557.358:2076): avc: denied { write } for pid=13436 comm="syz.4.2801" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 299.894399][ T9944] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 299.990272][ T28] audit: type=1326 audit(1786760557.538:2077): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13448 comm="syz.5.2807" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 300.017756][T13447] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2806'. [ 300.121493][ T28] kauditd_printk_skb: 31 callbacks suppressed [ 300.121515][ T28] audit: type=1326 audit(1786760557.658:2109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13448 comm="syz.5.2807" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 300.349200][T13458] netlink: 'syz.5.2813': attribute type 1 has an invalid length. [ 300.450383][T13458] 8021q: adding VLAN 0 to HW filter on device bond6 [ 300.641378][T13463] macvlan2: entered promiscuous mode [ 300.667265][T13463] macvlan2: entered allmulticast mode [ 300.704795][T13463] bond6: entered promiscuous mode [ 300.725707][T13463] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 300.778076][T13463] bond6: left promiscuous mode [ 301.236906][ T28] audit: type=1400 audit(1786760558.778:2110): avc: denied { getattr } for pid=13475 comm="syz.5.2815" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 301.507925][ T28] audit: type=1400 audit(1786760559.058:2111): avc: denied { ioctl } for pid=13478 comm="syz.4.2816" path="/dev/rtc0" dev="devtmpfs" ino=244 ioctlcmd=0x7008 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 301.550428][T13466] gretap0 speed is unknown, defaulting to 1000 [ 301.591689][ T28] audit: type=1400 audit(1786760559.068:2112): avc: denied { create } for pid=13478 comm="syz.4.2816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 301.909243][T13482] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2817'. [ 301.997986][T13486] xt_cluster: node mask cannot exceed total number of nodes [ 302.129552][ T28] audit: type=1400 audit(1786760559.678:2113): avc: denied { create } for pid=13488 comm="syz.5.2820" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 302.324127][T13466] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.331823][T13466] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.339998][T13466] bridge_slave_0: entered allmulticast mode [ 302.347773][T13466] bridge_slave_0: entered promiscuous mode [ 302.360491][T13466] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.367941][T13466] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.375649][T13466] bridge_slave_1: entered allmulticast mode [ 302.383988][T13466] bridge_slave_1: entered promiscuous mode [ 302.422996][T13466] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.438523][T13466] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.448154][ T28] audit: type=1400 audit(1786760559.988:2114): avc: denied { getopt } for pid=13505 comm="syz.5.2825" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 302.495867][T13466] team0: Port device team_slave_0 added [ 302.507892][T13466] team0: Port device team_slave_1 added [ 302.552868][T13466] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.559919][T13466] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.613013][T13466] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.630324][T13466] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.638621][T13466] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 302.669723][T13466] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.753379][T13516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2828'. [ 302.796649][T13466] hsr_slave_0: entered promiscuous mode [ 302.812674][T13466] hsr_slave_1: entered promiscuous mode [ 302.822109][T13466] debugfs: 'hsr0' already exists in 'hsr' [ 302.828999][T13466] Cannot create hsr debugfs directory [ 303.287241][ T28] audit: type=1400 audit(1786760560.798:2115): avc: denied { create } for pid=13531 comm="syz.2.2832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 303.343703][ T28] audit: type=1400 audit(1786760560.808:2116): avc: denied { bind } for pid=13531 comm="syz.2.2832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 303.363157][ T28] audit: type=1326 audit(1786760560.888:2117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13533 comm="syz.5.2833" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 303.469507][ T28] audit: type=1326 audit(1786760560.888:2118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13533 comm="syz.5.2833" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 303.759697][T13466] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 303.796229][T13466] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 303.833213][T13466] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 303.854188][T13466] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 303.884110][T13466] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 303.919930][T13466] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 303.958701][T13466] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 304.003360][T13466] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 304.263065][T13466] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.296271][T13585] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2842'. [ 304.310140][T13466] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.354651][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.361908][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.385888][T13582] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(4) [ 304.392465][T13582] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 304.404623][T13582] vhci_hcd vhci_hcd.0: Device attached [ 304.418458][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.425632][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 304.435906][T13588] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 304.452057][T13592] vhci_hcd: connection closed [ 304.454126][ T36] vhci_hcd vhci_hcd.2: stop threads [ 304.478750][ T36] vhci_hcd vhci_hcd.2: release socket [ 304.510022][ T36] vhci_hcd vhci_hcd.2: disconnect device [ 305.141173][T13466] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.344812][ T28] kauditd_printk_skb: 178 callbacks suppressed [ 305.344829][ T28] audit: type=1400 audit(1786760562.888:2297): avc: denied { write } for pid=13618 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.525913][ T28] audit: type=1400 audit(1786760563.068:2298): avc: denied { write } for pid=13652 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 305.773161][T13466] veth0_vlan: entered promiscuous mode [ 305.812083][T13466] veth1_vlan: entered promiscuous mode [ 305.937233][T13466] veth0_macvtap: entered promiscuous mode [ 305.963782][T13466] veth1_macvtap: entered promiscuous mode [ 306.034045][ T28] audit: type=1400 audit(1786760563.578:2299): avc: denied { write } for pid=13657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.059746][T13466] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.080936][T13678] 8021q: VLANs not supported on syzkaller0 [ 306.118013][T13466] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.173031][ T28] audit: type=1400 audit(1786760563.718:2300): avc: denied { write } for pid=13680 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.247857][ T7872] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.267072][ T7872] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.283775][ T7872] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.317345][ T7872] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.349561][T13687] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2867'. [ 306.410360][T13692] loop7: detected capacity change from 0 to 1024 [ 306.504803][T13692] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 306.532643][ T28] audit: type=1400 audit(1786760564.078:2301): avc: denied { write } for pid=13682 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.557824][ T28] audit: type=1400 audit(1786760564.078:2302): avc: denied { write } for pid=13691 comm="syz.7.2810" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 306.664253][ T28] audit: type=1400 audit(1786760564.208:2303): avc: denied { write } for pid=13705 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 306.817752][ T5226] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 306.849132][ T5226] EXT4-fs (loop7): Remounting filesystem read-only [ 306.871110][T13466] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 307.040948][ T28] audit: type=1400 audit(1786760564.588:2304): avc: denied { write } for pid=13708 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.131182][ T28] audit: type=1400 audit(1786760564.678:2305): avc: denied { write } for pid=13727 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.540283][T13749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2862'. [ 307.586772][ T28] audit: type=1400 audit(1786760565.128:2306): avc: denied { write } for pid=13734 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.873274][T13763] syz_tun: entered allmulticast mode [ 307.912172][T13763] syz_tun: left allmulticast mode [ 310.559341][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 310.559371][ T28] audit: type=1400 audit(1786760568.108:2333): avc: denied { write } for pid=13865 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.684767][ T28] audit: type=1400 audit(1786760568.228:2334): avc: denied { write } for pid=13892 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 310.933349][ T28] audit: type=1400 audit(1786760568.478:2335): avc: denied { write } for pid=13894 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.060558][ T28] audit: type=1400 audit(1786760568.608:2336): avc: denied { write } for pid=13905 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 311.260608][T13918] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2907'. [ 311.308088][T13918] netlink: 'syz.2.2907': attribute type 1 has an invalid length. [ 311.458128][T13920] syzkaller0: entered promiscuous mode [ 311.461360][T13925] netlink: 'syz.2.2909': attribute type 7 has an invalid length. [ 311.472579][T13920] syzkaller0: entered allmulticast mode [ 312.133616][ T28] audit: type=1400 audit(1786760569.678:2337): avc: denied { write } for pid=13935 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.199383][ T28] audit: type=1326 audit(1786760569.738:2338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13954 comm="syz.0.2917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a94be0d9 code=0x7ffc0000 [ 312.281091][ T28] audit: type=1326 audit(1786760569.738:2339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13954 comm="syz.0.2917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9a947e90e code=0x7ffc0000 [ 312.309778][ T28] audit: type=1326 audit(1786760569.738:2340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13954 comm="syz.0.2917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff9a947e90e code=0x7ffc0000 [ 312.339574][ T28] audit: type=1326 audit(1786760569.738:2341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13954 comm="syz.0.2917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a94be0d9 code=0x7ffc0000 [ 312.366638][ T28] audit: type=1326 audit(1786760569.738:2342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13954 comm="syz.0.2917" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7ff9a94be0d9 code=0x7ffc0000 [ 312.505127][T13971] netlink: 'syz.5.2923': attribute type 7 has an invalid length. [ 312.592317][T13977] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2935'. [ 312.722368][T13977] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2935'. [ 312.752925][T13977] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2935'. [ 313.340517][T14026] loop7: detected capacity change from 0 to 8192 [ 313.425604][ T9503] IPVS: starting estimator thread 0... [ 313.526623][T14043] IPVS: using max 2640 ests per chain, 132000 per kthread [ 313.535349][T14050] netlink: 2036 bytes leftover after parsing attributes in process `syz.2.2951'. [ 313.571256][T14050] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2951'. [ 313.710313][T14058] loop7: detected capacity change from 0 to 256 [ 313.846501][T14064] gretap0 speed is unknown, defaulting to 1000 [ 313.959264][T14065] loop7: detected capacity change from 0 to 4096 [ 314.002310][T14065] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.093886][T14078] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2963'. [ 314.116219][T14078] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2963'. [ 314.132013][T14078] geneve4: entered promiscuous mode [ 314.139309][T14078] geneve4: entered allmulticast mode [ 314.151753][ T5226] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 1038 - 0 [ 314.187283][ T5226] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 1038 - 0 [ 314.231328][T13466] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 314.242612][ T7862] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 1038 - 0 [ 314.276304][ T7862] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 1038 - 0 [ 314.472481][T14091] bridge_slave_0: left allmulticast mode [ 314.480008][T14091] bridge_slave_0: left promiscuous mode [ 314.485872][T14091] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.893816][T14091] bridge_slave_1: left allmulticast mode [ 314.899841][T14091] bridge_slave_1: left promiscuous mode [ 314.905846][T14091] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.970490][T14091] bond0: (slave bond_slave_0): Releasing backup interface [ 314.987482][T14091] bond0: (slave bond_slave_1): Releasing backup interface [ 315.021047][T14091] team0: Port device team_slave_0 removed [ 315.040012][T14091] team0: Port device team_slave_1 removed [ 315.050320][T14091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.059960][T14091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.072742][T14091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.081013][T14091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.094642][T14091] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 315.376376][T14119] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2980'. [ 315.640169][T14138] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2989'. [ 316.406144][T14167] loop7: detected capacity change from 0 to 512 [ 316.433362][ T7862] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.443421][ T7862] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.469599][ T7862] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.500481][ T7862] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.551614][ T7872] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.588324][ T7872] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.601878][ T7872] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 316.611471][ T7872] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.675297][T14182] loop4: detected capacity change from 0 to 512 [ 316.704528][T14182] EXT4-fs: inline encryption not supported [ 316.751731][T14182] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 316.777472][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 316.777493][ T28] audit: type=1400 audit(1786760574.318:2359): avc: denied { connect } for pid=14175 comm="syz.7.3006" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 316.811599][T14182] EXT4-fs (loop4): orphan cleanup on readonly fs [ 316.837876][T14182] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz.4.3003: inode #15: comm syz.4.3003: iget: illegal inode # [ 316.862831][T14182] loop4: lost filesystem error report for type 5 error -117 [ 316.863420][T14182] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.3003: couldn't read orphan inode 15 (err -117) [ 316.870946][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 316.870981][ C1] EXT4-fs (loop4): initial error at time 1786760574: ext4_orphan_get:1399 [ 316.871017][ C1] EXT4-fs (loop4): last error at time 1786760574: ext4_orphan_get:1399 [ 316.907054][T14182] loop4: lost filesystem error report for type 5 error -117 [ 316.911671][T14182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 316.984058][T14182] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 317.042537][T14182] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 317.130621][ T28] audit: type=1400 audit(1786760574.678:2360): avc: denied { write } for pid=14191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.161476][ T9944] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 317.225504][ T28] audit: type=1400 audit(1786760574.768:2361): avc: denied { write } for pid=14212 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.642155][T14236] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3018'. [ 317.670788][ T28] audit: type=1400 audit(1786760575.208:2362): avc: denied { getopt } for pid=14237 comm="syz.5.3017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 317.819952][ T28] audit: type=1400 audit(1786760575.368:2363): avc: denied { write } for pid=14223 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 317.967454][ T28] audit: type=1400 audit(1786760575.508:2364): avc: denied { write } for pid=14250 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.434177][ T28] audit: type=1400 audit(1786760575.978:2365): avc: denied { write } for pid=14254 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 318.573195][ T28] audit: type=1400 audit(1786760576.108:2366): avc: denied { write } for pid=14277 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.126696][ T28] audit: type=1400 audit(1786760576.668:2367): avc: denied { write } for pid=14280 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.192926][T14297] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 319.200325][T14297] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 319.306948][ T28] audit: type=1400 audit(1786760576.858:2368): avc: denied { write } for pid=14298 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 319.480415][T14272] syz.5.3028 (14272) used greatest stack depth: 8928 bytes left [ 319.626360][T14313] tipc: Enabling of bearer rejected, failed to enable media [ 319.998809][T14309] syz.5.3035 (14309) used greatest stack depth: 8704 bytes left [ 321.512968][T14394] loop7: detected capacity change from 0 to 512 [ 321.554853][T14394] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 321.600061][T14397] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3065'. [ 321.611595][T14394] EXT4-fs (loop7): 1 truncate cleaned up [ 321.633211][T14394] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 321.709596][T14403] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3066'. [ 322.036255][T13466] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 322.087271][T14418] netlink: 'syz.5.3070': attribute type 1 has an invalid length. [ 322.213033][T14418] bond7: entered promiscuous mode [ 322.249005][T14418] 8021q: adding VLAN 0 to HW filter on device bond7 [ 322.358408][T14428] 8021q: adding VLAN 0 to HW filter on device bond7 [ 322.375243][T14428] bond7: (slave xfrm1): The slave device specified does not support setting the MAC address [ 322.414186][T14428] bond7: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 322.461950][T14428] bond7: (slave xfrm1): making interface the new active one [ 322.489959][T14428] xfrm1: entered promiscuous mode [ 322.520402][T14428] bond7: (slave xfrm1): Enslaving as an active interface with an up link [ 323.007501][ T5226] netdevsim netdevsim5 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.025068][ T5226] netdevsim netdevsim5 eth0: unset [1, 1] type 2 family 0 port 1038 - 0 [ 323.061604][ T5226] netdevsim netdevsim5 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.088387][ T5226] netdevsim netdevsim5 eth1: unset [1, 1] type 2 family 0 port 1038 - 0 [ 323.111449][ T5226] netdevsim netdevsim5 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.137016][ T5226] netdevsim netdevsim5 eth2: unset [1, 1] type 2 family 0 port 1038 - 0 [ 323.154333][ T5226] netdevsim netdevsim5 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.172933][ T5226] netdevsim netdevsim5 eth3: unset [1, 1] type 2 family 0 port 1038 - 0 [ 323.187911][T14445] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3079'. [ 323.335594][T14450] tipc: Failed to remove unknown binding: 66,1,1/0:3861154177/3861154179 [ 323.530509][T14456] gretap0 speed is unknown, defaulting to 1000 [ 324.321420][T14456] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3083'. [ 325.094926][ T28] kauditd_printk_skb: 6 callbacks suppressed [ 325.094942][ T28] audit: type=1326 audit(1786760582.638:2375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14491 comm="syz.5.3099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 325.143317][ T28] audit: type=1326 audit(1786760582.678:2376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14491 comm="syz.5.3099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 325.170810][ T28] audit: type=1326 audit(1786760582.678:2377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14491 comm="syz.5.3099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 325.199694][ T28] audit: type=1326 audit(1786760582.678:2378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14491 comm="syz.5.3099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 325.282211][ T28] audit: type=1326 audit(1786760582.678:2379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14491 comm="syz.5.3099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 325.337128][ T28] audit: type=1326 audit(1786760582.678:2380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14491 comm="syz.5.3099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 325.394334][ T28] audit: type=1326 audit(1786760582.678:2381): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14491 comm="syz.5.3099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 325.458292][ T28] audit: type=1326 audit(1786760582.688:2382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14491 comm="syz.5.3099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 325.529992][ T28] audit: type=1326 audit(1786760582.688:2383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14491 comm="syz.5.3099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 325.564009][T14508] loop4: detected capacity change from 0 to 164 [ 325.608354][ T28] audit: type=1326 audit(1786760582.688:2384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14491 comm="syz.5.3099" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f96e7ece0d9 code=0x7ffc0000 [ 325.748828][ T7889] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.760887][ T7889] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.785955][ T7889] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 325.813419][ T7889] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.222024][T14522] bond8: (slave syz_tun): Removing an active aggregator [ 326.231106][T14522] bond8: (slave syz_tun): Releasing backup interface [ 326.291605][T14522] bond0: (slave dummy0): Releasing backup interface [ 326.319992][T14522] bridge_slave_0: left allmulticast mode [ 326.326062][T14522] bridge_slave_0: left promiscuous mode [ 326.336346][T14522] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.356682][T14522] bridge_slave_1: left allmulticast mode [ 326.362775][T14522] bridge_slave_1: left promiscuous mode [ 326.370519][T14522] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.394629][T14522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.407372][T14522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.417975][T14522] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 328.797012][ T7889] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.815076][ T7889] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.855250][ T7889] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.890338][ T7889] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.394278][T14596] netlink: 'syz.7.3138': attribute type 10 has an invalid length. [ 329.784121][T14607] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.838978][T14607] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.986816][T14607] loop4: detected capacity change from 0 to 1764 [ 331.238497][T14646] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3156'. [ 331.546795][ T28] kauditd_printk_skb: 26 callbacks suppressed [ 331.546865][ T28] audit: type=1326 audit(1786760589.098:2411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14655 comm="syz.4.3163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90f99e0d9 code=0x7ffc0000 [ 331.588183][ T28] audit: type=1326 audit(1786760589.128:2412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14655 comm="syz.4.3163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90f99e0d9 code=0x7ffc0000 [ 331.615664][ T28] audit: type=1326 audit(1786760589.128:2413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14655 comm="syz.4.3163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90f99e0d9 code=0x7ffc0000 [ 331.680177][ T28] audit: type=1326 audit(1786760589.128:2414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14655 comm="syz.4.3163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90f99e0d9 code=0x7ffc0000 [ 331.706954][ T28] audit: type=1326 audit(1786760589.128:2415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14655 comm="syz.4.3163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe90f99e0d9 code=0x7ffc0000 [ 331.770092][ T28] audit: type=1326 audit(1786760589.128:2416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14655 comm="syz.4.3163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90f99e0d9 code=0x7ffc0000 [ 331.846098][ T28] audit: type=1326 audit(1786760589.128:2417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14655 comm="syz.4.3163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90f99e0d9 code=0x7ffc0000 [ 331.934966][ T28] audit: type=1326 audit(1786760589.128:2418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14655 comm="syz.4.3163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90f99e0d9 code=0x7ffc0000 [ 332.004064][ T28] audit: type=1326 audit(1786760589.128:2419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14655 comm="syz.4.3163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe90f99e0d9 code=0x7ffc0000 [ 332.051703][ T28] audit: type=1326 audit(1786760589.128:2420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14655 comm="syz.4.3163" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe90f99e0d9 code=0x7ffc0000 [ 332.337285][T14672] netlink: 'syz.4.3168': attribute type 5 has an invalid length. [ 332.717478][T14690] tipc: Failed to remove unknown binding: 66,1,1/0:2729523165/2729523167 [ 333.242509][T14719] loop7: detected capacity change from 0 to 128 [ 333.270425][T14719] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 333.355510][ T7889] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 333.758699][T14749] loop7: detected capacity change from 0 to 512 [ 333.831913][T14749] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 333.925921][T14755] syzkaller0: entered promiscuous mode [ 333.931597][T14755] syzkaller0: entered allmulticast mode [ 334.439716][T14766] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3205'. [ 334.694393][T13466] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 334.858431][T14783] tipc: Failed to remove unknown binding: 66,1,1/2886997057:3142650146/3142650148 [ 335.115948][T14794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3216'. [ 335.134670][T14794] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3216'. [ 337.800212][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 337.800231][ T28] audit: type=1400 audit(1786760595.348:2439): avc: denied { accept } for pid=14859 comm="syz.2.3250" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 338.070176][ T28] audit: type=1326 audit(1786760595.618:2440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14866 comm="syz.2.3244" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793bc1e0d9 code=0x7ffc0000 [ 338.142308][ T28] audit: type=1326 audit(1786760595.658:2441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14866 comm="syz.2.3244" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793bc1e0d9 code=0x7ffc0000 [ 338.227408][T14873] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3245'. [ 338.254935][ T28] audit: type=1326 audit(1786760595.658:2442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14866 comm="syz.2.3244" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f793bbde90e code=0x7ffc0000 [ 338.291527][T14873] netlink: 'syz.4.3245': attribute type 1 has an invalid length. [ 338.335487][ T28] audit: type=1326 audit(1786760595.658:2443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14866 comm="syz.2.3244" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f793bbde90e code=0x7ffc0000 [ 338.424717][ T28] audit: type=1326 audit(1786760595.658:2444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14866 comm="syz.2.3244" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793bc1e0d9 code=0x7ffc0000 [ 338.508318][ T28] audit: type=1326 audit(1786760595.678:2445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14866 comm="syz.2.3244" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f793bc1e0d9 code=0x7ffc0000 [ 338.558719][ T28] audit: type=1326 audit(1786760595.678:2446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14866 comm="syz.2.3244" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793bc1e0d9 code=0x7ffc0000 [ 338.636155][T14884] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3251'. [ 338.654863][ T28] audit: type=1326 audit(1786760595.688:2447): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14866 comm="syz.2.3244" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f793bc1e0d9 code=0x7ffc0000 [ 338.760342][T14894] netlink: 2036 bytes leftover after parsing attributes in process `syz.7.3252'. [ 338.771463][T14894] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3252'. [ 338.832158][ T28] audit: type=1326 audit(1786760596.378:2448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14897 comm="syz.0.3267" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff9a94be0d9 code=0x7ffc0000 [ 341.219023][T14972] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3281'. [ 341.302647][T14978] netlink: 'syz.5.3283': attribute type 13 has an invalid length. [ 343.650127][T15045] loop7: detected capacity change from 0 to 1024 [ 343.688860][T15055] netlink: 277 bytes leftover after parsing attributes in process `syz.0.3314'. [ 343.698482][T15045] EXT4-fs (loop7): can't mount with journal_async_commit, fs mounted w/o journal [ 343.844073][T15061] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3317'. [ 344.695777][T15093] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3329'. [ 344.780790][ T28] kauditd_printk_skb: 39 callbacks suppressed [ 344.780872][ T28] audit: type=1400 audit(1786760602.328:2488): avc: denied { write } for pid=15081 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 344.857786][T15105] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 344.935456][ T28] audit: type=1400 audit(1786760602.478:2489): avc: denied { write } for pid=15106 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 345.013303][ T3299] ================================================================== [ 345.021453][ T3299] BUG: KCSAN: data-race in ring_buffer_poll_wait / ring_buffer_unlock_commit [ 345.030272][ T3299] [ 345.032632][ T3299] write to 0xffff888100074cb4 of 1 bytes by task 9452 on cpu 1: [ 345.040291][ T3299] ring_buffer_poll_wait+0x14e/0x200 [ 345.045661][ T3299] tracing_poll_pipe+0xf7/0x120 [ 345.050575][ T3299] aio_poll_complete_work+0xd9/0x340 [ 345.055901][ T3299] process_scheduled_works+0x4d4/0x9a0 [ 345.061408][ T3299] worker_thread+0x569/0x750 [ 345.066069][ T3299] kthread+0x221/0x270 [ 345.070199][ T3299] ret_from_fork+0x146/0x330 [ 345.074835][ T3299] ret_from_fork_asm+0x1a/0x30 [ 345.079649][ T3299] [ 345.082034][ T3299] read to 0xffff888100074cb4 of 1 bytes by task 3299 on cpu 0: [ 345.089608][ T3299] ring_buffer_unlock_commit+0x54/0x440 [ 345.095191][ T3299] trace_buffer_unlock_commit_regs+0x43/0x310 [ 345.101302][ T3299] trace_event_buffer_commit+0x149/0x590 [ 345.106977][ T3299] trace_event_raw_event_kmalloc+0xb6/0x110 [ 345.112928][ T3299] __kmalloc_cache_noprof+0x30e/0x3d0 [ 345.118361][ T3299] selinux_netlbl_sock_genattr+0x88/0x260 [ 345.124144][ T3299] selinux_netlbl_socket_post_create+0x66/0x100 [ 345.130443][ T3299] selinux_socket_post_create+0x219/0x290 [ 345.136214][ T3299] security_socket_post_create+0x59/0xa0 [ 345.141888][ T3299] __sock_create+0x356/0x580 [ 345.146521][ T3299] __sys_socket+0xaf/0x180 [ 345.151008][ T3299] __x64_sys_socket+0x3f/0x50 [ 345.155721][ T3299] x64_sys_call+0x11fc/0x3020 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 345.160456][ T3299] do_syscall_64+0x136/0x3c0 [ 345.165081][ T3299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.170999][ T3299] [ 345.173340][ T3299] value changed: 0x00 -> 0x01 [ 345.178043][ T3299] [ 345.180390][ T3299] Reported by Kernel Concurrency Sanitizer on: [ 345.186571][ T3299] CPU: 0 UID: 0 PID: 3299 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 345.196051][ T3299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 345.206124][ T3299] ================================================================== [ 345.228661][ T28] audit: type=1400 audit(1786760602.778:2490): avc: denied { write } for pid=3284 comm="syz-executor" path="pipe:[2633]" dev="pipefs" ino=2633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 345.287031][ T9452] ================================================================== [ 345.295164][ T9452] BUG: KCSAN: data-race in ring_buffer_unlock_commit / ring_buffer_unlock_commit [ 345.304319][ T9452] [ 345.306670][ T9452] read to 0xffff888100074cb4 of 1 bytes by task 9503 on cpu 0: [ 345.314239][ T9452] ring_buffer_unlock_commit+0x54/0x440 [ 345.319828][ T9452] trace_buffer_unlock_commit_regs+0x43/0x310 [ 345.325949][ T9452] trace_event_buffer_commit+0x149/0x590 [ 345.331624][ T9452] trace_event_raw_event_sched_stat_runtime+0xee/0x140 [ 345.338529][ T9452] update_se+0x153/0x460 [ 345.342792][ T9452] update_curr+0x29/0x210 [ 345.347160][ T9452] dequeue_entities+0xb6/0xca0 [ 345.351950][ T9452] dequeue_task_fair+0x4a/0xb0 [ 345.356741][ T9452] __schedule+0x2a7/0xd10 [ 345.361107][ T9452] schedule+0x5a/0xa0 [ 345.365117][ T9452] worker_thread+0x645/0x750 [ 345.369745][ T9452] kthread+0x221/0x270 [ 345.373838][ T9452] ret_from_fork+0x146/0x330 [ 345.378470][ T9452] ret_from_fork_asm+0x1a/0x30 [ 345.383276][ T9452] [ 345.385615][ T9452] write to 0xffff888100074cb4 of 1 bytes by task 9452 on cpu 1: [ 345.393259][ T9452] ring_buffer_unlock_commit+0x6a/0x440 [ 345.398829][ T9452] trace_buffer_unlock_commit_regs+0x43/0x310 [ 345.404938][ T9452] trace_event_buffer_commit+0x149/0x590 [ 345.410591][ T9452] trace_event_raw_event_workqueue_execute_end+0xb9/0x160 [ 345.417740][ T9452] process_scheduled_works+0x912/0x9a0 [ 345.423231][ T9452] worker_thread+0x569/0x750 [ 345.427873][ T9452] kthread+0x221/0x270 [ 345.431963][ T9452] ret_from_fork+0x146/0x330 [ 345.436585][ T9452] ret_from_fork_asm+0x1a/0x30 [ 345.441380][ T9452] [ 345.443720][ T9452] value changed: 0x01 -> 0x00 [ 345.448408][ T9452] [ 345.450750][ T9452] Reported by Kernel Concurrency Sanitizer on: [ 345.456919][ T9452] CPU: 1 UID: 0 PID: 9452 Comm: kworker/1:11 Not tainted syzkaller #0 PREEMPT(lazy) [ 345.466401][ T9452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 345.476486][ T9452] Workqueue: events aio_poll_complete_work [ 345.482338][ T9452] ================================================================== [ 345.529344][T15115] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3333'. [ 346.005802][ T28] audit: type=1400 audit(1786760603.548:2491): avc: denied { write } for pid=15116 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.131773][ T28] audit: type=1400 audit(1786760603.678:2492): avc: denied { write } for pid=15127 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.611177][ T28] audit: type=1400 audit(1786760604.148:2493): avc: denied { write } for pid=15129 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 346.728723][ T28] audit: type=1400 audit(1786760604.278:2494): avc: denied { write } for pid=15140 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.274735][ T28] audit: type=1400 audit(1786760604.818:2495): avc: denied { write } for pid=15142 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.428090][ T28] audit: type=1400 audit(1786760604.978:2496): avc: denied { write } for pid=15153 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 347.824029][ T5226] bond0 (unregistering): Released all slaves [ 347.955593][ T5226] hsr_slave_0: left promiscuous mode [ 347.986191][ T5226] hsr_slave_1: left promiscuous mode [ 348.244799][ T28] audit: type=1400 audit(1786760605.788:2497): avc: denied { write } for pid=15156 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 348.453652][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 348.773091][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 349.018712][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 349.266050][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 349.539266][ T5226] bridge_slave_1: left allmulticast mode [ 349.549467][ T5226] bridge_slave_1: left promiscuous mode [ 349.555290][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.564994][ T5226] bridge_slave_0: left allmulticast mode [ 349.570988][ T5226] bridge_slave_0: left promiscuous mode [ 349.577373][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.589543][ T5226] bridge_slave_1: left allmulticast mode [ 349.595288][ T5226] bridge_slave_1: left promiscuous mode [ 349.601218][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.610496][ T5226] bridge_slave_0: left allmulticast mode [ 349.616140][ T5226] bridge_slave_0: left promiscuous mode [ 349.622151][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.634412][ T5226] bridge_slave_1: left allmulticast mode [ 349.641013][ T5226] bridge_slave_1: left promiscuous mode [ 349.646977][ T5226] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.655836][ T5226] bridge_slave_0: left allmulticast mode [ 349.664017][ T5226] bridge_slave_0: left promiscuous mode [ 349.670154][ T5226] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.714088][ T5226] bond1 (unregistering): (slave gretap1): Removing an active aggregator [ 349.724136][ T5226] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 349.732951][ T5226] bond1 (unregistering): (slave gretap1): the permanent HWaddr of slave - 9e:bc:14:f5:d6:73 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 349.782932][ T5226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 349.795536][ T5226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 349.808941][ T5226] bond0 (unregistering): Released all slaves [ 349.820116][ T5226] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 349.831214][ T5226] bond1 (unregistering): Released all slaves [ 349.843912][ T5226] bond2 (unregistering): (slave veth3): Releasing backup interface [ 349.851942][ T5226] veth3: left promiscuous mode [ 349.860575][ T5226] bond2 (unregistering): Released all slaves [ 349.894952][ T5226] bond1 (unregistering): (slave gretap1): Removing an active aggregator [ 349.904743][ T5226] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 349.921701][ T5226] bond2 (unregistering): (slave gretap2): Removing an active aggregator [ 349.931111][ T5226] bond2 (unregistering): (slave gretap2): Releasing backup interface [ 349.939343][ T5226] bond2 (unregistering): (slave gretap2): the permanent HWaddr of slave - ba:7f:9e:83:dc:6d - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 349.966634][ T5226] bond3 (unregistering): (slave geneve2): Releasing active interface [ 349.993489][ T5226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.005713][ T5226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.018332][ T5226] bond0 (unregistering): Released all slaves [ 350.027937][ T5226] bond1 (unregistering): Released all slaves [ 350.039727][ T5226] bond2 (unregistering): (slave dummy0): Releasing backup interface [ 350.050392][ T5226] bond2 (unregistering): Released all slaves [ 350.060825][ T5226] bond3 (unregistering): Released all slaves [ 350.080616][ T5226] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 350.089326][ T5226] ip6gre1 (unregistering): left promiscuous mode [ 350.115489][ T5226] bond7 (unregistering): (slave xfrm1): Releasing backup interface [ 350.123527][ T5226] xfrm1 (unregistering): left promiscuous mode [ 350.144286][ T5226] bond3 (unregistering): (slave gretap1): Removing an active aggregator [ 350.154043][ T5226] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 350.170450][ T5226] bond4 (unregistering): (slave gretap2): Removing an active aggregator [ 350.179909][ T5226] bond4 (unregistering): (slave gretap2): Releasing backup interface [ 350.188189][ T5226] bond4 (unregistering): (slave gretap2): the permanent HWaddr of slave - 26:35:10:6c:45:ea - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 350.228539][ T5226] bond0 (unregistering): (slave geneve3): Releasing active interface [ 350.244122][ T5226] bond1 (unregistering): (slave geneve2): Releasing active interface [ 350.274851][ T5226] bond1 (unregistering): Released all slaves [ 350.285107][ T5226] bond2 (unregistering): Released all slaves [ 350.295248][ T5226] bond3 (unregistering): Released all slaves [ 350.308117][ T5226] bond4 (unregistering): (slave dummy0): Releasing backup interface [ 350.319670][ T5226] bond4 (unregistering): Released all slaves [ 350.330406][ T5226] bond0 (unregistering): Released all slaves [ 350.341176][ T5226] bond5 (unregistering): Released all slaves [ 350.351304][ T5226] bond6 (unregistering): Released all slaves [ 350.361504][ T5226] bond7 (unregistering): Released all slaves [ 350.372732][ T3020] 8021q: adding VLAN 0 to HW filter on device eth13 [ 350.433558][ T5226] tipc: Disabling bearer [ 350.441907][ T5226] tipc: Left network mode [ 350.467625][ T5226] hsr_slave_0: left promiscuous mode [ 350.474586][ T5226] hsr_slave_1: left promiscuous mode [ 350.482547][ T5226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.491768][ T5226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.513632][ T5226] hsr_slave_0: left promiscuous mode [ 350.520638][ T5226] hsr_slave_1: left promiscuous mode [ 350.528024][ T5226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.537321][ T5226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.565337][ T5226] hsr_slave_0: left promiscuous mode [ 350.572795][ T5226] hsr_slave_1: left promiscuous mode [ 350.580076][ T5226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.589599][ T5226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.626306][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 350.626326][ T28] audit: type=1400 audit(1786760608.168:2507): avc: denied { write } for pid=15227 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.704329][ T28] audit: type=1400 audit(1786760608.248:2508): avc: denied { write } for pid=15238 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 350.753576][ T5226] team0 (unregistering): Port device team_slave_1 removed [ 350.769470][ T5226] team0 (unregistering): Port device team_slave_0 removed [ 350.883713][ T5226] team0 (unregistering): Port device team_slave_1 removed [ 350.903359][ T5226] team0 (unregistering): Port device team_slave_0 removed [ 351.067674][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 351.272860][ T28] audit: type=1400 audit(1786760608.818:2509): avc: denied { write } for pid=15243 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.325417][ T28] audit: type=1400 audit(1786760608.868:2510): avc: denied { write } for pid=15254 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.376078][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 351.536304][ T28] audit: type=1400 audit(1786760609.078:2511): avc: denied { write } for pid=15257 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.593572][ T28] audit: type=1400 audit(1786760609.138:2512): avc: denied { write } for pid=15268 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.635674][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16 [ 351.753110][ T5226] IPVS: stop unused estimator thread 0... [ 351.759845][ T5226] IPVS: stop unused estimator thread 0... [ 351.815390][ T28] audit: type=1400 audit(1786760609.358:2513): avc: denied { write } for pid=15271 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.876797][ T28] audit: type=1400 audit(1786760609.408:2514): avc: denied { write } for pid=15282 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 351.910521][ T3020] 8021q: adding VLAN 0 to HW filter on device eth17 [ 352.113403][ T28] audit: type=1400 audit(1786760609.658:2515): avc: denied { write } for pid=15286 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.166580][ T28] audit: type=1400 audit(1786760609.708:2516): avc: denied { write } for pid=15297 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 352.215454][ T3020] 8021q: adding VLAN 0 to HW filter on device eth18 [ 352.436955][ T3020] 8021q: adding VLAN 0 to HW filter on device eth19 [ 352.657527][ T3020] 8021q: adding VLAN 0 to HW filter on device eth20 [ 352.902211][ T3020] 8021q: adding VLAN 0 to HW filter on device eth25 [ 353.118748][ T3020] 8021q: adding VLAN 0 to HW filter on device eth26 [ 353.334694][ T3020] 8021q: adding VLAN 0 to HW filter on device eth27 [ 353.551664][ T3020] 8021q: adding VLAN 0 to HW filter on device eth28