last executing test programs: 6m1.489318882s ago: executing program 2 (id=348): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000080), 0x1, 0x50b, &(0x7f0000000440)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000040)={0x2, 0x2, 0x1, 0x3, 0xe, 0x0, 0x700, 0x25dfdbfc, [@sadb_key={0x4, 0x9, 0xa0, 0x0, "53bb467d04f5ccf81ec4860c303200000000009f"}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x1000, @private}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x6, 0xd}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x800) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 6m0.407649693s ago: executing program 2 (id=362): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000000006c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x4030582a, &(0x7f0000000040)) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) 5m59.972151163s ago: executing program 2 (id=372): socket$inet_sctp(0x2, 0x5, 0x84) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00357428bd7000fed3df2502000000", @ANYRES32=r1, @ANYBLOB="080026040a000100000000000000000008000f00"], 0x30}, 0x1, 0x0, 0x0, 0x20044080}, 0x80c0) utimensat(0xffffffffffffffff, 0x0, 0x0, 0x0) 5m59.698587246s ago: executing program 2 (id=379): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000000)={0x1, &(0x7f0000000200)=[{0x6, 0xf5, 0xe, 0x7ffffffe}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) pivot_root(&(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0/file0\x00') 5m59.655998678s ago: executing program 2 (id=381): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0xd, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x68520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0xf}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001020000003}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x8) r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r2, 0x2007ffb) sendfile(r2, r2, 0x0, 0x1000000201005) 5m59.351251663s ago: executing program 2 (id=387): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) write(r0, &(0x7f0000000700)='h', 0x1) 5m59.351123263s ago: executing program 32 (id=387): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x2383, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x2383, @loopback}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xf, 0x4, 0x4, 0x10, 0x0, 0x0, 0xfffffffe, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0xe, 0x6, &(0x7f0000000500)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r1}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4}, @call={0x85, 0x0, 0x0, 0x34}, @exit], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000600)={@map=r1, r2, 0x5, 0x0, 0x0, @void, @value=0x0}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000340), &(0x7f0000000380)=@tcp=r0}, 0x20) write(r0, &(0x7f0000000700)='h', 0x1) 2m35.738100818s ago: executing program 1 (id=2561): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) epoll_create1(0x0) socket(0x200000000000011, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) socket$rds(0x15, 0x5, 0x0) socket(0x15, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c0000005e0001002bbd7000ffdbdf2500000000", @ANYRES32=r2, @ANYRES32=r1], 0x1c}, 0x1, 0x0, 0x0, 0x831e368c771a0719}, 0x400c080) 2m35.691312051s ago: executing program 1 (id=2562): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x40, 0x4) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/62, 0x328000, 0x800, 0x9, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000300)=0x2, 0x4) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) bind$xdp(r1, &(0x7f0000000240)={0x2c, 0x1, r3, 0x0, r2}, 0x10) 2m35.566290926s ago: executing program 1 (id=2567): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x0, 0x0}) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x100000008, 0x940f0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x1, @perf_bp={0x0, 0x4}, 0x10, 0x8, 0x43a1bd76, 0x7, 0xa, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x0, 0xffffffffffffffff, 0xb) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12011, r0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x8, 0x40008, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x2, @perf_config_ext={0x9, 0x2}, 0x4580, 0x0, 0x800000, 0x6, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) 2m34.62795197s ago: executing program 1 (id=2579): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@nombcache}, {}, {@delalloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@init_itable}, {@nodelalloc}, {@grpid}, {@quota}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) sendmsg$kcm(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="e31eebbaef60d0df1bb6dfdc2ecc4b7021f75d5001ffc32877553de70637f112", 0x20}], 0x1}, 0x20008005) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x240408c1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x1, @empty, 0x7}], 0x1c) io_uring_enter(0xffffffffffffffff, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m34.479965647s ago: executing program 1 (id=2572): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0xcdd, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b83, 0x2, @perf_bp={0x0, 0x3}, 0x8000, 0x5, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r2, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68888a8", 0x0, 0xaded, 0x4000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m34.106343085s ago: executing program 1 (id=2574): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresgid(0x0, 0xee01, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) 2m34.083190296s ago: executing program 33 (id=2574): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb6, @ipv4={'\x00', '\xff\xff', @local}, 0x6}, 0x1c) openat$ppp(0xffffffffffffff9c, 0x0, 0x40082, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresgid(0x0, 0xee01, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x3) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "25fd25990fe381b9", "f511161d94f179ecf85eb61b6a4762eb", "1e59ddbe", "06ed010001809f9b"}, 0x28) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000000c0)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0) 2m1.274324391s ago: executing program 6 (id=2778): bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x28, 0x1, 0x0, 0x0, 0x0, 0x9, 0x640b9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_config_ext={0x0, 0x3fff8000}, 0x0, 0x32, 0x43a1bd76, 0x7, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0xf}, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x2, 0x3, 0x84) socket$kcm(0x2, 0x200000000000001, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x3ff, 0xff}, 0x100c, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000003200)={0x6, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000100000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000007000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bca2000000000000a6020000f8ffffffb703000018000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r0}, &(0x7f0000000340), &(0x7f0000000380)=r1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) 1m56.026664648s ago: executing program 6 (id=2790): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x22000, 0x0) readv(r0, &(0x7f0000001380)=[{&(0x7f0000000180)=""/11, 0xb}], 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@nojournal_checksum}, {@grpjquota}]}, 0x3, 0x446, &(0x7f0000000380)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="1804000000000000000000000001000018010000202070250000000000202020db1af8ffa0000000bda100000000000007010000f8ffffffb702000008000000b70300000000000085000000a000000095"], &(0x7f0000000000)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) sendfile(r1, r1, 0x0, 0xe3aa6ea) 1m53.572255763s ago: executing program 6 (id=2800): syz_io_uring_setup(0x2138, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x4000, 0x0, 0x93a, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs$pagemap(0x0, 0x0) ioctl$PAGEMAP_SCAN(r0, 0xc0606610, 0x0) r1 = socket$inet6(0xa, 0x400000000001, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20004048, &(0x7f00000001c0)={0xa, 0x4a20, 0x7ffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x4}, 0x1c) getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f00000022c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x28, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000001080)='/proc/locks\x00', 0x0, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000002380)) close(0x3) 1m52.451865826s ago: executing program 6 (id=2807): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf) readv(r0, &(0x7f00000008c0)=[{&(0x7f00000007c0)=""/39, 0x27}], 0x1) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f00000000c0)={[{@inode_readahead_blks}, {@norecovery}, {@dioread_nolock}, {@norecovery}]}, 0x5, 0x4f3, &(0x7f00000005c0)="$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") perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x483, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x0, 0x1000, 0x2, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_int(r1, 0x107, 0xe, &(0x7f0000000080)=0x3fd, 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x109141, 0xd6) pwrite64(r2, &(0x7f00000007c0)="cfac", 0x2, 0x7ff) 1m50.013138721s ago: executing program 6 (id=2812): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sendmsg$IEEE802154_LLSEC_SETPARAMS(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x14, 0x0, 0x10, 0x70bd26, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4040001) mount(0x0, 0x0, &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/iscsi_transport/iser/handle\x00', 0x0, 0x0) read(r0, &(0x7f0000000100)=""/64, 0x40) 1m49.206341179s ago: executing program 6 (id=2821): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="6400000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200e00000020800074000000005"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 1m32.319290314s ago: executing program 34 (id=2821): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000200), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="6400000000010104000000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000000000240002800c00028005000100000000001400018008000100e000000108000200e00000020800074000000005"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, 0x2, 0x1, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x20044804}, 0x40040) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000008c0)={0xac, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) 1m29.63108678s ago: executing program 0 (id=2903): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x94) perf_event_open$cgroup(&(0x7f0000000000)={0x6, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) syz_clone(0x40042700, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x5, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="61128c030000000061138c8800000000bf300000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000240)=ANY=[@ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x21, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6gre0\x00', 0x210}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 1m25.956930934s ago: executing program 0 (id=2911): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$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") perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$VT_OPENQRY(0xffffffffffffffff, 0x4b4b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x17, 0x0, 0x79, 0x11, 0xb8}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x94) mmap(&(0x7f0000d61000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000180)=0x2, 0x9, 0x1) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4003, &(0x7f0000000180)=0x4, 0x9, 0x1) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x7, 0xe}) 1m25.034733107s ago: executing program 0 (id=2913): perf_event_open(&(0x7f0000000280)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_bp={&(0x7f0000000040), 0xc}, 0x3830, 0x1, 0xbd6, 0x0, 0x204, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x3, &(0x7f0000000080)=[{0x15, 0x0, 0x1}, {0x20, 0xf6, 0x1}, {0x6, 0x0, 0x6, 0x5635}]}) socket$nl_generic(0x10, 0x3, 0x10) mknodat(0xffffffffffffff9c, 0x0, 0x1000, 0xfffffff7) socket$inet6(0xa, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) rename(0x0, 0x0) 1m24.32438808s ago: executing program 0 (id=2919): mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x300000f, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000002a00), 0x0, 0x0) read$msr(r0, 0x0, 0x0) r1 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x804818, &(0x7f0000000780)=ANY=[@ANYRES64=r1, @ANYRES32, @ANYBLOB="0c2ec34edb42fe4f2c1b832d9141290140e677e53cc188dc41581142590d4e0713f4ae95293dd9ce1c8836b03632dab46a43356a89c37f32b221bf1e737101a03cdb083ffc8585af679581ab62438f23ef4adeb4629413", @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r1, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000001080)="$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") mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x1333406, 0x0) write$binfmt_elf64(r0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x10b0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x414, &(0x7f0000000580), 0x1, 0x437, &(0x7f0000000900)="$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") lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0xfe37, 0x0) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, &(0x7f0000000040)='mem\x00\xffEev\xf2r\xf1\x18\x1d\xb9\x00y_hug$\b\xb0\x7f0\f\x87\xcaaPr\x9d\xd1\xe5\xc80S\x1dd\x884>\x02\xc7\x94\xa1\x14\xd3BG\xe5a\xac\xfe-!\xdfH\"\xd3\xc3\xd59\x88\xca8\x8d\x0f$\xcd\xe6\xfd\xffD\x1e\xf2\x85\x98\xb5\xaf[s\xdf!\xbdy\x9e\xe2\x17h{\x96\xd8\xb7G&t\xe8\x1f\xf8\x91V\xdc\xees\x9bf\xf9z\xa8z\xb7[\xa3\xb0\xc9\xa7L\xcd\xdf\xef\xa4\x97|\xc6\xedRE\x96\xb6\xf3\xa9b\xc9(\x8d\x88\xcc\xfc\xb7oyx\td\xfel0\x1e\x8e\x03\aK\x96\xe7\x14\x83e\xb2\x19\xd1x\xfb\xf1\xb2<\xd3\x1d\x8dx\xbe\xb1.\xfc9\x94\x8f\xbb\x84Qu:\x9f\rp\x1f\x86hT\x0f\nC\f,\xffe\x00\xdc\xf7\xe2g3>\x94O\xfd\x81\xd8\xe1*\x93n\'\x99\xe9\\\x8f\xa7Zj)\xdd\xb7\xc0\xa8+\xd3\xba\x17L\x93\xaciNG5*\xc9\x11\xde\v', 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)) write$cgroup_type(r2, &(0x7f0000000000), 0x9) 1m24.160203498s ago: executing program 0 (id=2921): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) io_setup(0x81, &(0x7f0000001440)) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x1}, 0x0, 0x10000, 0xfffffffe, 0x0, 0x0, 0x800000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) mlock(&(0x7f00003ce000/0x4000)=nil, 0x4000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@multicast, @local, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x4, 0x3e, 0x66, 0x0, 0x7, 0x2, 0x0, @private=0xa010102, @local}, {0x11, 0xff, 0x0, @empty}}}}}, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0x50, 0x0, &(0x7f0000000000)="ff", 0x0, 0x36, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x50) 1m24.065905052s ago: executing program 0 (id=2922): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) close(r1) sendmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840}, 0x4) 1m23.996243666s ago: executing program 35 (id=2922): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x33fe0}], 0x1}, 0x0) close(r1) sendmsg$unix(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x840}, 0x4) 4.270027379s ago: executing program 8 (id=3748): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) io_submit(0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) rt_sigpending(0x0, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) sendto$inet6(r0, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r0, &(0x7f000001a900)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)="12", 0x1}], 0x1}}], 0x1, 0x2401c444) capset(0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x181042, 0x4) close(r0) 4.143916465s ago: executing program 8 (id=3740): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x19e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0xb}, 0x142c4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0x0, 0x0, 0x0, 0x800000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddb, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}}, 0x60800) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000980)=ANY=[@ANYBLOB="3507f4b98d02dd32eeb31666bf6a1c0000001800dd93000000000008120002201000000000062000000019087de00de43d439c1fa6e9"], 0x1c}}, 0x0) sendmmsg(r1, &(0x7f0000000180), 0x4000190, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000005540)={0x0, 0x2}, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000000)={@multicast2, @empty}, 0xc) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x91) 3.419033749s ago: executing program 8 (id=3746): socket$packet(0x11, 0xa, 0x300) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracefs_dir\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracefs_dir\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0xffffffffffffff9c, 0x0, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./tracefs_dir/free_buffer\x00', 0x1, 0x0) pwritev(r0, 0x0, 0x0, 0x8, 0x7ff) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x1200082, &(0x7f0000000640), 0x1, 0x5b3, &(0x7f00000010c0)="$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") mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 3.139538272s ago: executing program 7 (id=3751): mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000f80), 0xc00, &(0x7f0000000080)={[{@mpol={'mpol', 0x3d, {'prefer', '=static'}}}]}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x0, &(0x7f00000000c0)}) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/vmcoreinfo', 0x0, 0x11b) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x9, 0x9}, 0x1040c2, 0x0, 0x0, 0x9, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={0x0, 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r1, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000780), &(0x7f0000000900), 0x4, r2, 0x4}, 0x38) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) preadv(r0, &(0x7f0000000080)=[{&(0x7f0000000100)=""/120, 0x78}], 0x1, 0x0, 0x45) 3.022855467s ago: executing program 7 (id=3754): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x400, &(0x7f0000000180), 0x2, 0x790, &(0x7f0000006a80)="$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") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80342, 0x168) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x0, 0x0, 0x0}, 0x94) write$P9_RUNLINKAT(0xffffffffffffffff, 0x0, 0x0) close(0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) 2.883918784s ago: executing program 7 (id=3756): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x6, 0x1, 0x4000000fffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x2) mknod(&(0x7f0000000180)='./bus\x00', 0x8000, 0x0) 2.153008378s ago: executing program 5 (id=3767): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x48e, &(0x7f0000000240)={0x0, 0x2607, 0x2, 0x2, 0x29d}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1de) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/instances/inst1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/instances/inst1/set_event\x00', 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x4, 0x3a, 'tracefs\x00', 0x3a, '\x00#]-$#*&\\].}]$&\x1b\'$', 0x3a, './trace/instances/inst1/set_event'}, 0x5b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000076000907020000000200000007020000", @ANYRES32=0x0, @ANYBLOB='\f\x00\r'], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x8804}, 0x4080) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000440)={&(0x7f0000002000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1, 0x3}, 0x1) 2.13511874s ago: executing program 8 (id=3758): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2.030587804s ago: executing program 8 (id=3760): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x60800, 0x40) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) linkat(0xffffffffffffff9c, &(0x7f00000003c0)='./cgroup\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./file7\x00', 0x1000) close_range(r0, 0xffffffffffffffff, 0x0) 2.029646914s ago: executing program 5 (id=3771): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x210000, &(0x7f0000000740)={[{@user_xattr}, {@noquota}, {@mb_optimize_scan}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x1f}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}], [{@fsuuid={'fsuuid', 0x3d, {[0x39, 0x66, 0x60, 0x36, 0x39, 0x36, 0x37, 0x38], 0x2d, [0x32, 0x31, 0x61, 0x65], 0x2d, [0x65, 0x34, 0x30, 0x30], 0x2d, [0x35, 0x64, 0x39, 0x64], 0x2d, [0x32, 0x4, 0x37, 0x63, 0x65, 0x38, 0x31, 0x60]}}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '..[,.!!'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '$!{'}}]}, 0x3, 0x5a5, &(0x7f0000002280)="$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") r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000000)=[{0x2, 0x7}, {0x4, 0x6}, {0x0, 0x8}], 0x3) semctl$SETVAL(r0, 0x0, 0x10, &(0x7f00000003c0)=0x6) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xa01, 0x8}, 0x10802, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="020000000100000000000000040000000000400010000000000000002000000000000000"], 0x24, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) execve(&(0x7f0000000080)='./file2\x00', &(0x7f0000000140)={[&(0x7f00000000c0)='fsuuid', &(0x7f0000000100)='..[,.!!']}, &(0x7f0000000380)={[&(0x7f0000000180)='\'(\x00', &(0x7f00000001c0)='mb_optimize_scan', &(0x7f0000000240)=']^\x00', &(0x7f0000000280)='!-\x85!!\x00', &(0x7f00000002c0)='mb_optimize_scan', &(0x7f0000000300)='max_dir_size_kb', &(0x7f0000000340)='ext4\x00']}) 1.989466146s ago: executing program 3 (id=3761): preadv2(0xffffffffffffffff, 0x0, 0x0, 0xfffffffd, 0x8, 0x12) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, @perf_config_ext={0x6, 0x2d790}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'gre0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x38, 0x10, 0x421, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r1, 0x0, 0x10200}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x38}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000f0cd00000000000004000000850000000500000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140), 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socketpair(0x1, 0x1, 0x0, 0x0) 1.877802311s ago: executing program 5 (id=3762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0xb}, 0x8040, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x7, &(0x7f0000000000)=0x4000200, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4e24, 0x10000008, @mcast2, 0x9}, 0x1c) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, 0x0, &(0x7f0000006d80)) 1.761907577s ago: executing program 3 (id=3764): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001", @ANYRESHEX=r0], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, 0x0) r1 = fsopen(0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x24a}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x4d}, 0x94) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1021, 0x400000000000f) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1.653261412s ago: executing program 5 (id=3777): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0xa}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = open(&(0x7f0000000000)='./bus\x00', 0x141b42, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r4, 0x0, 0x1000, 0x800000000000000) splice(r2, 0x0, r6, 0x0, 0x80, 0x8) write$tun(r3, &(0x7f00000033c0)=ANY=[], 0x107c) 1.627224893s ago: executing program 3 (id=3766): sigaltstack(&(0x7f0000000480)={0x0, 0x80000000}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) unshare(0x22020600) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat$rtc(0xffffff9c, 0x0, 0xa200, 0x0) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0x7005, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, 0x0, 0x20000, 0x20) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x40, 0xc4852ef}, 0x109068, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0xff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) msgsnd(0x0, &(0x7f0000000000)={0x3}, 0x8, 0x0) 1.502548779s ago: executing program 4 (id=3768): openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd\x00') r2 = getpid() r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) r4 = memfd_create(&(0x7f0000000380)='D\xa3\xd5Wj\x00\x00x0\xc1\xac*\x1a\vG\xa9~vB\xbc\t\x00\x00\x00VoA\xaa\xbc\xee[\xe1\xa2\xe0\xff\x04\x00\x00\x00\\i\xcf\t\xb0\xa9 +H/\x1a\xe7\x95\xce\"\"\xbd\xf9\xd0\xc0\xa9\b\x98\xfc:\x1b\xc4\x80!\xfd\xa4\xcaN\x84\xadS\x8bqE\x99\x01t\xb1\x1f|\x99PL\x92\x8f\xc2\xf9\xcd\x8cj\x03X\x05\x17mwI\xf0\x01\xe5z\xcdJ)\xc7\xfa)\xaa}\xef\xbb\xf5\xcd\xb1o5\x18\xd6\v\x85q\x98\x9bB\xb9\xea\xe7\xff\x7f\x00\x00T\xc0\xd2\t?\bpBl\xf4*8\xc6\xe5\x06P\xc11\f^\x7f\x8e\xc1\xd1Wra\x19)\xe3\x8f\xd9\x9f\x15\x1e\xf2\x18\r\xad\b\xe0\x96NH\x85\r+\xfc\xb3\xdd\xddhg \x03\xa7\x92\xff\x00+h\xb7@#K\x9cMY\xd3\x9b\b-G\xb1\xdaS\x81\xb2\x93\xb83\x8a\x94*\x8d\\\b\xff/\xa1\xc0\xf9&\xd3M\xf6\n\xff\x83k\xe6\rDa\x16\xbd\x00\x02\xdf\b~\xd5)\xa4\x80\xad\x97\'\x1b\xfd}\x96&\xd2\x0eGp\x8e\x1a\x19o\xf1\x14\xe2]J\xf2\xb5h\x9bt*\xd2\xfbT\x01ci\x87\x18\xc9\x13=\x1b\xadl;}\x9d\xbe\x9a\xee\x1a\xfc\x96 \x93\x12@\x19|f\x98\xdc,\x82SlA\x19\xcb\xfe\xccSKO}\xb2U\xd6\xc5\xa7=\xf8s\x1dp\xe0\x14\xe5\x92\xfd)\bB\xcd\xc2\xb6\x85$%nV\xd3*\x00`OE\x8e\xf0\xf9\xd2!KZ%\xad\xa1\x92b\x1e%\x9f!\xd8mV$\x1d?\xc2\f\xcc\xc5x\x9fJ#\xce\x90\xc5\x82\xfb\x97\xd2\xb7\xb5\xed\xb5\'J\xfc\xf4Z.\rS\x88\f\xd0zK\xc7\x81\xbe\xd5\xc2\xce\x89\xbc\x1e\xb78\xf6Z\xd5\x1b\xf1\x9bMD\f\xf6\xc5V\xe1\x12j\xdfW\x87\xf09\n\x1e\x1b\f\xe5p\xab\x9e\xe5}\x96\x9b\xea\x86\x0f\xca\xcf\x16\x96\x0e6\x8d\x11\xd2&\"eKKV\x8b?]<\xa7]\x93\xad\x1d\xfe\x13\xee\xca\xdc\x97\xa9\a\b\xac\xdd\xa0\xfe\x97\xa1?\xa2F\xae\xb7f\x85\xda', 0x0) write(r4, &(0x7f00000000c0)="6963e64243ea486da3a74e3deec6fc5bb9650b5de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00000000000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x11, r4, 0x0) r5 = dup3(r1, r0, 0x0) fchdir(r5) creat(&(0x7f0000000040)='./bus\x00', 0x0) 1.289518049s ago: executing program 4 (id=3769): socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg(0xffffffffffffffff, 0x0, 0x0) mkdir(0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r0, &(0x7f0000000040)={0xa, 0x0, 0x9, @rand_addr=' \x01\x00', 0xffffffff, 0x4}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x28, 0x0, 0x0, 0xffffefff}, {0x6, 0xfc, 0x0, 0x7}]}, 0x10) sendmmsg(r1, &(0x7f0000001c00), 0x400000000000159, 0x40840) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r4, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="2e00000010008188040f80ec59acbc0413a1f848130000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x40044) 1.26965867s ago: executing program 3 (id=3770): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xdc101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000000100000000000000000000850000007500000095"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="62cb000007"], 0x0, 0x7}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x1, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r3) syz_clone(0x21140200, 0x0, 0x0, 0x0, 0x0, 0x0) 1.252479871s ago: executing program 7 (id=3772): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x0, 0x5}, 0x1000, 0x0, 0x80000000, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0x48e, &(0x7f0000000240)={0x0, 0x2607, 0x2, 0x2, 0x29d}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./trace\x00', 0x1de) mount(0x0, &(0x7f00000000c0)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/instances/inst1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/instances/inst1/set_event\x00', 0x1, 0x0) write$binfmt_register(r1, &(0x7f00000001c0)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x4, 0x3a, 'tracefs\x00', 0x3a, '\x00#]-$#*&\\].}]$&\x1b\'$', 0x3a, './trace/instances/inst1/set_event'}, 0x5b) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="2400000076000907020000000200000007020000", @ANYRES32=0x0, @ANYBLOB='\f\x00\r'], 0x24}, 0x1, 0x5502000000000000, 0x0, 0x8804}, 0x4080) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, &(0x7f0000000440)={&(0x7f0000002000)={[{0x0, 0x0, 0x1}]}, 0x1, 0x1, 0x3}, 0x1) 1.145483066s ago: executing program 3 (id=3773): r0 = syz_open_dev$evdev(&(0x7f0000000040), 0x1, 0x101) r1 = epoll_create1(0x80000) perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x6, 0xf8, 0x4, 0xff, 0x0, 0x0, 0x880, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x400, 0x2, @perf_bp={0x0, 0x2}, 0x9, 0x2, 0x7fff, 0x3, 0x70, 0x7, 0x6, 0x0, 0x3, 0x0, 0x7c}, 0xffffffffffffffff, 0x9, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x12, r4, 0x108000) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, &(0x7f0000000240)={0x3, 0x11, 0x5, 0x5360, 0x7}, 0x10, 0x6, 0x81, 0x0, 0x1, 0x101, 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b0001006272696467650000400002800800050001000000060027"], 0x70}, 0x1, 0x0, 0x0, 0x880}, 0x20000040) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x8}) ioctl$EVIOCGRAB(r0, 0x40044590, &(0x7f0000000080)=0x4) write$evdev(r0, &(0x7f00000000c0)=[{{0x77359400}, 0x0, 0x1, 0x80}], 0x76) 1.144687386s ago: executing program 7 (id=3774): socketpair$tipc(0x1e, 0x5, 0x0, 0x0) unshare(0x2040600) mkdirat(0xffffffffffffff9c, 0x0, 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='nsfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x86, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000200), &(0x7f0000000140)='./file2\x00', 0x1000000, &(0x7f00000000c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000840)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x208e24b) 1.144534656s ago: executing program 4 (id=3775): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x2, 0x0, 0x0) move_pages(0x0, 0x1efe, &(0x7f0000000080), 0x0, &(0x7f0000000040), 0x0) close(r0) socket$kcm(0x2, 0x200000000000001, 0x106) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000080)={0xc, 0x3a, 0x3, 0x7, 0x5, 0x7ff, 0x3, 0xa2}) sendmsg$kcm(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x2400c094) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30068016) openat2(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x280280, 0x84, 0x4}, 0x18) 288.170666ms ago: executing program 4 (id=3776): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file2\x00', 0x210000, &(0x7f0000000740)={[{@user_xattr}, {@noquota}, {@mb_optimize_scan}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7b1}}, {@stripe={'stripe', 0x3d, 0x1f}}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}], [{@fsuuid={'fsuuid', 0x3d, {[0x39, 0x66, 0x60, 0x36, 0x39, 0x36, 0x37, 0x38], 0x2d, [0x32, 0x31, 0x61, 0x65], 0x2d, [0x65, 0x34, 0x30, 0x30], 0x2d, [0x35, 0x64, 0x39, 0x64], 0x2d, [0x32, 0x4, 0x37, 0x63, 0x65, 0x38, 0x31, 0x60]}}}, {@context={'context', 0x3d, 'unconfined_u'}}, {@smackfsdef={'smackfsdef', 0x3d, '..[,.!!'}}, {@defcontext={'defcontext', 0x3d, 'unconfined_u'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '$!{'}}]}, 0x3, 0x5a5, &(0x7f0000002280)="$eJzs3c9rHFUcAPDvbHb7W5tCKVZEAj1Yqd00iT8qeKhH0WJBPdeQbEPJpluym9LEgu3BXrxIEUQsiHe9K3goXjz6R0hBC0VKUNDLymxm86O7+bHJpkmTzwe2fW9mkve+8+a9vNm3ywSwa/Wl/+QijkfEF0nE4UX78pHt7Js7bvbRjZH0lUS9/sFfSSTZtubxSfb/wSzzXET88lnEqVxrudXpmfHhcrk0meX7axNX+6vTM6cvTwyPlcZKVwaHhs6+NjT45huvdy3Wly/88/X79945+/mJ2a9+eHDkThLn4lC2b3EcHdm7JHdzcaavXs/OSSHOPfZjA+sqbPtKtroCrEtP1s8LEXG8cLjQ7PXAzvdpRNSXSlo3ATtT0mFn32twgB2iOQ9o3tuv+z74KfXw7bkboNb483PvjcS+xr3RgdlkyZ1ROknq7UL5fRH7I+LOj3/evRMbeR8CoEM3b0XEmXy+dfxLsvFv/c6s4ZjHy+hk/NvfeZWARe6l859X2s1/cvPzn2gz/znYpu+ux+r9P/egC8UsK53/vdV2/ju/aNXbk+Weacz5Csmly+VSOrY9GxEno7A3za+0nnN29n59UXbJilEafzr3a77S8ptzwaweD/JL15hidLg2vNG4mx7eini+7fw3mW//pE37p+fjozWWcax098Xl9q0e/+aqfxfxUtv2X1jRSlZen+xvXA/9zaui1d+3j/22XPnt4//1500Ita20/Q+sHH9vsni9ttp5Gd/u+6+03L71Xv97kg8b6T3ZtuvDtdrkQMSe5L3W7YMLP9vMN49P4z95YuXxr931n849Pl5j/LePfv/C+uPfXGn8ox21f+eJ++9+8s1y5a+t/V9tpE5mW9Yy/rWpTjpktVRwI+cOAAAAAAAAtptcRByKJFeMfVk6lysW5z7fcTQO5MqVau3UpcrUldFofFe2Nwq55kr34UWfhxjIPg/bzA8+lh+KiCMR8WXP/ka+OFIpj2518AAAAAAAAAAAAAAAAAAAALBNHJz//n8s+f5/6o+era4dsOnyc8//BnahVR/5340nPQHb0qr9H9ix9H/YvfR/2L1W7/+///REKgI8SY0lPn//YffS/2H30v9h99L/AQAAAAAAAAAAAAAAAAAAAAAAAAAAoKsunD+fvuqzj26MpPnRa9NT45Vrp0dL1fHixNRIcaQyebU4VqmMlUvFkcrEar+vXKlcHRiMqev9tVK11l+dnrk4UZm6Urt4eWJ4rHSx5DnjAAAAAAAAAAAAAAAAAAAA0Ko6PTM+XC6XJruQKJTLpVxErOXgiC4V+tQl/t3w70nb7WZ+bed5cxJJLGzJb4uzKtHtxFaPTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACw4P8AAAD//9FrLGA=") r0 = semget$private(0x0, 0x6, 0x0) semop(r0, &(0x7f0000000000)=[{0x2, 0x7}, {0x4, 0x6}, {0x0, 0x8}], 0x3) semctl$SETVAL(r0, 0x0, 0x10, &(0x7f00000003c0)=0x6) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_config_ext={0xa01, 0x8}, 0x10802, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009400000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000700)=ANY=[@ANYBLOB="020000000100000000000000040000000000400010000000000000002000000000000000"], 0x24, 0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) execve(&(0x7f0000000080)='./file2\x00', &(0x7f0000000140)={[&(0x7f00000000c0)='fsuuid', &(0x7f0000000100)='..[,.!!']}, &(0x7f0000000380)={[&(0x7f0000000180)='\'(\x00', &(0x7f00000001c0)='mb_optimize_scan', &(0x7f0000000240)=']^\x00', &(0x7f0000000280)='!-\x85!!\x00', &(0x7f00000002c0)='mb_optimize_scan', &(0x7f0000000300)='max_dir_size_kb', &(0x7f0000000340)='ext4\x00']}) 286.733036ms ago: executing program 5 (id=3787): r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) mkdir(&(0x7f0000000000)='./file0\x00', 0xfffffffffffffffe) r1 = socket$unix(0x1, 0x2, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x0) connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r3 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESDEC=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 286.409216ms ago: executing program 3 (id=3778): socket$packet(0x11, 0x2, 0x300) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 211.82227ms ago: executing program 4 (id=3779): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) close(0xffffffffffffffff) timer_create(0xfffffff9, 0x0, &(0x7f0000000040)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, 0x0) setrlimit(0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000080)=@req={0x800000, 0x1, 0x1000, 0x800}, 0x10) mmap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3, 0x11, r0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r2, &(0x7f0000000210)="01", 0x1) read(r1, &(0x7f0000800000)=""/8, 0x8) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x11, 0x0, 0x1, 0x1, 0x0, 0x0}, 0x14) 127.850274ms ago: executing program 4 (id=3780): r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_opts(r1, 0x0, 0xd, &(0x7f0000000200)="a8", 0x1) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r1, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b40)=""/142, 0x8e}, 0x6}], 0x1, 0x182, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r2, &(0x7f0000000a40)="89ba53b519a795020072aed129d4b5247c983466b3d757e832333a64d9abf416fd83f942661c47bcdf71f7d02fa27ba20d03474a4a4bce636eab1757928ca8d2b882b2b49ef18e2af960ac066efe5ef92769c5ee6da9435467583e6b541ce9a21c3ce5cb5fbdad9a45de0000000000000000000034bafe45a9cbdffee4947123", 0x80) 127.264134ms ago: executing program 5 (id=3781): r0 = gettid() r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0x78) flock(r1, 0x2) r2 = open(&(0x7f0000000180)='.\x00', 0x10000, 0x2) flock(r2, 0x2) flock(r2, 0x1) r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r3, 0x1) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) 35.742638ms ago: executing program 8 (id=3782): perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_config_ext={0x395}, 0x204, 0x5, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) symlinkat(&(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000200)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) 0s ago: executing program 7 (id=3783): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x5, 0x2, 0xff, 0xce, 0x4, 0x9, 0x8, 0x8, 0x7, 0x0, 0xff, 0x1, 0x6, 0x7}, 0xe) shutdown(0xffffffffffffffff, 0x0) r1 = io_uring_setup(0xac9, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x1, 0x0, 0x6, 0x4, 0x0, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4c881, &(0x7f0000000540)={0xa, 0x4e24, 0x10, @mcast2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000000e00)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000440)="a2f61eda531d7233c8aa7db6", 0xc}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000600)="04", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='^', 0x1}, {0x0}], 0x2, &(0x7f0000000080)=ANY=[], 0x68}}, {{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)='t', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000002f00)=[{&(0x7f00000001c0)="88abf42a4a0d3dd0018afef7d720fa90f6f9154f8f493027334b6238a51b9cacdabff7f7beed7929a8", 0x29}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x7, 0x2401c4c5) sendmmsg$inet6(r2, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f00000000c0)="9789b5", 0x7ffd}], 0x1}}], 0x1, 0x84) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0xe0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) close(0x3) kernel console output (not intermixed with test programs): eftover after parsing attributes in process `syz.6.2703'. [ 280.506857][T11632] EXT4-fs: Ignoring removed nobh option [ 280.514259][T11632] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 280.514637][T11632] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #13: comm syz.0.2704: attempt to clear invalid blocks 1 len 1 [ 280.514759][T11632] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 280.514923][T11632] EXT4-fs (loop0): Remounting filesystem read-only [ 280.515216][T11632] EXT4-fs (loop0): 1 truncate cleaned up [ 280.515606][T11632] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 280.916600][T11642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2707'. [ 280.941558][T11642] 8021q: adding VLAN 0 to HW filter on device bond8 [ 280.975798][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 280.975816][ T29] audit: type=1400 audit(281.997:4490): avc: denied { create } for pid=11641 comm="syz.3.2707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 280.976713][ T29] audit: type=1400 audit(281.997:4491): avc: denied { write } for pid=11641 comm="syz.3.2707" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 281.039855][T11642] 8021q: adding VLAN 0 to HW filter on device bond9 [ 281.042639][T11642] bond8: (slave bond9): Enslaving as an active interface with an up link [ 281.117552][T11642] bond8 (unregistering): (slave bond9): Releasing backup interface [ 281.126562][T11642] bond8 (unregistering): Released all slaves [ 281.142257][ T5139] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.071074][T11655] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2713'. [ 282.794279][T11638] loop6: detected capacity change from 0 to 256 [ 283.115777][T11671] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.132724][T11671] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.134064][T11676] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=11676 comm=syz.3.2718 [ 283.170116][T11671] batman_adv: batadv0: Interface activated: dummy0 [ 283.175282][T11671] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 283.565377][T11671] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 283.569192][ T6255] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.569227][ T6255] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.591191][ T6255] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.591221][ T6255] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.677059][ T6255] bridge0: port 3(team0) entered blocking state [ 283.677104][ T6255] bridge0: port 3(team0) entered forwarding state [ 283.848705][T11686] netlink: 6 bytes leftover after parsing attributes in process `syz.6.2721'. [ 283.852054][T11686] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 284.873992][ T29] audit: type=1400 audit(285.897:4492): avc: denied { write } for pid=11701 comm="syz.5.2727" name="instances" dev="tracefs" ino=1576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 284.874039][ T29] audit: type=1400 audit(285.897:4493): avc: denied { add_name } for pid=11701 comm="syz.5.2727" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 284.874064][ T29] audit: type=1400 audit(285.897:4494): avc: denied { create } for pid=11701 comm="syz.5.2727" name="foo" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:tracefs_t tclass=dir permissive=1 [ 284.943241][ T29] audit: type=1400 audit(285.947:4495): avc: denied { write } for pid=11701 comm="syz.5.2727" name="instances" dev="tracefs" ino=1576 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 284.984804][ T29] audit: type=1400 audit(286.007:4496): avc: denied { remove_name } for pid=11701 comm="syz.5.2727" name="foo" dev="tracefs" ino=39329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 284.984883][ T29] audit: type=1400 audit(286.007:4497): avc: denied { rmdir } for pid=11701 comm="syz.5.2727" name="foo" dev="tracefs" ino=39329 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 288.086221][T11740] tipc: Enabling of bearer rejected, already enabled [ 288.976363][T11727] loop5: detected capacity change from 0 to 256 [ 289.107488][T11760] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2744'. [ 290.072197][T11771] loop0: detected capacity change from 0 to 1024 [ 290.117668][T11771] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 290.132545][ T29] audit: type=1400 audit(291.157:4498): avc: denied { write } for pid=11769 comm="syz.0.2746" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 291.680477][ T5139] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 291.911067][T11778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2747'. [ 291.911180][T11778] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2747'. [ 291.926494][T11778] geneve4: entered promiscuous mode [ 291.926640][T11778] geneve4: entered allmulticast mode [ 293.327338][T11804] netlink: 6 bytes leftover after parsing attributes in process `syz.4.2755'. [ 293.346250][T11804] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 295.546277][T11833] loop6: detected capacity change from 0 to 512 [ 295.556340][T11833] EXT4-fs: Ignoring removed nomblk_io_submit option [ 295.556464][T11833] EXT4-fs: Ignoring removed nobh option [ 295.590682][T11833] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 295.735574][T11831] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2765'. [ 295.778168][T11214] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 295.946877][T11849] loop6: detected capacity change from 0 to 1024 [ 295.959175][T11849] EXT4-fs (loop6): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 295.985065][T11849] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 297.959115][T11838] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 153: padding at end of block bitmap is not set [ 299.361078][T11214] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 299.632273][T11900] netlink: 'syz.3.2785': attribute type 2 has an invalid length. [ 302.629607][ T29] audit: type=1326 audit(303.657:4499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.6.2790" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1953e159 code=0x7ffc0000 [ 302.632737][ T29] audit: type=1326 audit(303.657:4500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.6.2790" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1953e159 code=0x7ffc0000 [ 302.635953][ T29] audit: type=1326 audit(303.657:4501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.6.2790" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1953e159 code=0x7ffc0000 [ 302.636544][ T29] audit: type=1326 audit(303.657:4502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.6.2790" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1953e159 code=0x7ffc0000 [ 302.663561][ T29] audit: type=1326 audit(303.667:4503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.6.2790" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7faa1953e159 code=0x7ffc0000 [ 302.663685][ T29] audit: type=1326 audit(303.667:4504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.6.2790" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1953e159 code=0x7ffc0000 [ 302.663813][ T29] audit: type=1326 audit(303.667:4505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.6.2790" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1953e159 code=0x7ffc0000 [ 302.664004][ T29] audit: type=1326 audit(303.667:4506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.6.2790" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1953e159 code=0x7ffc0000 [ 302.664141][ T29] audit: type=1326 audit(303.667:4507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.6.2790" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faa1953e159 code=0x7ffc0000 [ 302.664330][ T29] audit: type=1326 audit(303.667:4508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11906 comm="syz.6.2790" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7faa1953e159 code=0x7ffc0000 [ 302.741183][T11908] loop6: detected capacity change from 0 to 512 [ 302.883913][T11908] EXT4-fs (loop6): 1 truncate cleaned up [ 302.884324][T11908] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 304.106727][T11932] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2784'. [ 305.203626][T11214] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 305.990793][T11954] syzkaller0: left promiscuous mode [ 305.990815][T11954] syzkaller0: left allmulticast mode [ 306.016993][T11958] syzkaller0: entered promiscuous mode [ 306.017012][T11958] syzkaller0: entered allmulticast mode [ 307.827116][ T29] kauditd_printk_skb: 134 callbacks suppressed [ 307.827135][ T29] audit: type=1400 audit(308.847:4643): avc: denied { read write } for pid=5139 comm="syz-executor" name="loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 307.827164][ T29] audit: type=1400 audit(308.847:4644): avc: denied { open } for pid=5139 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 307.827251][ T29] audit: type=1400 audit(308.847:4645): avc: denied { ioctl } for pid=5139 comm="syz-executor" path="/dev/loop0" dev="devtmpfs" ino=100 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 307.999225][T11969] loop6: detected capacity change from 0 to 512 [ 308.096195][ T29] audit: type=1400 audit(309.097:4646): avc: denied { mounton } for pid=11967 comm="syz.6.2807" path="/39/file0" dev="tmpfs" ino=223 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 308.296756][T11969] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 308.312821][ T29] audit: type=1400 audit(309.337:4647): avc: denied { mount } for pid=11967 comm="syz.6.2807" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 308.397305][ T29] audit: type=1400 audit(309.417:4648): avc: denied { create } for pid=11967 comm="syz.6.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 308.418356][ T29] audit: type=1400 audit(309.427:4649): avc: denied { setopt } for pid=11967 comm="syz.6.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 308.437754][ T29] audit: type=1400 audit(309.437:4650): avc: denied { open } for pid=11967 comm="syz.6.2807" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 308.448960][ T29] audit: type=1400 audit(309.467:4651): avc: denied { write } for pid=11967 comm="syz.6.2807" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 308.448992][ T29] audit: type=1400 audit(309.467:4652): avc: denied { add_name } for pid=11967 comm="syz.6.2807" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 308.570902][T11214] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 308.686757][T11987] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 309.110713][T12005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2820'. [ 309.110736][T12005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2820'. [ 312.123090][T12030] loop0: detected capacity change from 0 to 8192 [ 312.590392][T12039] loop5: detected capacity change from 0 to 4096 [ 312.612043][T12039] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 312.831456][ T29] kauditd_printk_skb: 243 callbacks suppressed [ 312.831473][ T29] audit: type=1326 audit(313.857:4896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12029 comm="syz.0.2827" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f4e70e7e159 code=0x7ffc0000 [ 313.005559][ T29] audit: type=1400 audit(314.027:4897): avc: denied { create } for pid=12042 comm="syz.4.2831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 313.021629][ T29] audit: type=1400 audit(314.047:4898): avc: denied { listen } for pid=12042 comm="syz.4.2831" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 313.035276][ T29] audit: type=1400 audit(314.047:4899): avc: denied { accept } for pid=12042 comm="syz.4.2831" lport=58511 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 313.186741][ T29] audit: type=1326 audit(314.207:4900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.0.2832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70e7e159 code=0x7ffc0000 [ 313.187492][ T29] audit: type=1326 audit(314.207:4901): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.0.2832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70e7e159 code=0x7ffc0000 [ 313.187724][ T29] audit: type=1326 audit(314.207:4902): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.0.2832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70e7e159 code=0x7ffc0000 [ 313.190074][ T29] audit: type=1326 audit(314.217:4903): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.0.2832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f4e70e7e159 code=0x7ffc0000 [ 313.190430][ T29] audit: type=1326 audit(314.217:4904): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.0.2832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70e7e159 code=0x7ffc0000 [ 313.191124][ T29] audit: type=1326 audit(314.217:4905): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12044 comm="syz.0.2832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70e7e159 code=0x7ffc0000 [ 313.559454][ T4530] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.060844][T12079] FAULT_INJECTION: forcing a failure. [ 315.060844][T12079] name failslab, interval 1, probability 0, space 0, times 0 [ 315.060879][T12079] CPU: 1 UID: 0 PID: 12079 Comm: syz.5.2840 Not tainted syzkaller #0 PREEMPT(lazy) [ 315.060927][T12079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 315.060940][T12079] Call Trace: [ 315.060949][T12079] [ 315.060957][T12079] __dump_stack+0x1d/0x30 [ 315.060984][T12079] dump_stack_lvl+0x95/0xd0 [ 315.061009][T12079] dump_stack+0x15/0x1b [ 315.061098][T12079] should_fail_ex+0x262/0x280 [ 315.061126][T12079] ? sctp_auth_init+0x151/0x280 [ 315.061156][T12079] should_failslab+0x8c/0xb0 [ 315.061197][T12079] __kmalloc_cache_noprof+0x7a/0x400 [ 315.061292][T12079] ? sctp_auth_init+0x151/0x280 [ 315.061336][T12079] sctp_auth_init+0x151/0x280 [ 315.061367][T12079] sctp_setsockopt_auth_supported+0x221/0x300 [ 315.061397][T12079] sctp_setsockopt+0x535/0xea0 [ 315.061440][T12079] sock_common_setsockopt+0x69/0x80 [ 315.061472][T12079] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 315.061543][T12079] __sys_setsockopt+0x184/0x200 [ 315.061579][T12079] __x64_sys_setsockopt+0x64/0x80 [ 315.061685][T12079] x64_sys_call+0x248f/0x2550 [ 315.061767][T12079] do_syscall_64+0x112/0x360 [ 315.061804][T12079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.061830][T12079] RIP: 0033:0x7fc52435e159 [ 315.061849][T12079] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.061921][T12079] RSP: 002b:00007fc522db7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 315.061945][T12079] RAX: ffffffffffffffda RBX: 00007fc5245e5fa0 RCX: 00007fc52435e159 [ 315.061994][T12079] RDX: 0000000000000081 RSI: 0000000000000084 RDI: 0000000000000004 [ 315.062009][T12079] RBP: 00007fc5243f503b R08: 0000000000000008 R09: 0000000000000000 [ 315.062025][T12079] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.062040][T12079] R13: 00007fc5245e6038 R14: 00007fc5245e5fa0 R15: 00007fff66705a78 [ 315.062063][T12079] [ 315.800989][T12087] loop5: detected capacity change from 0 to 512 [ 315.813878][T12087] EXT4-fs: Ignoring removed nobh option [ 315.831552][T12087] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 315.832523][T12087] EXT4-fs error (device loop5): ext4_clear_blocks:876: inode #13: comm syz.5.2841: attempt to clear invalid blocks 1 len 1 [ 315.832752][T12087] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 315.833281][T12087] EXT4-fs (loop5): Remounting filesystem read-only [ 315.833889][T12087] EXT4-fs (loop5): 1 truncate cleaned up [ 315.835356][T12087] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 316.519657][ T4530] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 316.641579][T12099] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2845'. [ 317.536071][T12117] loop0: detected capacity change from 0 to 512 [ 317.559852][T12117] ext4: Unknown parameter 'noinit_itable"errors' [ 317.987040][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 317.987057][ T29] audit: type=1326 audit(319.007:5130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12128 comm="syz.4.2855" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c829e159 code=0x7ffc0000 [ 317.987487][ T29] audit: type=1326 audit(319.007:5131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12128 comm="syz.4.2855" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c829e159 code=0x7ffc0000 [ 317.987559][ T29] audit: type=1326 audit(319.007:5132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12128 comm="syz.4.2855" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c829e159 code=0x7ffc0000 [ 318.021246][ T29] audit: type=1400 audit(319.017:5133): avc: denied { create } for pid=12135 comm="syz.0.2858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 318.071761][ T29] audit: type=1326 audit(319.077:5134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12128 comm="syz.4.2855" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f16c825e98e code=0x7ffc0000 [ 318.071851][ T29] audit: type=1326 audit(319.077:5135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12128 comm="syz.4.2855" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f16c825e98e code=0x7ffc0000 [ 318.071878][ T29] audit: type=1326 audit(319.077:5136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12128 comm="syz.4.2855" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f16c825e98e code=0x7ffc0000 [ 318.071905][ T29] audit: type=1326 audit(319.077:5137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12128 comm="syz.4.2855" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f16c825e98e code=0x7ffc0000 [ 318.072010][ T29] audit: type=1326 audit(319.077:5138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12128 comm="syz.4.2855" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f16c825e98e code=0x7ffc0000 [ 318.072036][ T29] audit: type=1326 audit(319.077:5139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12128 comm="syz.4.2855" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f16c825e98e code=0x7ffc0000 [ 319.111952][T12167] FAULT_INJECTION: forcing a failure. [ 319.111952][T12167] name failslab, interval 1, probability 0, space 0, times 0 [ 319.111983][T12167] CPU: 0 UID: 0 PID: 12167 Comm: syz.0.2862 Not tainted syzkaller #0 PREEMPT(lazy) [ 319.112061][T12167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 319.112075][T12167] Call Trace: [ 319.112083][T12167] [ 319.112092][T12167] __dump_stack+0x1d/0x30 [ 319.112128][T12167] dump_stack_lvl+0x95/0xd0 [ 319.112155][T12167] dump_stack+0x15/0x1b [ 319.112178][T12167] should_fail_ex+0x262/0x280 [ 319.112238][T12167] ? sctp_auth_init+0x151/0x280 [ 319.112268][T12167] should_failslab+0x8c/0xb0 [ 319.112300][T12167] __kmalloc_cache_noprof+0x7a/0x400 [ 319.112334][T12167] ? sctp_auth_init+0x151/0x280 [ 319.112411][T12167] sctp_auth_init+0x151/0x280 [ 319.112441][T12167] sctp_setsockopt_auth_supported+0x221/0x300 [ 319.112471][T12167] sctp_setsockopt+0x535/0xea0 [ 319.112582][T12167] sock_common_setsockopt+0x69/0x80 [ 319.112668][T12167] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 319.112699][T12167] __sys_setsockopt+0x184/0x200 [ 319.112775][T12167] __x64_sys_setsockopt+0x64/0x80 [ 319.112859][T12167] x64_sys_call+0x248f/0x2550 [ 319.112888][T12167] do_syscall_64+0x112/0x360 [ 319.112973][T12167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.112998][T12167] RIP: 0033:0x7f4e70e7e159 [ 319.113017][T12167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.113038][T12167] RSP: 002b:00007f4e6f8d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 319.113063][T12167] RAX: ffffffffffffffda RBX: 00007f4e71105fa0 RCX: 00007f4e70e7e159 [ 319.113080][T12167] RDX: 0000000000000081 RSI: 0000000000000084 RDI: 0000000000000004 [ 319.113093][T12167] RBP: 00007f4e70f1503b R08: 0000000000000008 R09: 0000000000000000 [ 319.113146][T12167] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.113162][T12167] R13: 00007f4e71106038 R14: 00007f4e71105fa0 R15: 00007ffe0b9fe4d8 [ 319.113184][T12167] [ 321.073484][T12205] netlink: 'syz.3.2868': attribute type 22 has an invalid length. [ 321.073505][T12205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2868'. [ 322.159696][T12205] netlink: 'syz.3.2868': attribute type 22 has an invalid length. [ 322.159747][T12205] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2868'. [ 323.709489][T12241] loop5: detected capacity change from 0 to 512 [ 324.796633][T12243] loop0: detected capacity change from 0 to 512 [ 325.165780][T12243] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 325.205396][T12243] EXT4-fs (loop0): orphan cleanup on readonly fs [ 325.225844][T12243] EXT4-fs error (device loop0): ext4_orphan_get:1429: comm syz.0.2883: bad orphan inode 15 [ 325.227981][T12243] loop0: lost filesystem error report for type 5 error -117 [ 325.237933][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 325.238914][ C0] EXT4-fs (loop0): initial error at time 326: ext4_orphan_get:1429 [ 325.240002][ C0] EXT4-fs (loop0): last error at time 326: ext4_orphan_get:1429 [ 325.304683][T12243] ext4_test_bit(bit=14, block=5) = 0 [ 325.433549][T12243] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 326.526331][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 326.526349][ T29] audit: type=1400 audit(327.547:5229): avc: denied { mounton } for pid=12256 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 326.567085][T12243] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 326.579263][T12259] tmpfs: Bad value for 'mpol' [ 326.582403][ T29] audit: type=1400 audit(327.607:5230): avc: denied { mounton } for pid=12258 comm="syz.5.2888" path="/syzcgroup/unified/syz5" dev="cgroup2" ino=146 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 326.733437][ T6256] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.736036][ T5139] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.797094][ T6256] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.845566][ T29] audit: type=1400 audit(327.867:5231): avc: denied { write } for pid=12265 comm="syz.5.2890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 326.845597][ T29] audit: type=1400 audit(327.867:5232): avc: denied { connect } for pid=12265 comm="syz.5.2890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 326.845625][ T29] audit: type=1400 audit(327.867:5233): avc: denied { name_connect } for pid=12265 comm="syz.5.2890" dest=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 326.934735][ T6256] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.282100][T12280] loop5: detected capacity change from 0 to 512 [ 327.287867][T12280] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 327.469767][ T6256] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.495794][T12280] EXT4-fs (loop5): 1 truncate cleaned up [ 327.496479][T12280] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.520012][T12280] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=12280 comm=syz.5.2890 [ 327.600880][ T6256] bridge_slave_1: left allmulticast mode [ 327.600903][ T6256] bridge_slave_1: left promiscuous mode [ 327.601121][ T6256] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.617260][ T6256] bridge_slave_0: left allmulticast mode [ 327.617281][ T6256] bridge_slave_0: left promiscuous mode [ 327.617418][ T6256] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.812001][ T6256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.816478][ T6256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 327.820651][ T6256] bond0 (unregistering): Released all slaves [ 327.892920][ T6256] hsr_slave_0: left promiscuous mode [ 327.897601][ T6256] hsr_slave_1: left promiscuous mode [ 327.898221][ T6256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 327.898290][ T6256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 327.903914][ T6256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 327.903976][ T6256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 327.909957][ T4530] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 327.917678][ T6256] veth1_macvtap: left promiscuous mode [ 327.917703][ T6256] veth0_macvtap: left promiscuous mode [ 327.917759][ T6256] veth1_vlan: left promiscuous mode [ 327.918001][ T6256] veth0_vlan: left promiscuous mode [ 328.109139][ T6256] team0 (unregistering): Port device team_slave_1 removed [ 328.113551][ T6256] team0 (unregistering): Port device team_slave_0 removed [ 328.284884][ T29] audit: type=1326 audit(329.307:5234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12310 comm="syz.0.2898" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70e7e159 code=0x7ffc0000 [ 328.306373][T12256] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.306406][T12256] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.306537][T12256] bridge_slave_0: entered allmulticast mode [ 328.307068][T12256] bridge_slave_0: entered promiscuous mode [ 328.309068][T12256] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.309099][T12256] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.309201][T12256] bridge_slave_1: entered allmulticast mode [ 328.309672][T12256] bridge_slave_1: entered promiscuous mode [ 328.319597][ T29] audit: type=1326 audit(329.347:5235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12310 comm="syz.0.2898" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70e7e159 code=0x7ffc0000 [ 328.319733][ T29] audit: type=1326 audit(329.347:5236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12310 comm="syz.0.2898" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70e7e159 code=0x7ffc0000 [ 328.320144][ T29] audit: type=1326 audit(329.347:5237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12310 comm="syz.0.2898" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e70e7e159 code=0x7ffc0000 [ 328.320193][ T29] audit: type=1326 audit(329.347:5238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12310 comm="syz.0.2898" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f4e70e7e159 code=0x7ffc0000 [ 328.372824][T12311] loop0: detected capacity change from 0 to 512 [ 328.404122][T12256] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.421388][T12256] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.520415][T12256] team0: Port device team_slave_0 added [ 328.521593][T12311] EXT4-fs (loop0): 1 truncate cleaned up [ 328.521988][T12311] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.530903][T12256] team0: Port device team_slave_1 added [ 328.561140][T12256] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.561157][T12256] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.561189][T12256] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.561821][T12256] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.561835][T12256] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 328.561867][T12256] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.683711][T12256] hsr_slave_0: entered promiscuous mode [ 328.684208][T12256] hsr_slave_1: entered promiscuous mode [ 328.684459][T12256] debugfs: 'hsr0' already exists in 'hsr' [ 328.684475][T12256] Cannot create hsr debugfs directory [ 328.688699][ T3021] 8021q: adding VLAN 0 to HW filter on device eth5 [ 328.774704][ T5139] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.963538][T12335] syzkaller0: Caught tx_queue_len zero misconfig [ 329.032457][T12256] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 331.896528][T12256] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 331.897235][T12256] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 331.914050][T12256] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 331.930286][ T3021] 8021q: adding VLAN 0 to HW filter on device eth6 [ 331.966382][T12256] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 331.980356][T12256] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 331.980860][T12256] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 331.985569][T12256] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 332.074872][ T29] kauditd_printk_skb: 421 callbacks suppressed [ 332.074891][ T29] audit: type=1400 audit(333.097:5660): avc: denied { mount } for pid=12375 comm="syz.5.2909" name="/" dev="autofs" ino=43024 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 332.161542][ T29] audit: type=1326 audit(333.187:5661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12389 comm="syz.3.2910" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0331e159 code=0x7ffc0000 [ 332.162647][ T29] audit: type=1326 audit(333.187:5662): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12389 comm="syz.3.2910" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0331e159 code=0x7ffc0000 [ 332.162711][ T29] audit: type=1326 audit(333.187:5663): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12389 comm="syz.3.2910" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0331e159 code=0x7ffc0000 [ 332.162957][ T29] audit: type=1326 audit(333.187:5664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12389 comm="syz.3.2910" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f9f0331e159 code=0x7ffc0000 [ 332.163104][ T29] audit: type=1326 audit(333.187:5665): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12389 comm="syz.3.2910" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0331e159 code=0x7ffc0000 [ 332.163429][ T29] audit: type=1326 audit(333.187:5666): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12389 comm="syz.3.2910" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0331e159 code=0x7ffc0000 [ 332.163539][ T29] audit: type=1326 audit(333.187:5667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12389 comm="syz.3.2910" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0331e159 code=0x7ffc0000 [ 332.164096][ T29] audit: type=1326 audit(333.187:5668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12389 comm="syz.3.2910" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f9f0331e159 code=0x7ffc0000 [ 332.164292][ T29] audit: type=1326 audit(333.187:5669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12389 comm="syz.3.2910" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9f0331e159 code=0x7ffc0000 [ 332.676110][ T3021] 8021q: adding VLAN 0 to HW filter on device eth7 [ 332.902139][T12256] 8021q: adding VLAN 0 to HW filter on device bond0 [ 332.929705][T12256] 8021q: adding VLAN 0 to HW filter on device team0 [ 332.972805][T12256] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 332.972847][T12256] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 333.119736][ T6239] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.119821][ T6239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 333.126100][ T6239] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.126134][ T6239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 333.215354][T12413] loop0: detected capacity change from 0 to 4096 [ 333.306132][T12413] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 333.604874][T12256] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.757196][T12256] veth0_vlan: entered promiscuous mode [ 333.765574][T12256] veth1_vlan: entered promiscuous mode [ 333.788789][T12256] veth0_macvtap: entered promiscuous mode [ 333.790861][T12256] veth1_macvtap: entered promiscuous mode [ 333.796883][T12256] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.821738][T12256] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.854745][ T5139] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 333.917918][ T6243] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.918025][ T6243] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.918062][ T6243] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.918114][ T6243] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 334.094808][T12455] loop7: detected capacity change from 0 to 512 [ 334.193957][T12455] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 334.321847][T12469] loop0: detected capacity change from 0 to 164 [ 334.423001][ T5139] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 334.454956][ T5139] ISOFS: unable to read i-node block [ 334.455155][ T5139] ISOFS: unable to read i-node block [ 334.474320][ T3021] 8021q: adding VLAN 0 to HW filter on device eth8 [ 334.521079][T12256] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 335.440131][T12486] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.440163][T12486] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.440268][T12486] bridge_slave_0: entered allmulticast mode [ 335.440945][T12486] bridge_slave_0: entered promiscuous mode [ 335.442103][T12486] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.442135][T12486] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.442255][T12486] bridge_slave_1: entered allmulticast mode [ 335.442618][T12486] bridge_slave_1: entered promiscuous mode [ 335.455045][T12486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.456073][T12486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.466015][T12486] team0: Port device team_slave_0 added [ 335.466997][T12486] team0: Port device team_slave_1 added [ 335.481661][T12486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.481674][T12486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.481801][T12486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.482400][T12486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.482413][T12486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 335.482441][T12486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.506092][T12486] hsr_slave_0: entered promiscuous mode [ 335.506605][T12486] hsr_slave_1: entered promiscuous mode [ 335.506920][T12486] debugfs: 'hsr0' already exists in 'hsr' [ 335.506936][T12486] Cannot create hsr debugfs directory [ 335.750528][T12486] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 335.758371][T12486] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 335.760899][T12486] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 335.801210][T12486] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 335.805645][T12486] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 335.815090][T12486] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 335.816014][T12486] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 335.835040][T12486] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 335.888156][T12486] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.888193][T12486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 335.888379][T12486] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.888418][T12486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.001596][T12486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 336.009167][ T6239] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.016641][ T6239] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.083278][T12486] 8021q: adding VLAN 0 to HW filter on device team0 [ 336.091226][ T6239] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.091261][ T6239] bridge0: port 1(bridge_slave_0) entered forwarding state [ 336.094923][ T6271] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.095041][ T6271] bridge0: port 2(bridge_slave_1) entered forwarding state [ 336.225735][T12542] loop7: detected capacity change from 0 to 256 [ 336.369118][T12486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 337.003653][T12486] veth0_vlan: entered promiscuous mode [ 337.023561][T12486] veth1_vlan: entered promiscuous mode [ 337.066705][T12486] veth0_macvtap: entered promiscuous mode [ 337.076781][T12486] veth1_macvtap: entered promiscuous mode [ 337.088888][ T29] kauditd_printk_skb: 314 callbacks suppressed [ 337.088945][ T29] audit: type=1400 audit(338.117:5984): avc: denied { create } for pid=12587 comm="syz.7.2945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 337.105372][ T29] audit: type=1400 audit(338.127:5985): avc: denied { setopt } for pid=12587 comm="syz.7.2945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 337.107376][ T29] audit: type=1400 audit(338.127:5986): avc: denied { bind } for pid=12587 comm="syz.7.2945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 337.107409][ T29] audit: type=1400 audit(338.127:5987): avc: denied { name_bind } for pid=12587 comm="syz.7.2945" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 337.107505][ T29] audit: type=1400 audit(338.127:5988): avc: denied { node_bind } for pid=12587 comm="syz.7.2945" saddr=172.20.20.13 src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 337.119349][T12486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.125945][T12486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.158792][ T6243] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.158832][ T6243] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.158879][ T6243] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.158913][ T6243] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.309244][ T29] audit: type=1400 audit(338.337:5989): avc: denied { ioctl } for pid=12591 comm="syz.4.2947" path="socket:[44133]" dev="sockfs" ino=44133 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 337.340090][ T29] audit: type=1400 audit(338.367:5990): avc: denied { watch watch_reads } for pid=12552 comm="syz.5.2937" path="/496" dev="tmpfs" ino=2655 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 337.468276][ T29] audit: type=1400 audit(338.497:5991): avc: denied { getopt } for pid=12605 comm="syz.3.2949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 338.024602][ T29] audit: type=1400 audit(339.047:5992): avc: denied { write } for pid=12621 comm="syz.4.2953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 338.260843][T12628] FAULT_INJECTION: forcing a failure. [ 338.260843][T12628] name failslab, interval 1, probability 0, space 0, times 0 [ 338.260936][T12628] CPU: 1 UID: 0 PID: 12628 Comm: syz.8.2955 Not tainted syzkaller #0 PREEMPT(lazy) [ 338.260971][T12628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 338.260987][T12628] Call Trace: [ 338.260996][T12628] [ 338.261064][T12628] __dump_stack+0x1d/0x30 [ 338.261094][T12628] dump_stack_lvl+0x95/0xd0 [ 338.261119][T12628] dump_stack+0x15/0x1b [ 338.261143][T12628] should_fail_ex+0x262/0x280 [ 338.261173][T12628] ? bpf_int_jit_compile+0x107/0xdb0 [ 338.261275][T12628] should_failslab+0x8c/0xb0 [ 338.261350][T12628] __kmalloc_cache_noprof+0x7a/0x400 [ 338.261416][T12628] ? bpf_int_jit_compile+0x107/0xdb0 [ 338.261522][T12628] bpf_int_jit_compile+0x107/0xdb0 [ 338.261565][T12628] __bpf_prog_select_runtime+0x461/0x750 [ 338.261602][T12628] bpf_prog_select_runtime+0x1f/0x30 [ 338.261674][T12628] bpf_prepare_filter+0xbe3/0xc40 [ 338.261697][T12628] ? __pfx_seccomp_check_filter+0x10/0x10 [ 338.261737][T12628] bpf_prog_create_from_user+0x1e3/0x260 [ 338.261760][T12628] ? __pfx_seccomp_check_filter+0x10/0x10 [ 338.261860][T12628] do_seccomp+0x5ef/0xa40 [ 338.261893][T12628] ? restore_fpregs_from_fpstate+0x61/0x110 [ 338.261923][T12628] __x64_sys_seccomp+0x40/0x50 [ 338.261999][T12628] x64_sys_call+0x3f0/0x2550 [ 338.262027][T12628] do_syscall_64+0x112/0x360 [ 338.262124][T12628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.262198][T12628] RIP: 0033:0x7fe76433e159 [ 338.262215][T12628] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 338.262233][T12628] RSP: 002b:00007fe762d97028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 338.262283][T12628] RAX: ffffffffffffffda RBX: 00007fe7645c5fa0 RCX: 00007fe76433e159 [ 338.262302][T12628] RDX: 0000200000000240 RSI: 0000000000000007 RDI: 0000000000000001 [ 338.262316][T12628] RBP: 00007fe7643d503b R08: 0000000000000000 R09: 0000000000000000 [ 338.262393][T12628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.262408][T12628] R13: 00007fe7645c6038 R14: 00007fe7645c5fa0 R15: 00007ffcf2686d08 [ 338.262438][T12628] [ 338.267867][ T29] audit: type=1326 audit(339.287:5993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12627 comm="syz.8.2955" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe76433e159 code=0x7ffc0000 [ 339.004567][T12651] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2961'. [ 339.668003][T12651] bond_slave_0: entered promiscuous mode [ 339.668026][T12651] bond_slave_0: entered allmulticast mode [ 340.035529][ T6271] IPVS: starting estimator thread 0... [ 340.118164][T12672] IPVS: using max 2208 ests per chain, 110400 per kthread [ 340.135863][T12675] netlink: 'syz.3.2969': attribute type 4 has an invalid length. [ 340.135882][T12675] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2969'. [ 340.158507][T12673] 8021q: adding VLAN 0 to HW filter on device bond3 [ 340.162697][T12675] .`: renamed from bond0 [ 340.809646][T12716] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2977'. [ 340.895118][T12723] bond6: (slave bridge4): Enslaving as an active interface with an up link [ 340.977631][T12716] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2977'. [ 340.981968][T12716] bond6: entered promiscuous mode [ 340.981987][T12716] bridge4: entered promiscuous mode [ 340.982138][T12716] bond6: entered allmulticast mode [ 340.982154][T12716] bridge4: entered allmulticast mode [ 340.982337][T12716] 8021q: adding VLAN 0 to HW filter on device bond6 [ 341.128869][ T37] page_pool_release_retry() stalled pool shutdown: id 77, 1 inflight 60 sec [ 341.159149][T12732] loop8: detected capacity change from 0 to 4096 [ 341.168180][T12732] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 341.769727][T12486] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 342.263387][T12790] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2992'. [ 342.283387][T12780] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 342.293602][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 342.293648][ T29] audit: type=1400 audit(343.317:6075): avc: denied { write } for pid=12786 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 342.395150][T12780] bond7 (unregistering): Released all slaves [ 342.473476][ T29] audit: type=1400 audit(343.497:6076): avc: denied { mount } for pid=12801 comm="syz.8.2996" name="/" dev="configfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 342.474498][ T29] audit: type=1400 audit(343.497:6077): avc: denied { search } for pid=12801 comm="syz.8.2996" name="/" dev="configfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 342.474620][ T29] audit: type=1400 audit(343.497:6078): avc: denied { search } for pid=12801 comm="syz.8.2996" name="usb_gadget" dev="configfs" ino=1239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 342.474648][ T29] audit: type=1400 audit(343.497:6079): avc: denied { write search } for pid=12801 comm="syz.8.2996" name="usb_gadget" dev="configfs" ino=1239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 342.474783][ T29] audit: type=1400 audit(343.497:6080): avc: denied { add_name } for pid=12801 comm="syz.8.2996" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 342.474808][ T29] audit: type=1400 audit(343.497:6081): avc: denied { create } for pid=12801 comm="syz.8.2996" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 342.475647][ T29] audit: type=1400 audit(343.497:6082): avc: denied { search } for pid=12801 comm="syz.8.2996" name="/" dev="configfs" ino=43 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 342.475754][ T29] audit: type=1400 audit(343.497:6083): avc: denied { search } for pid=12801 comm="syz.8.2996" name="usb_gadget" dev="configfs" ino=1239 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 342.475782][ T29] audit: type=1400 audit(343.497:6084): avc: denied { search } for pid=12801 comm="syz.8.2996" name="g1" dev="configfs" ino=44512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 342.793875][T12810] loop7: detected capacity change from 0 to 2048 [ 342.837153][T12810] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 342.878470][T12806] loop5: detected capacity change from 0 to 1764 [ 343.165671][T12808] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 343.165742][T12808] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 343.165837][T12808] EXT4-fs (loop7): This should not happen!! Data will be lost [ 343.165837][T12808] [ 343.165852][T12808] EXT4-fs (loop7): Total free blocks count 0 [ 343.165889][T12808] EXT4-fs (loop7): Free/Dirty block details [ 343.165918][T12808] EXT4-fs (loop7): free_blocks=4096 [ 343.165933][T12808] EXT4-fs (loop7): dirty_blocks=64 [ 343.165946][T12808] EXT4-fs (loop7): Block reservation details [ 343.166004][T12808] EXT4-fs (loop7): i_reserved_data_blocks=4 [ 343.304586][ T6243] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 343.798946][T12836] loop8: detected capacity change from 0 to 8192 [ 344.603732][T12846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3012'. [ 344.623949][T12845] netlink: 'syz.7.3011': attribute type 83 has an invalid length. [ 345.162796][T12862] loop8: detected capacity change from 0 to 256 [ 345.987269][T12850] batman_adv: batadv0: Adding interface: dummy0 [ 345.987288][T12850] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 345.987374][T12850] batman_adv: batadv0: Interface activated: dummy0 [ 346.220731][T12837] loop5: detected capacity change from 0 to 512 [ 346.478096][T12837] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 346.746096][T12862] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(10) [ 346.746124][T12862] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 346.746159][T12862] vhci_hcd vhci_hcd.0: Device attached [ 346.747168][T12863] vhci_hcd: connection closed [ 346.747480][ T6271] vhci_hcd vhci_hcd.8: stop threads [ 346.747522][ T6271] vhci_hcd vhci_hcd.8: release socket [ 346.747539][ T6271] vhci_hcd vhci_hcd.8: disconnect device [ 346.747611][ T6251] IPVS: starting estimator thread 0... [ 346.857923][T12868] IPVS: using max 2448 ests per chain, 122400 per kthread [ 347.181779][ T4530] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 347.632431][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 347.632448][ T29] audit: type=1400 audit(348.657:6105): avc: denied { create } for pid=12944 comm="syz.8.3024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 347.733498][T12947] bridge0: port 4(vxlan0) entered blocking state [ 347.733532][T12947] bridge0: port 4(vxlan0) entered disabled state [ 347.733636][T12947] vxlan0: entered allmulticast mode [ 347.734173][T12947] vxlan0: entered promiscuous mode [ 347.752903][T12931] loop7: detected capacity change from 0 to 1024 [ 347.758275][T12931] EXT4-fs: inline encryption not supported [ 347.758304][T12931] EXT4-fs: Ignoring removed bh option [ 347.824790][ T29] audit: type=1400 audit(348.847:6106): avc: denied { mount } for pid=12950 comm="syz.8.3028" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 347.888537][T12951] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3028'. [ 349.880409][ T29] audit: type=1400 audit(350.907:6107): avc: denied { unmount } for pid=12486 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 349.893607][T12931] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 349.945470][T12931] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 349.947253][ T29] audit: type=1326 audit(350.967:6108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12953 comm="syz.4.3029" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c829e159 code=0x7ffc0000 [ 349.947466][ T29] audit: type=1326 audit(350.967:6109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12953 comm="syz.4.3029" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c829e159 code=0x7ffc0000 [ 349.947565][ T29] audit: type=1326 audit(350.967:6110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12953 comm="syz.4.3029" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c829e159 code=0x7ffc0000 [ 350.039300][ T29] audit: type=1326 audit(351.067:6111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12953 comm="syz.4.3029" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c829e159 code=0x7ffc0000 [ 350.039838][ T29] audit: type=1326 audit(351.067:6112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12953 comm="syz.4.3029" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f16c829e159 code=0x7ffc0000 [ 350.040062][ T29] audit: type=1326 audit(351.067:6113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12953 comm="syz.4.3029" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c829e159 code=0x7ffc0000 [ 350.040183][ T29] audit: type=1326 audit(351.067:6114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12953 comm="syz.4.3029" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16c829e159 code=0x7ffc0000 [ 350.162521][T12964] loop8: detected capacity change from 0 to 512 [ 350.186881][T12964] EXT4-fs: Ignoring removed mblk_io_submit option [ 350.484407][T12964] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 350.612345][T12971] netlink: 'syz.5.3034': attribute type 4 has an invalid length. [ 350.644877][T12256] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 350.647278][T12486] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 351.219764][ T6271] IPVS: starting estimator thread 0... [ 351.311220][T13012] IPVS: using max 2256 ests per chain, 112800 per kthread [ 352.343323][T13038] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3054'. [ 352.385028][T13024] syzkaller0: entered promiscuous mode [ 352.385194][T13024] syzkaller0: entered allmulticast mode [ 352.466283][T13039] syzkaller0: entered promiscuous mode [ 352.466442][T13039] syzkaller0: entered allmulticast mode [ 352.551620][T13038] bond0: (slave bond_slave_0): Releasing backup interface [ 352.657876][ T29] kauditd_printk_skb: 225 callbacks suppressed [ 352.657900][ T29] audit: type=1400 audit(353.677:6340): avc: denied { allowed } for pid=13052 comm="syz.3.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 352.692998][ T29] audit: type=1400 audit(353.697:6341): avc: denied { prog_load } for pid=13052 comm="syz.3.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 352.693090][ T29] audit: type=1400 audit(353.697:6342): avc: denied { read write } for pid=13054 comm="syz.5.3061" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 352.693116][ T29] audit: type=1400 audit(353.697:6343): avc: denied { open } for pid=13052 comm="syz.3.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 352.693139][ T29] audit: type=1400 audit(353.697:6344): avc: denied { create } for pid=13052 comm="syz.3.3060" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=0 [ 352.737685][ T29] audit: type=1400 audit(353.737:6345): avc: denied { open } for pid=13054 comm="syz.5.3061" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 352.775883][ T29] audit: type=1400 audit(353.787:6346): avc: denied { name_bind } for pid=13054 comm="syz.5.3061" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=0 [ 352.816023][ T29] audit: type=1400 audit(353.817:6347): avc: denied { map_create } for pid=13056 comm="syz.3.3062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 352.816123][ T29] audit: type=1400 audit(353.817:6348): avc: denied { map_create } for pid=13056 comm="syz.3.3062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 352.816149][ T29] audit: type=1400 audit(353.817:6349): avc: denied { prog_load } for pid=13056 comm="syz.3.3062" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 353.066621][T13069] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3067'. [ 353.098357][T13069] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3067'. [ 354.031477][T13098] vlan1: entered promiscuous mode [ 354.031498][T13098] hsr0: entered promiscuous mode [ 354.034888][T13098] vlan1: entered allmulticast mode [ 354.034907][T13098] hsr0: entered allmulticast mode [ 354.034921][T13098] hsr_slave_0: entered allmulticast mode [ 354.035254][T13098] hsr_slave_1: entered allmulticast mode [ 354.183870][T13104] syzkaller0: entered promiscuous mode [ 354.183893][T13104] syzkaller0: entered allmulticast mode [ 354.208246][ T6251] IPVS: starting estimator thread 0... [ 354.213845][T13106] netlink: 1319 bytes leftover after parsing attributes in process `syz.8.3079'. [ 354.311194][T13107] IPVS: using max 2304 ests per chain, 115200 per kthread [ 355.755756][T13181] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3113'. [ 355.790636][T13181] bond1: entered promiscuous mode [ 355.790660][T13181] bond1: entered allmulticast mode [ 356.493759][T13202] TC_ACT_REPEAT abuse ? [ 357.769510][ T29] kauditd_printk_skb: 258 callbacks suppressed [ 357.769528][ T29] audit: type=1400 audit(614.792:6608): avc: denied { read write } for pid=4530 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 357.836917][T13255] netlink: 7 bytes leftover after parsing attributes in process `syz.3.3141'. [ 357.847601][ T29] audit: type=1400 audit(614.862:6609): avc: denied { open } for pid=13251 comm="syz.5.3140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=0 [ 357.847787][ T29] audit: type=1400 audit(614.862:6610): avc: denied { prog_load } for pid=13251 comm="syz.5.3140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 357.892030][ T29] audit: type=1400 audit(614.902:6611): avc: denied { read write } for pid=12256 comm="syz-executor" name="loop7" dev="devtmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 357.892641][ T29] audit: type=1400 audit(614.922:6612): avc: denied { allowed } for pid=13251 comm="syz.5.3140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=0 [ 357.940794][ T29] audit: type=1400 audit(614.952:6613): avc: denied { create } for pid=13256 comm="syz.7.3142" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 357.965382][ T29] audit: type=1400 audit(614.982:6614): avc: denied { read write } for pid=4530 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 358.013304][ T29] audit: type=1400 audit(615.032:6615): avc: denied { create } for pid=13260 comm="syz.5.3143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 358.051562][ T29] audit: type=1400 audit(615.072:6616): avc: denied { read write } for pid=12486 comm="syz-executor" name="loop8" dev="devtmpfs" ino=108 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 358.086145][ T29] audit: type=1400 audit(615.112:6617): avc: denied { read write } for pid=13260 comm="syz.5.3143" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 358.381705][T13276] netlink: 'syz.3.3148': attribute type 12 has an invalid length. [ 358.506893][T13280] tap0: tun_chr_ioctl cmd 35111 [ 358.811607][T13295] netlink: 'syz.8.3157': attribute type 1 has an invalid length. [ 358.874384][T13295] 8021q: adding VLAN 0 to HW filter on device bond1 [ 358.936716][T13295] vlan2: entered allmulticast mode [ 358.936738][T13295] bond1: entered allmulticast mode [ 358.990669][T13295] bond1: (slave geneve2): making interface the new active one [ 358.990692][T13295] geneve2: entered allmulticast mode [ 359.018301][T13295] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 360.541390][T13337] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3170'. [ 360.601694][T13337] veth3: entered allmulticast mode [ 360.690365][T13341] ip6gre1: entered promiscuous mode [ 360.690452][T13341] ip6gre1: entered allmulticast mode [ 360.693988][ T6256] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 360.694076][ T6256] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 360.695024][T13341] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 360.718870][ T3407] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 361.204188][T13360] syzkaller0: left promiscuous mode [ 361.204354][T13360] syzkaller0: left allmulticast mode [ 361.607965][ T3407] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 361.608136][ T3407] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 362.223345][T13394] netlink: 80 bytes leftover after parsing attributes in process `syz.8.3196'. [ 362.344420][T13404] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 362.418314][T13409] xt_CT: You must specify a L4 protocol and not use inversions on it [ 362.520322][T13417] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3206'. [ 362.778775][ T29] kauditd_printk_skb: 9651 callbacks suppressed [ 362.778792][ T29] audit: type=1400 audit(619.802:16269): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 362.778815][ T29] audit: type=1400 audit(619.802:16270): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 362.778874][ T29] audit: type=1400 audit(619.802:16271): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 362.778895][ T29] audit: type=1400 audit(619.802:16272): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 362.780442][ T29] audit: type=1400 audit(619.802:16273): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 362.780472][ T29] audit: type=1400 audit(619.802:16274): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 362.780498][ T29] audit: type=1400 audit(619.802:16275): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 362.780887][ T29] audit: type=1400 audit(619.802:16276): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 362.780915][ T29] audit: type=1400 audit(619.802:16277): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 362.780939][ T29] audit: type=1400 audit(619.802:16278): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 363.570091][T13456] syzkaller0: entered promiscuous mode [ 363.570114][T13456] syzkaller0: entered allmulticast mode [ 364.407932][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 365.585128][T13519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3245'. [ 365.730409][T13527] bridge0: port 1(team0) entered disabled state [ 365.760011][T13527] tipc: Resetting bearer [ 365.762752][T13527] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 365.765491][T13527] team0: Device xfrm0 failed to enter team mode [ 365.765511][T13527] team0: Device xfrm0 failed to enter team mode [ 366.373898][T13551] netlink: 'syz.3.3259': attribute type 13 has an invalid length. [ 366.376299][T13542] tipc: Resetting bearer [ 366.376843][T13542] tipc: Resetting bearer [ 366.402516][T13546] netlink: 'syz.4.3256': attribute type 8 has an invalid length. [ 366.402656][T13546] sch_fq: defrate 0 ignored. [ 367.125627][T13582] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3272'. [ 367.230746][T13586] ip_tables: iptables: counters copy to user failed while replacing table [ 367.234731][T13582] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3272'. [ 367.585693][T13584] syzkaller0: entered promiscuous mode [ 367.585716][T13584] syzkaller0: entered allmulticast mode [ 367.789148][ T29] kauditd_printk_skb: 13051 callbacks suppressed [ 367.789167][ T29] audit: type=1400 audit(624.802:29318): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 367.789193][ T29] audit: type=1400 audit(624.802:29319): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 367.789219][ T29] audit: type=1400 audit(624.802:29320): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 367.789241][ T29] audit: type=1400 audit(624.802:29321): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 367.789382][ T29] audit: type=1400 audit(624.802:29322): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 367.789408][ T29] audit: type=1400 audit(624.812:29323): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 367.789433][ T29] audit: type=1400 audit(624.812:29324): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 367.789458][ T29] audit: type=1400 audit(624.812:29325): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 367.789724][ T29] audit: type=1400 audit(624.812:29326): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 367.790828][ T29] audit: type=1400 audit(624.812:29327): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 368.719460][T13634] netlink: 'syz.8.3292': attribute type 2 has an invalid length. [ 368.930044][T13635] netlink: 7 bytes leftover after parsing attributes in process `syz.4.3289'. [ 369.158881][T13668] syzkaller0: entered promiscuous mode [ 369.158902][T13668] syzkaller0: entered allmulticast mode [ 369.236215][T13675] netlink: 14 bytes leftover after parsing attributes in process `syz.8.3309'. [ 371.687932][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 372.279913][T13771] netlink: 'syz.3.3345': attribute type 1 has an invalid length. [ 372.444156][T13771] bridge0: entered promiscuous mode [ 372.474290][T13771] bond0: (slave bridge0): making interface the new active one [ 372.486587][T13771] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 372.601222][T13789] netlink: 'syz.4.3353': attribute type 1 has an invalid length. [ 372.617258][T13787] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1019 sclass=netlink_route_socket pid=13787 comm=syz.3.3352 [ 372.639858][T13789] 8021q: adding VLAN 0 to HW filter on device bond6 [ 372.697457][T13789] bond6: (slave erspan0): making interface the new active one [ 372.719817][T13789] bond6: (slave erspan0): Enslaving as an active interface with an up link [ 372.797860][ T29] kauditd_printk_skb: 3178 callbacks suppressed [ 372.797877][ T29] audit: type=1400 audit(629.812:32506): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 372.797904][ T29] audit: type=1400 audit(629.812:32507): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 372.797931][ T29] audit: type=1400 audit(629.812:32508): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 372.798011][ T29] audit: type=1400 audit(629.812:32509): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 372.800685][ T29] audit: type=1400 audit(629.822:32510): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 372.800710][ T29] audit: type=1400 audit(629.822:32511): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 372.802128][ T29] audit: type=1400 audit(629.822:32512): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 372.804970][ T29] audit: type=1400 audit(629.822:32513): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 372.805005][ T29] audit: type=1400 audit(629.822:32514): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 372.805032][ T29] audit: type=1400 audit(629.822:32515): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 373.152796][T13804] syzkaller0: mtu less than device minimum [ 373.459366][T13820] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3368'. [ 373.459478][T13820] netlink: 'syz.8.3368': attribute type 7 has an invalid length. [ 373.459493][T13820] netlink: 'syz.8.3368': attribute type 8 has an invalid length. [ 373.459504][T13820] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3368'. [ 373.466516][T13820] ip6gretap0: entered promiscuous mode [ 373.467276][T13820] syz_tun: entered promiscuous mode [ 373.467736][T13820] gretap0: entered promiscuous mode [ 373.957526][T13834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.966118][T13834] tipc: Resetting bearer [ 373.974446][T13834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.034411][T13834] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 374.034437][T13834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 374.062596][T13834] veth1_macvtap: left promiscuous mode [ 374.063230][T13834] veth0_macvtap: left promiscuous mode [ 374.063893][T13834] veth0_macvtap: entered promiscuous mode [ 374.064595][T13834] veth1_macvtap: entered promiscuous mode [ 374.096501][T13834] batman_adv: batadv0: Interface activated: veth3 [ 374.104987][T13834] 8021q: adding VLAN 0 to HW filter on device bond1 [ 374.116661][T13834] 8021q: adding VLAN 0 to HW filter on device bond2 [ 374.130557][T13834] 8021q: adding VLAN 0 to HW filter on device eth0 [ 374.135552][T13834] 8021q: adding VLAN 0 to HW filter on device eth1 [ 374.137751][T13834] 8021q: adding VLAN 0 to HW filter on device eth2 [ 374.161348][T13834] 8021q: adding VLAN 0 to HW filter on device eth3 [ 374.163241][T13834] 8021q: adding VLAN 0 to HW filter on device bond3 [ 374.164728][T13834] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 374.166536][T13834] 8021q: adding VLAN 0 to HW filter on device bond4 [ 374.245048][T13844] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 0, id = 0 [ 374.259480][ T3406] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 374.777680][T13842] syzkaller0: entered promiscuous mode [ 375.128403][ T3406] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 375.181384][T13869] ip_tables: iptables: counters copy to user failed while replacing table [ 375.183720][T13866] bridge0: port 3(team0) entered disabled state [ 375.183865][T13866] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.183951][T13866] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.232070][T13866] batman_adv: batadv0: Interface deactivated: dummy0 [ 375.317886][ T6257] netdevsim netdevsim5 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 375.318095][ T6257] bond5: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 375.318161][ T6257] bond5: (slave veth9): making interface the new active one [ 375.319819][ T6257] bond5: active interface up! [ 375.345710][ T6257] netdevsim netdevsim5 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 375.357871][ T6257] bond4: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 375.438742][ T6237] netdevsim netdevsim5 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 375.439549][ T6237] netdevsim netdevsim5 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 376.924759][T13932] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 377.092648][T13937] bond7: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 377.118332][T13937] bond7 (unregistering): Released all slaves [ 377.306360][T13944] tipc: Resetting bearer [ 377.337174][T13944] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 377.809436][ T29] kauditd_printk_skb: 15636 callbacks suppressed [ 377.809454][ T29] audit: type=1400 audit(634.832:48125): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 377.809670][ T29] audit: type=1400 audit(634.832:48126): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 377.809848][ T29] audit: type=1400 audit(634.832:48127): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 377.810061][ T29] audit: type=1400 audit(634.832:48128): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 377.810158][ T29] audit: type=1400 audit(634.832:48129): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 377.810476][ T29] audit: type=1400 audit(634.832:48130): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 377.810689][ T29] audit: type=1400 audit(634.832:48131): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 377.810837][ T29] audit: type=1400 audit(634.832:48132): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 377.812418][ T29] audit: type=1400 audit(634.832:48133): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 377.812591][ T29] audit: type=1400 audit(634.832:48134): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 379.577023][T13980] syzkaller0: entered promiscuous mode [ 379.577046][T13980] syzkaller0: entered allmulticast mode [ 379.876609][T13987] netlink: 'syz.5.3431': attribute type 22 has an invalid length. [ 379.876630][T13987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3431'. [ 379.898761][T13987] netlink: 'syz.5.3431': attribute type 22 has an invalid length. [ 379.898781][T13987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3431'. [ 379.919168][ T6243] netdevsim netdevsim5 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.919342][ T6243] netdevsim netdevsim5 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.919375][ T6243] netdevsim netdevsim5 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 379.919407][ T6243] netdevsim netdevsim5 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.376699][T13997] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.3435'. [ 380.588741][T14004] netlink: 'syz.3.3436': attribute type 1 has an invalid length. [ 380.613186][T14001] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 380.667338][T14004] 8021q: adding VLAN 0 to HW filter on device bond11 [ 380.678577][T14004] bond10: (slave bond11): making interface the new active one [ 380.678854][T14004] bond10: (slave bond11): Enslaving as an active interface with an up link [ 380.708609][T14004] bond10: (slave gretap2): Enslaving as a backup interface with an up link [ 382.826549][ T29] kauditd_printk_skb: 5516 callbacks suppressed [ 382.826567][ T29] audit: type=1400 audit(639.822:53651): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 382.857669][ T29] audit: type=1400 audit(639.882:53652): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 382.878710][ T29] audit: type=1400 audit(639.902:53653): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 382.878866][ T29] audit: type=1400 audit(639.902:53654): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 382.879016][ T29] audit: type=1400 audit(639.902:53655): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 382.879190][ T29] audit: type=1400 audit(639.902:53656): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 382.879360][ T29] audit: type=1400 audit(639.902:53657): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 382.879504][ T29] audit: type=1400 audit(639.902:53658): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 382.881196][ T29] audit: type=1400 audit(639.902:53659): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 382.881293][ T29] audit: type=1400 audit(639.902:53660): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 385.328991][ T6237] batadv1: left promiscuous mode [ 385.734993][T14065] 8021q: adding VLAN 0 to HW filter on device bond1 [ 385.767870][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 385.800591][T14064] netlink: 48 bytes leftover after parsing attributes in process `syz.8.3458'. [ 386.173829][T14076] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.174075][T14076] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.230972][T14076] batman_adv: batadv0: Interface deactivated: dummy0 [ 386.317704][T14076] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.330913][T14076] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.369971][T14076] bond1: left promiscuous mode [ 386.369991][T14076] bond1: left allmulticast mode [ 386.378452][ T6243] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.378562][ T6243] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.378596][ T6243] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.378679][ T6243] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.315580][T14124] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 387.801316][ T6271] bond0 (unregistering): Released all slaves [ 387.803753][ T6271] bond1 (unregistering): (slave veth3): Releasing active interface [ 387.804723][ T6271] bond1 (unregistering): Released all slaves [ 387.833873][ T29] kauditd_printk_skb: 3951 callbacks suppressed [ 387.833904][ T29] audit: type=1326 audit(644.862:57612): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14110 comm="syz.7.3475" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa10d33e98e code=0x7ffc0000 [ 387.833975][ T29] audit: type=1400 audit(644.862:57613): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 387.834442][ T29] audit: type=1400 audit(644.862:57614): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 387.836430][ T29] audit: type=1400 audit(644.862:57615): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 387.836776][ T29] audit: type=1326 audit(644.862:57616): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14110 comm="syz.7.3475" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa10d33e98e code=0x7ffc0000 [ 387.839147][ T29] audit: type=1400 audit(644.862:57617): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 387.842879][ T29] audit: type=1326 audit(644.862:57618): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14110 comm="syz.7.3475" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fa10d33e98e code=0x7ffc0000 [ 387.843139][ T29] audit: type=1400 audit(644.862:57619): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 387.843625][ T29] audit: type=1400 audit(644.862:57620): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 387.845117][ T29] audit: type=1400 audit(644.862:57621): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 388.120997][ T6271] hsr_slave_0: left promiscuous mode [ 388.125503][ T6271] hsr_slave_1: left promiscuous mode [ 388.343490][ T6271] veth1_macvtap: left allmulticast mode [ 388.343634][ T6271] veth1_macvtap: left promiscuous mode [ 388.343659][ T6271] veth0_macvtap: left promiscuous mode [ 388.343701][ T6271] veth1_vlan: left promiscuous mode [ 388.343746][ T6271] veth0_vlan: left promiscuous mode [ 388.802370][T14128] lo: left promiscuous mode [ 388.851285][T14128] bridge_slave_1: left allmulticast mode [ 388.852207][T14128] macvlan2: left promiscuous mode [ 388.852235][T14128] macvlan2: left allmulticast mode [ 388.853065][T14128] bond4: left promiscuous mode [ 388.853083][T14128] bridge2: left promiscuous mode [ 388.886059][T14128] bond7: left promiscuous mode [ 388.886080][T14128] veth5: left promiscuous mode [ 388.887420][T14128] geneve4: left promiscuous mode [ 388.887437][T14128] geneve4: left allmulticast mode [ 388.909241][T14128] vlan1: left promiscuous mode [ 388.909303][T14128] hsr0: left promiscuous mode [ 388.909359][T14128] vlan1: left allmulticast mode [ 388.909375][T14128] hsr0: left allmulticast mode [ 388.909422][T14128] hsr_slave_0: left allmulticast mode [ 388.909438][T14128] hsr_slave_1: left allmulticast mode [ 388.909925][T14128] bridge0: left promiscuous mode [ 388.991649][ T6251] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.991713][ T6251] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.991759][ T6251] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.991790][ T6251] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.991824][ T6251] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.991909][ T6251] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.992056][ T6251] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 388.992087][ T6251] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.032160][T14144] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3495'. [ 389.190668][T14142] bond2: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 389.405464][T14142] bond2 (unregistering): Released all slaves [ 389.540610][T14156] 8021q: adding VLAN 0 to HW filter on device .` [ 389.681998][T14156] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 389.682045][T14156] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 389.736051][T14156] veth1_macvtap: left promiscuous mode [ 389.736663][T14156] veth0_macvtap: left promiscuous mode [ 389.737365][T14156] veth0_macvtap: entered promiscuous mode [ 389.769607][T14156] veth1_macvtap: entered promiscuous mode [ 389.772179][T14156] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 389.773207][T14156] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 389.774300][T14156] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 389.775634][T14156] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 389.830233][T14156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 389.833203][T14156] 8021q: adding VLAN 0 to HW filter on device bond2 [ 389.834440][T14156] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 389.860120][T14156] 8021q: adding VLAN 0 to HW filter on device bond3 [ 389.861511][T14156] 8021q: adding VLAN 0 to HW filter on device bond4 [ 389.864722][T14156] 8021q: adding VLAN 0 to HW filter on device bond5 [ 389.867330][T14156] 8021q: adding VLAN 0 to HW filter on device bond6 [ 389.897582][T14156] 8021q: adding VLAN 0 to HW filter on device bond7 [ 389.981489][T14156] 8021q: adding VLAN 0 to HW filter on device bond9 [ 389.985010][T14156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.986245][T14156] 8021q: adding VLAN 0 to HW filter on device bond8 [ 389.995541][T14156] 8021q: adding VLAN 0 to HW filter on device bond10 [ 390.017226][T14156] 8021q: adding VLAN 0 to HW filter on device bond11 [ 390.104901][ T6251] ip6_tunnel: ÿ xmit: Local address not yet configured! [ 390.104990][ T6251] ip6_tunnel: ÿ xmit: Local address not yet configured! [ 390.107929][ T6251] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.108055][ T6251] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.108113][ T6251] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.108222][ T6251] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.108277][ T6251] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.108344][ T6251] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.108550][ T6251] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 390.108581][ T6251] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 390.134055][ T3415] ip6_tunnel: ÿ xmit: Local address not yet configured! [ 390.269445][ T3415] ip6_tunnel: ÿ xmit: Local address not yet configured! [ 390.426325][T14177] netlink: 'syz.7.3493': attribute type 1 has an invalid length. [ 390.608250][T14187] veth3: entered allmulticast mode [ 390.632347][T14187] bond2: (slave veth3): Enslaving as an active interface with a down link [ 390.719640][ T3407] ip6_tunnel: ÿ xmit: Local address not yet configured! [ 390.837482][T14198] bond12: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 390.849191][T14198] bond12 (unregistering): Released all slaves [ 392.124494][T14228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 392.149050][T14228] 8021q: adding VLAN 0 to HW filter on device team0 [ 392.168307][T14228] batman_adv: batadv0: Interface activated: dummy0 [ 392.186357][T14228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 392.365752][T14228] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 392.365779][T14228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 392.367253][T14228] veth1_macvtap: left promiscuous mode [ 392.367651][T14228] veth0_macvtap: left promiscuous mode [ 392.369446][T14244] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 392.423278][T14228] veth0_macvtap: entered promiscuous mode [ 392.423885][T14228] veth1_macvtap: entered promiscuous mode [ 392.426283][T14228] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 392.427370][T14228] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 392.475922][T14228] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 392.602313][T14228] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 392.732509][T14228] 8021q: adding VLAN 0 to HW filter on device bond1 [ 392.734098][T14228] 8021q: adding VLAN 0 to HW filter on device bond2 [ 392.737624][T14228] 8021q: adding VLAN 0 to HW filter on device bond3 [ 392.772123][T14228] 8021q: adding VLAN 0 to HW filter on device bond4 [ 392.787016][T14228] 8021q: adding VLAN 0 to HW filter on device bond5 [ 392.806234][T14228] bridge0: port 4(vxlan0) entered blocking state [ 392.806273][T14228] bridge0: port 4(vxlan0) entered forwarding state [ 392.823488][T14228] 8021q: adding VLAN 0 to HW filter on device bond6 [ 392.840979][ T29] kauditd_printk_skb: 8250 callbacks suppressed [ 392.841137][ T29] audit: type=1400 audit(649.862:65674): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 392.841878][ T29] audit: type=1400 audit(649.862:65675): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 392.842589][ T29] audit: type=1400 audit(649.862:65676): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 392.847570][ T29] audit: type=1400 audit(649.862:65677): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 392.849464][ T29] audit: type=1400 audit(649.872:65678): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 392.849914][ T29] audit: type=1400 audit(649.872:65679): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 392.850387][ T29] audit: type=1400 audit(649.872:65680): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 392.852221][ T29] audit: type=1400 audit(649.872:65681): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 392.852744][ T29] audit: type=1400 audit(649.872:65682): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 392.854650][ T29] audit: type=1400 audit(649.872:65683): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 393.177392][T14230] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.177523][T14230] bridge0: port 1(bridge_slave_0) entered disabled state [ 393.314912][T14230] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 393.329619][T14230] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.445004][T14230] vlan2: left allmulticast mode [ 393.445026][T14230] bond1: left allmulticast mode [ 393.445042][T14230] geneve2: left allmulticast mode [ 393.579757][ T6257] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.579865][ T6257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.582520][ T6257] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.582578][ T6257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.625080][ T6257] bridge0: port 3(team0) entered blocking state [ 393.625193][ T6257] bridge0: port 3(team0) entered forwarding state [ 393.674704][T14246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.687070][T14246] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.702297][T14246] batman_adv: batadv0: Interface activated: dummy0 [ 393.745664][T14246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 393.801003][T14246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 393.806601][T14246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 393.829378][T14246] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 393.863580][ T6251] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.863616][ T6251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.865008][ T6251] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.865042][ T6251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.929049][ T6271] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.929088][ T6271] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.929752][ T6239] bond5: (slave veth5): link status definitely up, 10000 Mbps full duplex [ 393.929859][ T6239] bond5: (slave veth5): making interface the new active one [ 393.931889][ T6239] bond5: active interface up! [ 393.955363][T14260] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3520'. [ 393.959873][ T6255] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.959907][ T6255] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.960146][ T6255] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.960241][ T6255] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.978278][ T6237] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.978483][ T6237] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.978523][ T6237] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.978625][ T6237] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.978659][ T6237] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 393.978687][ T6237] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 394.079646][T14262] bond3: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 394.081645][T14262] bond3 (unregistering): Released all slaves [ 394.234303][T14260] bond12: entered promiscuous mode [ 394.234450][T14260] bond12: entered allmulticast mode [ 394.487885][ C0] ip6_tunnel: ÿ xmit: Local address not yet configured! [ 396.238729][T14318] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 396.526783][T14328] xt_connbytes: Forcing CT accounting to be enabled [ 396.526967][T14328] xt_CT: You must specify a L4 protocol and not use inversions on it [ 397.071675][T14329] 8021q: adding VLAN 0 to HW filter on device bond0 [ 397.076734][T14329] 8021q: adding VLAN 0 to HW filter on device team0 [ 397.112944][T14329] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 397.484893][T14329] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.486037][T14329] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 397.506956][T14329] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 397.506982][T14329] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 397.534681][T14329] veth1_vlan: left promiscuous mode [ 397.535205][T14329] veth0_vlan: left promiscuous mode [ 397.549214][T14329] veth0_vlan: entered promiscuous mode [ 397.550856][T14329] veth1_vlan: entered promiscuous mode [ 397.553312][T14329] veth1_macvtap: left promiscuous mode [ 397.553945][T14329] veth0_macvtap: left promiscuous mode [ 397.554624][T14329] veth0_macvtap: entered promiscuous mode [ 397.555174][T14329] veth1_macvtap: entered promiscuous mode [ 397.592394][T14329] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 397.593597][T14329] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 397.594537][T14329] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 397.595530][T14329] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 397.597081][T14329] 8021q: adding VLAN 0 to HW filter on device bond1 [ 397.735387][ T6239] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.735426][ T6239] bridge0: port 1(bridge_slave_0) entered listening state [ 397.773920][ T6239] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.773954][ T6239] bridge0: port 2(bridge_slave_1) entered listening state [ 397.848311][ T29] kauditd_printk_skb: 11934 callbacks suppressed [ 397.848326][ T29] audit: type=1400 audit(654.872:77618): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 397.864166][ T29] audit: type=1400 audit(654.882:77619): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 397.864666][ T29] audit: type=1400 audit(654.882:77620): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 397.866600][ T29] audit: type=1400 audit(654.882:77621): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 397.867105][ T29] audit: type=1400 audit(654.882:77622): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 397.869829][ T29] audit: type=1400 audit(654.882:77623): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 397.870276][ T29] audit: type=1400 audit(654.882:77624): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 397.872208][ T29] audit: type=1400 audit(654.882:77625): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 397.874262][ T29] audit: type=1400 audit(654.882:77626): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 397.874756][ T29] audit: type=1400 audit(654.882:77627): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 398.348387][T14354] netlink: 'syz.3.3553': attribute type 4 has an invalid length. [ 398.408667][ T6255] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.409278][ T6255] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.412168][ T6255] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.500157][ T6232] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.534976][T14367] netlink: 'syz.3.3558': attribute type 1 has an invalid length. [ 398.571773][T14367] 8021q: adding VLAN 0 to HW filter on device bond13 [ 398.630077][T14367] bond13: (slave veth7): Enslaving as an active interface with a down link [ 398.662417][T14367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.667757][T14367] bond13: (slave batadv0): making interface the new active one [ 398.687165][T14367] batadv0: entered promiscuous mode [ 398.687371][T14367] bond13: (slave batadv0): Enslaving as an active interface with an up link [ 398.877181][T14367] veth9: entered allmulticast mode [ 398.951027][T14367] bond13: (slave veth9): Enslaving as an active interface with a down link [ 399.334448][T14398] vlan0: entered promiscuous mode [ 399.334485][T14398] hsr0: entered promiscuous mode [ 399.337394][T14398] vlan0: entered allmulticast mode [ 399.337413][T14398] hsr0: entered allmulticast mode [ 399.337428][T14398] hsr_slave_0: entered allmulticast mode [ 399.337736][T14398] hsr_slave_1: entered allmulticast mode [ 399.433595][T14402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3568'. [ 399.499003][T14399] 8021q: adding VLAN 0 to HW filter on device bond12 [ 399.500258][T12907] ip6_tunnel: ÿ xmit: Local address not yet configured! [ 399.555331][T14407] netlink: 'syz.8.3570': attribute type 4 has an invalid length. [ 399.586669][T14408] netlink: 3 bytes leftover after parsing attributes in process `syz.7.3569'. [ 399.601261][ T6271] bond13: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 399.601695][ T6271] bond13: (slave veth9): link status definitely up, 10000 Mbps full duplex [ 400.159137][T14445] netlink: 'syz.4.3583': attribute type 4 has an invalid length. [ 400.488380][T14254] ip6_tunnel: ÿ xmit: Local address not yet configured! [ 400.897246][T14449] veth1_vlan: left promiscuous mode [ 400.915216][T14449] veth0_vlan: left promiscuous mode [ 400.925410][T14449] veth0_vlan: entered promiscuous mode [ 400.934739][T14449] veth1_vlan: entered promiscuous mode [ 400.949426][T14449] veth1_macvtap: left promiscuous mode [ 400.954156][T14449] veth0_macvtap: left promiscuous mode [ 400.954844][T14449] veth0_macvtap: entered promiscuous mode [ 400.976788][T14449] veth1_macvtap: entered promiscuous mode [ 401.001955][T14449] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 401.003344][T14449] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 401.004701][T14449] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 401.006047][T14449] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 401.007233][T14449] 8021q: adding VLAN 0 to HW filter on device bond1 [ 401.047693][T14449] 8021q: adding VLAN 0 to HW filter on device bond2 [ 401.207171][ T6271] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.207651][ T6271] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 401.207917][ T6271] bond2: (slave veth3): making interface the new active one [ 401.223687][ T6271] bond2: active interface up! [ 401.580975][ T6271] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.581783][ T6271] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.581878][ T6271] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 401.858955][ T3391] page_pool_release_retry() stalled pool shutdown: id 77, 1 inflight 121 sec [ 401.946242][T14502] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3608'. [ 402.398886][T14529] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3617'. [ 402.602223][T14529] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3617'. [ 402.844698][T14553] sch_tbf: burst 65537 is lower than device syzkaller0 mtu (65589) ! [ 402.859530][ T29] kauditd_printk_skb: 17169 callbacks suppressed [ 402.859555][ T29] audit: type=1400 audit(659.882:94797): avc: denied { create } for pid=14552 comm="syz.3.3627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 402.904352][ T29] audit: type=1400 audit(659.922:94798): avc: denied { search } for pid=14564 comm="chmod" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 402.935599][ T29] audit: type=1400 audit(659.952:94799): avc: denied { read write } for pid=4530 comm="syz-executor" name="loop5" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 402.972294][T14570] netlink: 'syz.5.3631': attribute type 1 has an invalid length. [ 402.973305][ T29] audit: type=1400 audit(659.992:94800): avc: denied { create } for pid=14556 comm="syz.7.3628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 402.992377][ T29] audit: type=1400 audit(660.002:94801): avc: denied { create } for pid=14569 comm="syz.3.3632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 403.018642][ T29] audit: type=1400 audit(660.032:94802): avc: denied { search } for pid=14567 comm="rm" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 403.044481][ T29] audit: type=1400 audit(660.052:94803): avc: denied { map_create } for pid=14569 comm="syz.3.3632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=0 [ 403.063150][ T29] audit: type=1400 audit(660.072:94804): avc: denied { create } for pid=14569 comm="syz.3.3632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 403.066077][ C0] ip6_tunnel: ÿ xmit: Local address not yet configured! [ 403.084788][ T29] audit: type=1400 audit(660.092:94805): avc: denied { create } for pid=14569 comm="syz.3.3632" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=0 [ 403.106213][ T29] audit: type=1400 audit(660.122:94806): avc: denied { search } for pid=14541 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=0 [ 403.139210][T14575] SET target dimension over the limit! [ 403.225723][T14573] bond7: (slave bridge5): making interface the new active one [ 403.226002][T14573] bond7: (slave bridge5): Enslaving as an active interface with an up link [ 403.297170][T14575] bond7: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 403.593483][T14591] syzkaller0: entered promiscuous mode [ 403.593637][T14591] syzkaller0: entered allmulticast mode [ 403.908357][T14611] 0: reclassify loop, rule prio 0, protocol 03 [ 404.749410][T14635] IPVS: sh: FWM 3 0x00000003 - no destination available [ 405.015497][T14649] netlink: 1319 bytes leftover after parsing attributes in process `syz.5.3661'. [ 405.828808][T14678] vlan3: entered promiscuous mode [ 405.828830][T14678] hsr0: entered promiscuous mode [ 405.834189][T14678] vlan3: entered allmulticast mode [ 405.834206][T14678] hsr0: entered allmulticast mode [ 405.834248][T14678] hsr_slave_0: entered allmulticast mode [ 405.834613][T14678] hsr_slave_1: entered allmulticast mode [ 407.042010][T14721] syzkaller0: entered promiscuous mode [ 407.042050][T14721] syzkaller0: entered allmulticast mode [ 407.871609][ T29] kauditd_printk_skb: 5693 callbacks suppressed [ 407.871626][ T29] audit: type=1400 audit(664.862:100500): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 407.871684][ T29] audit: type=1400 audit(664.892:100501): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 407.871710][ T29] audit: type=1400 audit(664.892:100502): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 407.871745][ T29] audit: type=1400 audit(664.892:100503): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 407.874606][ T29] audit: type=1400 audit(664.892:100504): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 407.874673][ T29] audit: type=1400 audit(664.892:100505): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 407.874699][ T29] audit: type=1400 audit(664.892:100506): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 407.874723][ T29] audit: type=1400 audit(664.892:100507): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 407.881533][ T29] audit: type=1400 audit(664.902:100508): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 407.881559][ T29] audit: type=1400 audit(664.902:100509): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 408.354225][T14749] IPv6: NLM_F_CREATE should be specified when creating new route [ 408.354292][T14749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3697'. [ 408.481470][ T6243] Bluetooth: hci0: Frame reassembly failed (-84) [ 408.735569][T14768] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3709'. [ 408.767650][T14768] bond8: entered promiscuous mode [ 408.767701][T14768] bond8: entered allmulticast mode [ 409.458863][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.459048][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 409.969939][ T6239] batadv0: left promiscuous mode [ 410.488493][ T3541] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 410.929230][T14800] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3721'. [ 412.648810][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 412.649079][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.829290][T14825] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3731'. [ 412.878824][ T29] kauditd_printk_skb: 7714 callbacks suppressed [ 412.878842][ T29] audit: type=1400 audit(669.892:108224): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 412.879089][ T29] audit: type=1400 audit(669.902:108225): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 412.879244][ T29] audit: type=1400 audit(669.902:108226): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 412.880613][ T29] audit: type=1400 audit(669.902:108227): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 412.880796][ T29] audit: type=1400 audit(669.902:108228): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 412.881983][ T29] audit: type=1400 audit(669.902:108229): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 412.882119][ T29] audit: type=1400 audit(669.902:108230): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 412.882272][ T29] audit: type=1400 audit(669.902:108231): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 412.882898][ T29] audit: type=1400 audit(669.902:108232): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 412.883321][ T29] audit: type=1400 audit(669.902:108233): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 412.893886][T14825] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=14825 comm=syz.4.3731 [ 413.289064][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 413.289138][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 413.748842][T14838] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3736'. [ 413.773432][T14838] bond2: entered promiscuous mode [ 413.773452][T14838] bond2: entered allmulticast mode [ 415.149085][T14871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3749'. [ 415.346870][T14872] bond14: entered promiscuous mode [ 415.392162][T14872] bond14: entered allmulticast mode [ 416.850925][T14914] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3763'. [ 416.876446][T14914] bond7: entered promiscuous mode [ 416.876468][T14914] bond7: entered allmulticast mode [ 417.048092][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.048303][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.325015][T14930] netlink: 'syz.4.3769': attribute type 10 has an invalid length. [ 417.342412][T14930] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 417.345755][T14930] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 417.449576][T14937] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3773'. [ 417.889128][ T29] kauditd_printk_skb: 12911 callbacks suppressed [ 417.889146][ T29] audit: type=1400 audit(674.912:121145): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 417.889314][ T29] audit: type=1400 audit(674.912:121146): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 417.889521][ T29] audit: type=1400 audit(674.912:121147): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 417.890148][ T29] audit: type=1400 audit(674.912:121148): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 417.890260][ T29] audit: type=1400 audit(674.912:121149): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 417.890471][ T29] audit: type=1400 audit(674.912:121150): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 417.890560][ T29] audit: type=1400 audit(674.912:121151): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 417.890720][ T29] audit: type=1400 audit(674.912:121152): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 417.890870][ T29] audit: type=1400 audit(674.912:121153): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 417.891089][ T29] audit: type=1400 audit(674.912:121154): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 418.717028][T14963] ================================================================== [ 418.717060][T14963] BUG: KCSAN: data-race in dentry_kill / fast_dput [ 418.717098][T14963] [ 418.717106][T14963] write to 0xffff8881195c7a90 of 8 bytes by task 14960 on cpu 0: [ 418.717126][T14963] dentry_kill+0x139/0x500 [ 418.717160][T14963] finish_dput+0x16/0x1d0 [ 418.717182][T14963] dput+0x48/0x50 [ 418.717203][T14963] filename_symlinkat+0x11f/0x2b0 [ 418.717240][T14963] __se_sys_symlinkat+0x43/0x1b0 [ 418.717274][T14963] __x64_sys_symlinkat+0x43/0x50 [ 418.717304][T14963] x64_sys_call+0x1cf4/0x2550 [ 418.717333][T14963] do_syscall_64+0x112/0x360 [ 418.717370][T14963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.717392][T14963] [ 418.717400][T14963] read to 0xffff8881195c7a90 of 8 bytes by task 14963 on cpu 1: [ 418.717419][T14963] fast_dput+0x64/0x300 [ 418.717440][T14963] dput+0x1f/0x50 [ 418.717460][T14963] vfs_mkdir+0xb4/0x3e0 [ 418.717491][T14963] filename_mkdirat+0x138/0x300 [ 418.717517][T14963] __se_sys_mkdirat+0x32/0xf0 [ 418.717548][T14963] __x64_sys_mkdirat+0x43/0x50 [ 418.717572][T14963] x64_sys_call+0x368/0x2550 [ 418.717595][T14963] do_syscall_64+0x112/0x360 [ 418.717624][T14963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.717648][T14963] [ 418.717653][T14963] value changed: 0xffff8882374cba48 -> 0x0000000000000000 [ 418.717666][T14963] [ 418.717670][T14963] Reported by Kernel Concurrency Sanitizer on: [ 418.717681][T14963] CPU: 1 UID: 0 PID: 14963 Comm: syz.8.3782 Not tainted syzkaller #0 PREEMPT(lazy) [ 418.717706][T14963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 418.717721][T14963] ================================================================== [ 420.968098][ C0] ip6_tunnel: ÿ xmit: Local address not yet configured! [ 422.808081][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.808306][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 422.907362][ T29] kauditd_printk_skb: 27017 callbacks suppressed [ 422.907381][ T29] audit: type=1400 audit(679.902:148172): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 422.907407][ T29] audit: type=1400 audit(679.922:148173): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 422.907455][ T29] audit: type=1400 audit(679.922:148174): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 422.907534][ T29] audit: type=1400 audit(679.922:148175): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 422.907618][ T29] audit: type=1400 audit(679.922:148176): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 422.907641][ T29] audit: type=1400 audit(679.922:148177): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 422.907666][ T29] audit: type=1400 audit(679.922:148178): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 422.907691][ T29] audit: type=1400 audit(679.922:148179): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 422.907768][ T29] audit: type=1400 audit(679.922:148180): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 422.907843][ T29] audit: type=1400 audit(679.922:148181): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 427.909168][ T29] kauditd_printk_skb: 39861 callbacks suppressed [ 427.909194][ T29] audit: type=1400 audit(684.932:188043): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 427.909232][ T29] audit: type=1400 audit(684.932:188044): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 427.909329][ T29] audit: type=1400 audit(684.932:188045): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 427.909355][ T29] audit: type=1400 audit(684.932:188046): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 427.909379][ T29] audit: type=1400 audit(684.932:188047): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 427.909446][ T29] audit: type=1400 audit(684.932:188048): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 427.909472][ T29] audit: type=1400 audit(684.932:188049): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 427.909497][ T29] audit: type=1400 audit(684.932:188050): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 427.909518][ T29] audit: type=1400 audit(684.932:188051): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 427.909607][ T29] audit: type=1400 audit(684.932:188052): avc: denied { read } for pid=3021 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=0 [ 427.928030][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 427.928221][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 428.657855][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 428.657882][ C1] bridge0: topology change detected, propagating [ 428.658004][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 428.658026][ C1] bridge0: topology change detected, propagating