last executing test programs: 13m13.361158316s ago: executing program 32 (id=625): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) 12m51.433194292s ago: executing program 33 (id=1342): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000400)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe1}, {0xffff, 0xffff}, {0xffe0, 0xfff3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x2}}}]}, 0x38}}, 0xc840) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newtfilter={0x74, 0x2c, 0xd2b, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x6}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x48, 0x2, [@TCA_U32_SEL={0x44, 0x5, {0x7, 0x1, 0x3, 0x40, 0x7f, 0x8, 0x36b8, 0x7, [{0x8001, 0x0, 0x6f0, 0x7}, {0x7, 0x100, 0x7e, 0x9}, {0x7, 0x5, 0x400, 0x5}]}}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x4084}, 0x24040084) 12m37.506102568s ago: executing program 34 (id=1659): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32, @ANYBLOB="00000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r0, 0x701, 0x0, 0x0, {{}, {@void, @void, @val={0xc, 0x99, {0x1, 0x75}}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x38}}, 0x0) 12m15.79258297s ago: executing program 35 (id=1729): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) io_setup(0x3ff, &(0x7f0000000500)=0x0) r2 = eventfd2(0x59, 0x800) io_submit(r1, 0x2, &(0x7f0000000b00)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x8, 0x68, r0, &(0x7f0000000440)="deefae3e7f5403", 0x7, 0x2, 0x0, 0x3, r2}]) 11m52.766659299s ago: executing program 36 (id=2055): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="12000000d30000000800000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1, 0xffffffffffffffff}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r2, &(0x7f0000000200), 0x0}, 0x20) 11m6.65916356s ago: executing program 37 (id=2861): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000000e40)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x61, @private0, 0x3}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000440)="14", 0x1}], 0x1}}, {{&(0x7f00000000c0)={0xa, 0x4ea0, 0x10, @private0, 0x9}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000100)='8', 0x1}], 0x1}}], 0x2, 0x931766f6319eed40) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000480)={0x0, 0xa7f2}, 0x8) 10m40.047112646s ago: executing program 38 (id=3234): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x3a8bc000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mremap(&(0x7f0000565000/0x2000)=nil, 0x2000, 0x4000, 0x7, &(0x7f0000388000/0x4000)=nil) 9m5.952982255s ago: executing program 39 (id=5660): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8910, &(0x7f0000000000)={'veth0_vlan\x00', @ifru_ivalue=0x4}) ioctl$sock_netdev_private(r0, 0x89f4, &(0x7f0000000000)) 8m24.182437593s ago: executing program 40 (id=6415): ptrace(0x10, 0x1) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x6, 0x0, 0x0, 0x0, 0x8000000009917, 0x400000000000fffd}, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x38, 0x0, 0x0, 0xffffffffffffffff}, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x0, 0x1}, 0x0) 5m50.754718455s ago: executing program 41 (id=10495): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c04, &(0x7f0000000040), 0xff, 0x26e, &(0x7f00000004c0)="$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") ioctl$USBDEVFS_CONTROL(0xffffffffffffffff, 0xc0185500, 0x0) creat(&(0x7f0000000300)='./file0\x00', 0x0) setxattr$security_capability(0x0, &(0x7f0000000280), 0x0, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040), &(0x7f0000000140)=@v2={0x2000000, [{0x1000}, {0x2, 0x3}]}, 0x14, 0x1) lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)=ANY=[], &(0x7f00000002c0)=""/203, 0xfffffffffffffe5f) 5m27.060568408s ago: executing program 42 (id=10961): r0 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r0, &(0x7f00000006c0)={&(0x7f0000000040)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f0000000140)=[{&(0x7f00000000c0)="e0", 0x1}], 0x1}, 0xc000) r1 = socket$kcm(0x10, 0x2, 0x4) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$inet(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="5c00000014006b03000000d86e6c1d0002847ea622fb564500004e23e3f58e76110165f450e71b0075e3002500028d459e37000f0000000000bf9367b47e51f60a64c9f4d4938037e786a6d0bdd700"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)=[{0x0}, {&(0x7f0000000cc0)=""/4096, 0x1000}], 0x2}, 0x40000000) 4m57.855186309s ago: executing program 43 (id=11538): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x1, @perf_config_ext={0xa9, 0x9}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) rt_sigprocmask(0x2, &(0x7f0000000340)={[0xffffffffffffffff]}, 0x0, 0x8) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x7) wait4(r0, 0x0, 0x0, 0x0) tkill(r0, 0x11) 4m50.802212009s ago: executing program 44 (id=11658): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f00000000c0)=0x7, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) 4m2.990245086s ago: executing program 4 (id=12536): bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000680)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5a1c, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x200000e, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x600, 0x4000000}, 0x28) 4m2.354840759s ago: executing program 4 (id=12542): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex(&(0x7f000000cffc), 0x80, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 4m1.481634278s ago: executing program 4 (id=12558): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000100)=0x6, 0x4) recvfrom(r1, 0x0, 0x0, 0x32, 0x0, 0x0) 4m0.620323146s ago: executing program 4 (id=12571): mkdir(&(0x7f0000000400)='./file0\x00', 0x114) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) mount_setattr(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x900, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r0}}, 0x20) 4m0.520056078s ago: executing program 4 (id=12573): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='vegas', 0x5) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 3m59.860212392s ago: executing program 4 (id=12577): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m59.786405404s ago: executing program 45 (id=12577): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x10, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2d}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 3m9.673730319s ago: executing program 2 (id=13546): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x3) prctl$PR_SET_MM(0x23, 0x6, &(0x7f0000ffc000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x7, &(0x7f0000ffd000/0x3000)=nil) prctl$PR_SET_MM(0x23, 0x6, &(0x7f000005b000/0x2000)=nil) brk(0x2000000db002) brk(0x200000ffc000) 3m9.62850376s ago: executing program 2 (id=13547): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=@framed={{0x18, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x8000}, [@call={0x85, 0x0, 0x0, 0x11}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_config_ext={0x6, 0x401}, 0x40, 0x0, 0x0, 0x0, 0xa, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) syz_clone(0x20102400, 0x0, 0x0, 0x0, 0x0, 0x0) 3m9.478712703s ago: executing program 2 (id=13550): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81ffffffffb9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xfe33) 3m9.426906134s ago: executing program 2 (id=13551): syz_mount_image$ext4(&(0x7f00000005c0)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x14800, &(0x7f0000000180)={[{@nolazytime}, {@dioread_lock}, {@oldalloc}, {@block_validity}]}, 0x1, 0x5b9, &(0x7f0000000680)="$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") sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, 0x0, 0x0) ioctl$TCGETA(0xffffffffffffffff, 0x5405, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000540)='./file2\x00', 0x1188c14, &(0x7f0000000580), 0x41, 0x4ea, &(0x7f0000001200)="$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") syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x48a, &(0x7f0000000000)={[{@jqfmt_vfsold}, {@grpjquota, 0x22}, {@jqfmt_vfsold}, {@noload}, {@nombcache}, {@usrjquota, 0x22}, {@norecovery}, {@data_err_abort}, {@init_itable}]}, 0x41, 0x455, &(0x7f0000000d80)="$eJzs3MtvG1UXAPAzdpy+v+Qr5dHSQqAgKh5Jkz7ogk0RSCxAQoJFEauQplWo26AkSLSKIGURlqgSe8QSib+ADWWDgBUSW9gjpICyobAyGnsmdRPbeTlxqX8/aZJ7fce693jm2sd3bAfQtQbSP0nE3oj4JSL6atU7dxio/bu1ODv29+LsWBKVyht/JtX9/lqcHct3ze+3p1apVFr0O/92xGi5PD6V1YdmLr83NH312nMTl0cvjl8cvzJy5szJE0d6T4+cakuc+9KxHvpw8vDBV9668drYuRvv/PBVOt69WXt9HO0yUHt0G3qy3Z112L66ctLTwYGwLsWISA9XqTr/+6IYu5ba+uLljzs6OGBLVSqFyo7mzXMV4B6WJupAN8pf6NP3v/m2TanHXWHhbCytY9zKtlpLTxSyfUrZe6StMBAR5+b++TzdYovWIQAA6t08GxHPNsr/CvFA3X7/y64N9UfE/yNif0TcFxEHIuL+iOq+D0bEQ2vsN19lXn6FZGX+U+nbcHBrkOZ/L2TXtu7M//LsL/qLWW1fNf5ScmGiPH48e0yORWlHWh9u0ce3L/38abO2+vwv3dL+81wwG8fvPcsW6M6PzoxuJuZ6C9cjDvU0ij9ZynnT/PhgRBzaYB8TT395uFnb6vG30IakvPJFxFO14z8Xy+LPJU2vTw4/f3rk1NDOKI8fH8rPipV+/Gn+9ay3ZHnbpuJvg4Wbldjd8PxfGmp/sjNi+uq1S9XrtdPr72P+10+avqfZ6Pnfm7xZLfdmt30wOjMzNRzRm7y68vaR2/fN6/n+6fl/7Gjj+b8/bj8SD0dEehIfiYhHIuLRbOyPRcTjEXG0Rfzfv/jEu+uPv8WqfBul8f9RWuX4R/3xX3+heOm7r9cffy49/ierpWPZLWt5/ms1rutTmzmbAQAA4L+nUP0MfFIYXCoXCoODtc/wH4jdhfLk9MwzFybfv3K+9ln5/igV8pWuvrr10OFsbTivjyyrn8jWjT8r7qrWB8cmy+c7HTx0uT1N5n/qt2KnRwdsOd/Xgu5l/kP3Mv+he5n/0L3Mf+hejeb/Rx0YB7D9Vnn937Vd4wC2n/wfupf5D93L/Ieu1PRL8oVNfeVfoUOFb3o391sNay9E4S4J+Z4plKJhU0/LH7NoQ2FHw6ZOPzMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC0x78BAAD//0k+5Mg=") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, &(0x7f0000000000)) 3m9.267468048s ago: executing program 2 (id=13552): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x1, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0x3}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TARGET={0x8, 0x3, 0x3}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x7ff}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000080}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4040800}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 3m8.519731414s ago: executing program 2 (id=13564): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) 3m8.495209464s ago: executing program 46 (id=13564): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) ioctl$TIOCGPTPEER(r0, 0x5441, 0x9) 2m48.676654135s ago: executing program 1 (id=13928): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, &(0x7f0000000080)={0x5, 0x0, 0x9}) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x4e20, 0x7, @loopback, 0xc88}}, 0x0, 0x0, 0xa, 0x0, "25c633e7eb9cc056ed394ba71b6e5d7bf4d988ea7c340885973233ddc0946fbd53f014e2854b661b3f9f55a7e67ba35c3537ea83c3817a08930cf99a34dfc5e167b887734921da2397b9cc8b1e235b95"}, 0xd8) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @loopback, 0x3681}, 0x1c) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0x20, &(0x7f0000000000)={@in6={{0xa, 0x4e22, 0x7, @empty, 0x7}}, 0x0, 0x0, 0x3b, 0x0, "a30b3b28af4d2f246a016542daa845f387713f4048ff2ece1e75f1fc0100f41e4de6256109383664417165bba0dd5ace522fa788000000000033035551502f07b4001a00"}, 0xd8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e62, 0x1ff, @loopback, 0x23}, 0x1c) 2m47.786014814s ago: executing program 1 (id=13955): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22}, {0x2, 0x200, @local}, {0x2, 0x0, @broadcast}, 0x105, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x0, 0xe1b2}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f0000000000)={'vlan0\x00', @local}) ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) 2m47.684469067s ago: executing program 1 (id=13957): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x34, &(0x7f0000000240)={&(0x7f0000000040)={0x1, 0x840, 0x800, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{0x3, 0x1, 0x1, 0x1}, 0x3, 0x2, 0x0, 0x0, "5e3dba8ae862e81c"}}, 0x80}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001100)={0x1, 0x767, 0xffffffff, {}, {0x0, 0x2710}, {}, 0x1, @can={{0x1, 0x1, 0x0, 0x1}, 0x7, 0x0, 0x0, 0x0, "35cf52530599b474"}}, 0x48}, 0x1, 0x0, 0x0, 0x20000040}, 0x51) close_range(r0, 0xffffffffffffffff, 0x0) 2m47.661254887s ago: executing program 1 (id=13958): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x400000, &(0x7f00000000c0)={[{@noload}, {@abort}, {@data_err_ignore}, {@nogrpid}, {@oldalloc}, {@errors_remount}]}, 0x0, 0x467, &(0x7f0000000500)="$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") mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x0, 0x80000, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x2) 2m47.49398115s ago: executing program 1 (id=13963): r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @perf_bp={0x0, 0x2}, 0x100, 0x0, 0x4, 0x15, 0x0, 0x1, 0x400}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) pipe2(0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000240)='cgroup.threads\x00', 0x2, 0x0) open_by_handle_at(r2, &(0x7f0000000100)=ANY=[], 0x408100) 2m46.750205646s ago: executing program 1 (id=13969): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) setresuid(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 2m46.750043426s ago: executing program 47 (id=13969): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x800000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0}, 0x800, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) setresuid(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="5c000000020605000000000000000000000000000c00078005001500267d00000500010007000000050005000a000000050004"], 0x5c}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000040200f2c8dc1b000000180001801400020073797a5f74756e0000000000000000000c000280"], 0x38}, 0x1, 0x0, 0x0, 0x20000844}, 0x0) 2m1.666105885s ago: executing program 3 (id=14779): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000001c00000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ec}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r4, r1, 0x25, 0x0, @void}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@setlink={0x28, 0x13, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, 0x41014, 0x54c1f}, [@IFLA_MASTER={0x8, 0xa, r1}]}, 0x28}}, 0x20040000) 2m1.566509607s ago: executing program 3 (id=14783): unshare(0x62020600) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@ipv4_newaddr={0x20, 0x14, 0x503, 0x70bd26, 0x25dfdbff, {0x2, 0x1f, 0x51, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @loopback}]}, 0x20}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={'lo\x00', {0x2, 0x4e21, @empty=0x7f000000}}) 2m1.011682949s ago: executing program 3 (id=14788): r0 = socket$nl_route(0x10, 0x3, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000040)) timer_create(0xfffffffffffffffc, 0x0, &(0x7f00000001c0)=0x0) timer_settime(r1, 0x1, &(0x7f0000000240)={{}, {0x0, 0x989680}}, 0x0) timer_settime(r1, 0x1, &(0x7f0000000340)={{0x77359400}, {0x77359400}}, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x48, 0x1e, 0x109, 0x100, 0x40000, {}, [{0x34, 0x1, [@m_skbedit={0x30, 0x15, 0x0, 0x0, {{0xc}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x5}}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x0) 2m0.983330589s ago: executing program 3 (id=14790): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00') r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f00000000c0)='./file0/../file0/../file0/../file0\x00', 0x0) pivot_root(&(0x7f0000001080)='./file0/../file0/../file0/../file0/file0\x00', &(0x7f0000000080)='./file0/../file0/../file0/../file0\x00') 2m0.9460011s ago: executing program 3 (id=14792): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfca2, &(0x7f00000003c0)=[{&(0x7f0000000340)="e03f030039000b03d25a806c8c6394f90324fc60100000013856f71ab0bf291c75c3000a02f377e3428200e9309d025ce7b5807228baacd430fc222f32d3eb1ed256241a49cafc9a76d41bd8324d43a5f219b0e3e3ade8070604a1ef4539465b1eff26fd88f401df35c7850000000000000000000000008bdb", 0x33fe0}, {&(0x7f0000000400)="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"}], 0x1}, 0x100408c4) 2m0.739301605s ago: executing program 3 (id=14797): socket(0x1d, 0x2, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2m0.716061145s ago: executing program 48 (id=14797): socket(0x1d, 0x2, 0x6) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m33.274263038s ago: executing program 5 (id=15281): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, 0x0, 0x5b5d}, [@IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @dev={0xfe, 0x80, '\x00', 0xe}}]}]}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r3}, @CGW_DST_IF={0x8, 0xa, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) 1m33.20470269s ago: executing program 5 (id=15283): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f5}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="dbaa7bc318"], 0x0, 0xb, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000081ffffff000000000700000018000000020000000000000001"], 0x0, 0x93c, 0x0, 0x0, 0x41000}, 0x94) connect$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4620, @empty}, 0x10) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m33.130993781s ago: executing program 5 (id=15285): ioprio_set$pid(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20, 0x2003, @mcast2, 0x2}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r1, 0x0, 0x2) 1m33.130741361s ago: executing program 5 (id=15286): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4bc, &(0x7f0000000a40)="$eJzs3ctvW1UaAPDPdpMmaWb6mNGo7UjTSh2p81DjPDRqMjObWc3MotJoKrEBqYTEDSVOHMVOaaIuUth1wQKBQEIs2PMXsKErKiTEGvaIBSqCEiRAQjK613abOHGwII1p7u8n3ebch/2dU+s7Ovf4Xt8AMuts8k8uYjgiPoyIo43VrQecbfzZuH9zJllyUa9f/iKXHpestw5tve5IRKxHxEBE/P/fEc/ktsetrq7NT5fLpeXmerG2sFSsrq5duLYwPVeaKy2OTV6cmpocnRif2rO23n7puduX3vlv/9vfvHjv7svvvZtUa7i5b3M79lKj6X1xfNO2QxHxz0cRrAcKzfYM9roi/CTJ5/ebiDiX5v/RKKSfJpAF9Xq9/n39cKfd63XgwMqnY+BcfiQiGuV8fmSkMYb/bQzly5Vq7a9XKyuLs42x8rHoy1+9Vi6NNs8VjkVfLlkfS8sP18fb1ici0jHwK4XBdH1kplKe3d+uDmhzpC3/vy408h/ICKf8kF3yH7JL/kN2yX/ILvkP2SX/IbvkP2SX/Ifskv+QXfIfskv+Qyb979KlZKm37n+fvb66Ml+5fmG2VJ0fWViZGZmpLC+NzFUqc+k9Ows/9n7lSmVp7G+xcqNYK1Vrxerq2pWFyspi7Up6X/+VUt++tAroxvEzdz7ORcT63wfTJdHf3CdX4WCr13PR63uQgd4o9LoDAnrG1B9kl3N8oP0netvHBQOdXrj0cL4QeLzke10BoGfOn/L9H2SV+X/ILvP/kF3G+MAOj+jbYrf5f+DxZP4fsmu4w/O/frXp2V2jEfHriPio0He49awv4CDIf5Zrjv/PH/3jcPve/ty36VcE/RHx/BuXX7sxXastjyXbv3ywvfZ6c/v4phd2PGEAeqWVp608BgCya+P+zZnWsp9xP/9X4yKE7fEPNecmB9LvKIc2cluuVcjt0bUL67ci4uRO8XPN5503TmSGNgrb4p9o/s013iKt76H0uen7E//Upvh/2BT/9M/+X4FsuJP0P6M75V8+zel4kH9b+5/hPbp2onP/l3/Q/xU69H9nuozx7JsvfNox/q2I0zvGb8UbSGO1x0/qdr7L+PeeeuJ3nfbV32q8z07xW5JSsbawVKyurl1If0durrQ4NnlxampydGJ8qpjOURdbM9Xb/ePkB3d3a/9Qh/i7tT/Z9ucu2//d799/8uwu8f90bufP/8Qu8Qcj4i9dxv9q/JOnO+1L4s92aH9+l/jJtoku41df/c/hLg8FAPZBdXVtfrpcLi0rKCj0pHDrl1GNtkKveybgUauuJqfmSdL3uiYAAAAAAAAAAABAt/bjcuJetxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4CD4IQAA//9HcdTQ") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101581, 0x1b9) open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) fallocate(r0, 0x10, 0x1, 0x8000) 1m32.905270976s ago: executing program 5 (id=15288): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x728, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x4}, 0xa080, 0x1224, 0x0, 0x8, 0x80008, 0x5, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000001200000000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x4}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000c00)='GPL\x00'}, 0x75) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={r0, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000880)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x0, 0xffffffff, 0xffffffff, 0x158, 0xffffffff, 0x228, 0xffffff7a, 0xffffffff, 0x228, 0xffffffff, 0x7fffffe, 0x0, {[{{@ip={@empty, @multicast1, 0xff000000, 0xffffff00, 'dvmrp1\x00', 'ip6gretap0\x00', {}, {}, 0x4, 0x1, 0x10}, 0x6, 0x130, 0x158, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x6, 'bm\x00', "00000100cbd047da9ca965f96ad5801f0514d363ee84bb895919d9490f6785fba3c4a44f1e25ecefef2a2d6054f5260ece5ce1a56a5ef73be11d65bfe8c37674024c183ebacdf741cea92ded3a9ca54de15dd9ec8ef62f9e000000000000000000ffffff7f00", 0x80, 0x0, {0x4}}}]}, @common=@unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x2}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local, 0x2, 0x7, [0x36, 0x3d, 0x20, 0x22, 0x31, 0x1d, 0x37, 0x2c, 0x14, 0x7, 0x7, 0x34, 0x13, 0x1a, 0x15, 0xa], 0x0, 0x7fff, 0x6}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x320) 1m32.782327889s ago: executing program 5 (id=15290): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x9, 0x2}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0xa0, &(0x7f0000000680)={0x0, 0x5d3, 0x1, 0x40000000}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000580)=""/248, 0xf8}], 0x1) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x9, 0x4d032, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) 1m32.782139869s ago: executing program 49 (id=15290): perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x9, 0x2}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000a, 0xc3072, 0xffffffffffffffff, 0x0) r0 = io_uring_setup(0xa0, &(0x7f0000000680)={0x0, 0x5d3, 0x1, 0x40000000}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000580)=""/248, 0xf8}], 0x1) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x9, 0x4d032, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x17440000) 3.201541679s ago: executing program 6 (id=16886): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000380)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r3, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18, 0x4000}, 0x80) connect$unix(r0, &(0x7f0000fce000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) sendmmsg$unix(r0, &(0x7f0000004780)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000140)='A', 0x1}], 0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r1], 0x18, 0x40001}}], 0x47f, 0xa4ff) 3.18203945s ago: executing program 6 (id=16887): r0 = socket$netlink(0x10, 0x3, 0x9) r1 = epoll_create1(0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000001000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0xfffffffffffffed1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x20c89e, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000340)={0x40000005}) 3.1476247s ago: executing program 6 (id=16890): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000738000/0x1000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000738000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) pselect6(0x40, &(0x7f0000000100)={0x0, 0x3, 0x10, 0x1, 0x1, 0x2, 0x0, 0x7}, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0xb1bd, 0x0, 0xfffffffffffffffc, 0x0, 0x1b}, 0x0, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) shutdown(r0, 0x0) 2.309463369s ago: executing program 9 (id=16908): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) rt_sigqueueinfo(r2, 0x21, &(0x7f0000000ac0)={0x0, 0x9, 0xfffffffe}) 2.302095269s ago: executing program 0 (id=16909): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x102}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 2.214347271s ago: executing program 7 (id=16910): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfffffd9d) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4) r1 = socket(0x1e, 0x4, 0x0) connect$tipc(r1, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) sendfile(r1, r0, 0x0, 0x8010002b) connect$inet(r1, &(0x7f0000000480)={0x1e, 0x4e22, @rand_addr=0x640100fd}, 0x10) 2.214172401s ago: executing program 6 (id=16911): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xc, 0x0, &(0x7f0000001600)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x48) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000140)={0x1, 0x3, 0x8001, 0xc0, 0x9, 0xffff}) fchown(r1, 0xee00, 0xee01) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) fchown(r1, 0x0, 0x0) 2.177545632s ago: executing program 6 (id=16912): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='dctcp', 0x5) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000200)='highspeed', 0x9) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2800000010000108fdffffff0800000800000000", @ANYRES32=0x0, @ANYBLOB="00000000a304040008001b"], 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) sendto$inet(r0, &(0x7f0000000300)="89", 0x1, 0x4044880, 0x0, 0x0) 1.928137607s ago: executing program 8 (id=16914): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, 0x0, 0x174) 1.876154158s ago: executing program 8 (id=16915): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@delchain={0x24, 0x65, 0x400, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x509d884560ba1ba6, 0x3}, {}, {0x8, 0x10}}}, 0x24}}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x1, 0x80000000, 0x4, {0x0, 0x0, 0x0, 0x0, {0x8, 0xb}, {0xa, 0xffe0}, {0xfff1, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x20}]}}]}, 0x3c}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.654504973s ago: executing program 7 (id=16916): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x4540}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x27b2}]}}}, @IFLA_MASTER={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000881}, 0x48004) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r3, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c0005"], 0x3}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 1.495126656s ago: executing program 9 (id=16917): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x7b}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, 0x0, 0x2, 0x0, 0x0, 0x0, 0x34}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200000001000000000000000000008500000075"], 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x18, 0x1}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000001b"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x88}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0xa0}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffff51}, 0x48) 1.425734428s ago: executing program 9 (id=16918): unshare(0x22020600) openat2(0xffffffffffffff9c, 0x0, &(0x7f0000000280)={0x80200, 0x21, 0x5}, 0x18) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x6a57, &(0x7f0000000040)={0x0, 0x398c, 0x1c080, 0xd, 0x2a}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="2e00000010008188e6b6", 0xa}], 0x1}, 0x0) io_uring_enter(r0, 0x5b3, 0x7ecd, 0x17, 0x0, 0x0) 1.219553273s ago: executing program 9 (id=16919): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x130}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x6c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, '\x00\x00'}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="40000000210a018800000000000000000a0000010900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 1.191624443s ago: executing program 0 (id=16920): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x36d, 0xc000, 0x10, 0xa0002f5}) process_vm_readv(0x0, &(0x7f0000000240)=[{0x0}, {&(0x7f00000006c0)=""/209, 0xd1}], 0x2, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.179648254s ago: executing program 9 (id=16921): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x35c5, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0dff"], 0x14}, 0x1, 0x0, 0x0, 0xc051}, 0x4000) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioprio_set$uid(0x3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={0x0, 0x0, 0x96}, 0x28) 1.112743125s ago: executing program 0 (id=16922): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r1, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) 1.037273986s ago: executing program 9 (id=16923): recvmsg(0xffffffffffffffff, 0x0, 0x2000) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) 1.033656137s ago: executing program 0 (id=16924): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x10, &(0x7f0000000100), 0x4) recvmsg$unix(r2, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x2) sendmsg$inet(r3, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000a80)="1843", 0x2}], 0x1}, 0x20000001) 578.205477ms ago: executing program 6 (id=16925): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xe}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000380), 0x20800, 0x0) socket$packet(0x11, 0x2, 0x300) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x3a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x40000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 489.061619ms ago: executing program 7 (id=16926): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x800, 0x7, 0x6, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) get_mempolicy(0x0, 0xfffffffffffffffe, 0x5b, &(0x7f0000ffd000/0x2000)=nil, 0x2) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x1c, 0x3f, 0x9, 0x0, 0x25dfdbfc, {0x3}, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x3}]}, 0x1c}}, 0x0) 462.59455ms ago: executing program 8 (id=16927): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r2, 0x7, 0x5, 0xfffffff0}, 0x10) 400.488631ms ago: executing program 8 (id=16928): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount(0x0, &(0x7f00000002c0)='.\x00', 0x0, 0x22, 0x0) r2 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount$bind(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x1021, 0x0) 384.927591ms ago: executing program 7 (id=16929): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x100000b3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000280)={0x1, &(0x7f0000000380)=[{0x6, 0x2, 0x1, 0x7}]}, 0x10) 349.904282ms ago: executing program 8 (id=16930): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000780)={0x0, 0x4, 0x0, [0x806f, 0x0, 0x2d5, 0x2, 0x6], [0x6, 0x7, 0x1, 0x9, 0x8002, 0x0, 0x5, 0x2, 0x0, 0x802, 0x9, 0x200000100, 0xffffffffffffffff, 0xfffffffffffffff4, 0x4a, 0x5, 0x100, 0xd, 0xdd, 0x5, 0x1, 0x2a9, 0x2000000003, 0xc39, 0x8000003, 0x8, 0x100000000, 0x2, 0xa51, 0x8, 0x6, 0x800000000000001, 0x7, 0xfffffffffffffffb, 0x81, 0x100, 0x5, 0x931, 0x101, 0x3, 0xf, 0x8000000001000000, 0x7, 0x1, 0x8, 0x8, 0x6a8, 0x102, 0x1, 0x83, 0x538a, 0x9, 0xfffffffffffffffb, 0x4, 0x3, 0x8000000000000000, 0x5, 0x9, 0x80008000, 0x8000000000000000, 0x40000000000004, 0xfffffffffffffffc, 0xfffffffffffffffd, 0x5bc, 0x1, 0x0, 0x4, 0x8000, 0xc9, 0x80, 0x6, 0x9, 0x82c, 0x8000, 0xe000000000000, 0xe4, 0x11, 0x0, 0x8, 0x26, 0xffffffffffffffff, 0x7, 0xbfa, 0x8000000000000000, 0x2000000009, 0x8, 0x0, 0x6, 0x6, 0x7, 0x100000002, 0x4, 0x4, 0x7, 0x7, 0x7, 0x9, 0x1, 0x16d, 0x6, 0x68d, 0xffffffffffff43b0, 0x8, 0x50000000000000, 0xe, 0x0, 0x1, 0x300000003, 0x5, 0x7, 0x406, 0x3, 0x6, 0x3, 0x1, 0x3, 0x100000000010000, 0x7fffffff, 0x7, 0x3, 0x1]}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004084) r0 = io_uring_setup(0x7025, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) io_uring_enter(r0, 0x2219, 0x7721, 0x52, 0x0, 0x0) 115.992427ms ago: executing program 8 (id=16931): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@barrier_val={'barrier', 0x3d, 0x102}}, {@errors_remount}]}, 0x2, 0x445, &(0x7f0000000b00)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 114.838617ms ago: executing program 7 (id=16941): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x1, 0x7}, 0x10010, 0x0, 0x0, 0x3, 0x800000, 0x43, 0x9, 0x0, 0x0, 0x0, 0x200000000009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x1, &(0x7f00000001c0)={0x0, {{0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xff7ffff9}}, {{0xa, 0x4e08, 0xcb5, @loopback, 0x4ef}}}, 0x108) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, 0x0, 0x28c59d7e5dbb7169, 0x0) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f00000001c0)={0x2, 0x0, &(0x7f0000000140), 0x0}, 0x20) ptrace$ARCH_SHSTK_LOCK(0x1e, 0x0, 0x2, 0x5003) 105.786757ms ago: executing program 0 (id=16932): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401b, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0xc}, 0x10c0e8, 0x0, 0x0, 0x4, 0x8, 0xa858, 0x7fff, 0x0, 0x0, 0x0, 0x8000000000000000}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) msync(&(0x7f000012d000/0x3000)=nil, 0x3000, 0x4) pwrite64(0xffffffffffffffff, &(0x7f0000000140)='2', 0x1, 0x7) readlinkat(0xffffffffffffffff, 0x0, 0x0, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xe7c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000200000dd0a00000000000073013f00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000}, 0x48) 11.779959ms ago: executing program 7 (id=16933): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x40014, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip_vti0\x00', 0x10}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="851000000000000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000000045"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'sit0\x00'}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 0s ago: executing program 0 (id=16934): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000a, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) time(&(0x7f0000000000)) kernel console output (not intermixed with test programs): te } for pid=12087 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 758.824467][ T28] audit: type=1400 audit(2039.786:15864): avc: denied { write } for pid=12100 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 759.932748][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15046'. [ 759.953590][T12116] netlink: 8 bytes leftover after parsing attributes in process `syz.5.15046'. [ 761.091064][T12145] netlink: 'syz.7.15059': attribute type 15 has an invalid length. [ 761.125117][T12145] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15059'. [ 761.134374][T12145] netlink: 'syz.7.15059': attribute type 15 has an invalid length. [ 761.148608][T12145] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15059'. [ 761.248147][ T28] audit: type=1400 audit(2042.206:15865): avc: denied { write } for pid=12139 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 761.293030][T12168] team0: Port device syz_tun added [ 761.324763][ T28] audit: type=1400 audit(2042.286:15866): avc: denied { write } for pid=12176 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 761.413160][ T28] audit: type=1400 audit(2042.376:15867): avc: denied { bind } for pid=12185 comm="syz.7.15069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 761.581719][T12188] veth1_to_bond: entered allmulticast mode [ 761.601911][T12190] veth1_to_bond: entered promiscuous mode [ 761.767252][ T28] audit: type=1400 audit(2042.726:15868): avc: denied { write } for pid=12191 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 761.859874][ T28] audit: type=1400 audit(2042.756:15869): avc: denied { setopt } for pid=12212 comm="syz.8.15076" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 761.909819][T12232] Invalid ELF header magic: != ELF [ 761.930490][ T28] audit: type=1400 audit(2042.806:15870): avc: denied { write } for pid=12220 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 761.999841][ T28] audit: type=1400 audit(2042.866:15871): avc: denied { module_load } for pid=12231 comm="syz.6.15082" path=2F6D656D66643A20C736BE918D183229219A25A2D238D606070EFCFE128F2613AE254054A3B03E5CECA9F951403641108C6E7C202864656C6574656429 dev="hugetlbfs" ino=415493 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=system permissive=1 [ 762.053391][T12246] loop6: detected capacity change from 0 to 736 [ 762.069429][ T28] audit: type=1400 audit(2043.036:15872): avc: denied { mount } for pid=12245 comm="syz.6.15085" name="/" dev="loop6" ino=1472 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 762.149656][T12250] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15086'. [ 762.189902][T12250] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15086'. [ 762.219623][T12256] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15086'. [ 762.232148][T12256] netlink: 28 bytes leftover after parsing attributes in process `syz.5.15086'. [ 762.250207][T12262] loop6: detected capacity change from 0 to 512 [ 762.265240][T12262] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 762.479002][T10899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 763.127571][T12327] syzkaller0: entered promiscuous mode [ 763.142740][T12327] syzkaller0: entered allmulticast mode [ 763.188545][T12332] netlink: 2384 bytes leftover after parsing attributes in process `syz.0.15116'. [ 763.387333][T12340] netlink: 64 bytes leftover after parsing attributes in process `syz.8.15120'. [ 763.410051][T12340] ip6gre1: entered promiscuous mode [ 763.421347][T12340] ip6gre1: entered allmulticast mode [ 764.206420][ T28] kauditd_printk_skb: 13 callbacks suppressed [ 764.206441][ T28] audit: type=1400 audit(2045.166:15886): avc: denied { mounton } for pid=12421 comm="syz.7.15147" path="/proc/1752/cgroup" dev="proc" ino=416199 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 764.302413][ T28] audit: type=1400 audit(2045.166:15887): avc: denied { remount } for pid=12421 comm="syz.7.15147" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=filesystem permissive=1 [ 764.381471][ T28] audit: type=1326 audit(2045.336:15888): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12431 comm="syz.7.15148" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94bb9de99 code=0x7ffc0000 [ 764.450804][ T28] audit: type=1326 audit(2045.336:15889): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12431 comm="syz.7.15148" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94bb9de99 code=0x7ffc0000 [ 764.535352][ T28] audit: type=1326 audit(2045.336:15890): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12431 comm="syz.7.15148" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94bb9de99 code=0x7ffc0000 [ 764.577388][T12450] smc: net device lo applied user defined pnetid SYZ2 [ 764.595674][T12450] smc: net device lo erased user defined pnetid SYZ2 [ 764.667994][ T28] audit: type=1326 audit(2045.336:15891): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12431 comm="syz.7.15148" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7fc94bb9de99 code=0x7ffc0000 [ 764.733406][T12482] netlink: 'syz.5.15157': attribute type 4 has an invalid length. [ 764.762549][ T28] audit: type=1326 audit(2045.336:15892): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12431 comm="syz.7.15148" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94bb9de99 code=0x7ffc0000 [ 764.838475][ T28] audit: type=1326 audit(2045.336:15893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12431 comm="syz.7.15148" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94bb9de99 code=0x7ffc0000 [ 764.909671][ T28] audit: type=1326 audit(2045.336:15894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12431 comm="syz.7.15148" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94bb9de99 code=0x7ffc0000 [ 764.936244][ T28] audit: type=1326 audit(2045.336:15895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12431 comm="syz.7.15148" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7fc94bb9de99 code=0x7ffc0000 [ 764.974777][T12495] sctp: [Deprecated]: syz.5.15163 (pid 12495) Use of struct sctp_assoc_value in delayed_ack socket option. [ 764.974777][T12495] Use struct sctp_sack_info instead [ 765.171091][T12516] netlink: 'syz.0.15168': attribute type 13 has an invalid length. [ 765.247355][T12523] netlink: 'syz.7.15172': attribute type 1 has an invalid length. [ 765.338718][T12518] bond7: (slave veth0_to_bond): making interface the new active one [ 765.351768][T12518] bond7: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 765.365283][T12523] __nla_validate_parse: 2 callbacks suppressed [ 765.365304][T12523] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15172'. [ 765.386925][T12523] 8021q: adding VLAN 0 to HW filter on device bond7 [ 765.412183][T12538] loop6: detected capacity change from 0 to 512 [ 765.792912][T12576] loop5: detected capacity change from 0 to 512 [ 765.830304][T12576] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 765.948081][ T4306] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 766.118265][T12609] hub 8-0:1.0: USB hub found [ 766.130276][T12609] hub 8-0:1.0: 8 ports detected [ 767.057625][T12673] smc: net device lo applied user defined pnetid SYZ2 [ 767.081374][T12673] smc: net device lo erased user defined pnetid SYZ2 [ 767.143416][T12684] netlink: 'syz.7.15236': attribute type 1 has an invalid length. [ 767.192123][T12684] bond8: entered promiscuous mode [ 767.197751][T12684] 8021q: adding VLAN 0 to HW filter on device bond8 [ 767.230040][T12679] vcan0 speed is unknown, defaulting to 1000 [ 767.293378][T12684] 8021q: adding VLAN 0 to HW filter on device bond8 [ 767.316092][T12684] bond8: (slave ip6gre5): The slave device specified does not support setting the MAC address [ 767.337288][T12684] bond8: (slave ip6gre5): Setting fail_over_mac to active for active-backup mode [ 767.354581][T12684] bond8: (slave ip6gre5): making interface the new active one [ 767.374618][T12684] ip6gre5: entered promiscuous mode [ 767.406557][T12684] bond8: (slave ip6gre5): Enslaving as an active interface with an up link [ 767.943799][T12763] loop6: detected capacity change from 0 to 512 [ 767.971061][T12763] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.15251: iget: bad i_size value: 38620345925642 [ 768.010377][T12763] fserror_report: 1 callbacks suppressed [ 768.010392][T12763] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 768.021660][T12763] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.15251: couldn't read orphan inode 15 (err -117) [ 768.030923][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 768.030947][ C0] EXT4-fs (loop6): initial error at time 2048: ext4_orphan_get:1399: inode 15 [ 768.031016][ C0] EXT4-fs (loop6): last error at time 2048: ext4_orphan_get:1399: inode 15 [ 768.084349][T12763] loop6: lost filesystem error report for type 5 error -117 [ 768.085079][T12763] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 768.146792][T12770] loop8: detected capacity change from 0 to 128 [ 768.179807][T12770] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 768.960581][T12766] EXT4-fs error (device loop6): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 769.097254][ T9631] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 769.108767][T10899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.235498][ T28] kauditd_printk_skb: 179 callbacks suppressed [ 769.235582][ T28] audit: type=1400 audit(2050.196:16075): avc: denied { append } for pid=12784 comm="syz.8.15260" name="ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 769.313948][ T28] audit: type=1400 audit(2050.196:16076): avc: denied { open } for pid=12784 comm="syz.8.15260" path="/dev/ptp0" dev="devtmpfs" ino=247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 769.391451][T12801] loop8: detected capacity change from 0 to 512 [ 769.399908][T12799] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 769.434870][T12801] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 769.463583][ T28] audit: type=1400 audit(2050.426:16077): avc: denied { write } for pid=12800 comm="syz.8.15266" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 769.705107][ T9631] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 769.730150][ T28] audit: type=1400 audit(2050.696:16078): avc: denied { setopt } for pid=12818 comm="syz.8.15274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 769.777629][ T28] audit: type=1400 audit(2050.736:16079): avc: denied { write } for pid=12820 comm="syz.5.15275" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 769.867478][T12825] loop5: detected capacity change from 0 to 8192 [ 769.883528][T12825] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 769.891843][T12825] FAT-fs (loop5): Filesystem has been set read-only [ 769.898945][T12825] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 769.911006][T12825] syz.5.15277: attempt to access beyond end of device [ 769.911006][T12825] loop5: rw=8388608, sector=57847, nr_sectors = 1 limit=8192 [ 769.925495][T12825] Buffer I/O error on dev loop5, logical block 57847, async page read [ 770.142842][T12854] netlink: 'syz.5.15281': attribute type 10 has an invalid length. [ 770.159644][T12854] netlink: 16154 bytes leftover after parsing attributes in process `syz.5.15281'. [ 770.291732][T12877] loop5: detected capacity change from 0 to 512 [ 770.312299][T12877] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 770.329833][ T28] audit: type=1400 audit(2051.296:16080): avc: denied { append } for pid=12875 comm="syz.5.15286" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 770.353662][ T28] audit: type=1400 audit(2051.296:16081): avc: denied { write } for pid=12875 comm="syz.5.15286" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 770.391908][ T28] audit: type=1400 audit(2051.316:16082): avc: denied { mounton } for pid=12875 comm="syz.5.15286" path="/539/file1/bus" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 770.420033][T12877] loop5: detected capacity change from 512 to 64 [ 770.428760][T12890] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6435: Out of memory [ 770.439543][T12890] EXT4-fs error (device loop5): ext4_dirty_inode:6639: inode #15: comm syz.5.15286: mark_inode_dirty error [ 770.468466][T12890] syz.5.15286: attempt to access beyond end of device [ 770.468466][T12890] loop5: rw=8388608, sector=82, nr_sectors = 2 limit=64 [ 770.526231][T10459] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 770.544189][ T6038] bond0: (slave syz_tun): Releasing backup interface [ 770.600198][ T28] audit: type=1400 audit(2051.556:16083): avc: denied { cpu } for pid=12902 comm="syz.0.15289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 770.840636][ T28] audit: type=1326 audit(2051.806:16084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12942 comm="syz.0.15296" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe020c2de99 code=0x7ffc0000 [ 770.886591][T12916] vcan0 speed is unknown, defaulting to 1000 [ 771.170939][T12916] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.178214][T12916] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.185804][T12916] bridge_slave_0: entered allmulticast mode [ 771.193377][T12916] bridge_slave_0: entered promiscuous mode [ 771.202691][T12916] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.210268][T12916] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.217777][T12916] bridge_slave_1: entered allmulticast mode [ 771.224730][T12916] bridge_slave_1: entered promiscuous mode [ 771.247794][T12916] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 771.258632][T12916] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 771.281821][T12916] team0: Port device team_slave_0 added [ 771.288772][T12916] team0: Port device team_slave_1 added [ 771.306863][T12916] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 771.314190][T12916] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.368803][T12916] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 771.420463][T12916] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 771.435862][T12916] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 771.483133][T12916] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 771.555670][T12916] hsr_slave_0: entered promiscuous mode [ 771.562271][T12916] hsr_slave_1: entered promiscuous mode [ 771.568342][T12916] debugfs: 'hsr0' already exists in 'hsr' [ 771.576653][T12916] Cannot create hsr debugfs directory [ 771.806052][T12992] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15312'. [ 771.820167][T12992] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15312'. [ 772.046888][T12916] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 772.234739][T12916] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 772.243214][T12916] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 772.497372][T12916] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 772.534061][T12916] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 772.553761][T12916] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 772.600736][T12916] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 772.641168][T12916] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 772.808245][T12916] 8021q: adding VLAN 0 to HW filter on device bond0 [ 772.821742][T13064] netlink: 'syz.6.15335': attribute type 4 has an invalid length. [ 772.834709][T12916] 8021q: adding VLAN 0 to HW filter on device team0 [ 772.852148][T13064] netlink: 'syz.6.15335': attribute type 4 has an invalid length. [ 772.855533][ T9550] bridge0: port 1(bridge_slave_0) entered blocking state [ 772.867201][ T9550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 772.897319][T26709] bridge0: port 2(bridge_slave_1) entered blocking state [ 772.904563][T26709] bridge0: port 2(bridge_slave_1) entered forwarding state [ 773.183096][T12916] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 773.416524][T12916] veth0_vlan: entered promiscuous mode [ 773.433964][T12916] veth1_vlan: entered promiscuous mode [ 773.476019][T12916] veth0_macvtap: entered promiscuous mode [ 773.491351][T12916] veth1_macvtap: entered promiscuous mode [ 773.518799][T12916] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 773.553490][T12916] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 773.571842][T26709] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.587340][T26709] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.648315][T26709] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.663523][T26709] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 773.874658][T13187] vcan0 speed is unknown, defaulting to 1000 [ 774.296944][ T28] kauditd_printk_skb: 70 callbacks suppressed [ 774.296964][ T28] audit: type=1400 audit(2055.256:16155): avc: denied { write } for pid=13210 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 774.413674][ T28] audit: type=1400 audit(2055.376:16156): avc: denied { write } for pid=13235 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 774.573321][ T28] audit: type=1400 audit(2055.536:16157): avc: denied { accept } for pid=13251 comm="syz.8.15365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 774.681892][ T28] audit: type=1400 audit(2055.646:16158): avc: denied { setattr } for pid=13264 comm="syz.8.15369" name="/" dev="configfs" ino=58 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 774.746542][ T28] audit: type=1400 audit(2055.666:16159): avc: denied { write } for pid=13241 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 774.782175][T13272] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15371'. [ 774.806749][ T28] audit: type=1400 audit(2055.766:16160): avc: denied { write } for pid=13274 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 775.040463][T13307] loop6: detected capacity change from 0 to 512 [ 775.074506][ T28] audit: type=1400 audit(2056.036:16161): avc: denied { write } for pid=13288 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 775.108634][T13307] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 775.124743][T13314] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 775.142418][ T28] audit: type=1400 audit(2056.106:16162): avc: denied { create } for pid=13315 comm="syz.8.15381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 775.169011][ T28] audit: type=1400 audit(2056.106:16163): avc: denied { write } for pid=13302 comm="syz.6.15379" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 775.190797][T13314] SELinux: failed to load policy [ 775.196680][T13318] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15382'. [ 775.225209][ T28] audit: type=1400 audit(2056.186:16164): avc: denied { write } for pid=13319 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 775.253457][T13318] batadv0: entered promiscuous mode [ 775.268976][T13318] batadv0: entered allmulticast mode [ 775.276409][T13325] batadv0: left promiscuous mode [ 775.281813][T13325] batadv0: left allmulticast mode [ 775.657996][T10899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 777.777646][T13521] netlink: 'syz.0.15449': attribute type 4 has an invalid length. [ 777.787823][T13520] xt_hashlimit: size too large, truncated to 1048576 [ 777.801424][T13521] netlink: 'syz.0.15449': attribute type 4 has an invalid length. [ 777.881979][T13524] gretap1: entered promiscuous mode [ 778.056183][T13536] netlink: 'syz.8.15457': attribute type 1 has an invalid length. [ 778.140638][T13536] bond1: (slave geneve2): making interface the new active one [ 778.170801][T13536] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 778.191671][ T12] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 20004 - 0 [ 778.231288][ T12] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 20004 - 0 [ 778.255895][ T12] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 20004 - 0 [ 778.286281][ T12] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 20004 - 0 [ 778.406570][T13563] netlink: 'syz.6.15468': attribute type 2 has an invalid length. [ 778.444106][T13563] .d: entered promiscuous mode [ 779.787707][T13567] uprobe: syz.9.15469:13567 failed to unregister, leaking uprobe [ 779.787760][T13570] uprobe: syz.7.15470:13570 failed to unregister, leaking uprobe [ 779.847986][T13578] loop9: detected capacity change from 0 to 1024 [ 779.861563][T13578] EXT4-fs: Ignoring removed bh option [ 779.874629][T13578] EXT4-fs (loop9): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 779.902781][T13578] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 779.915669][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 779.915683][ T28] audit: type=1400 audit(2060.886:16200): avc: denied { mount } for pid=13583 comm="syz.0.15475" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 779.962748][ T28] audit: type=1400 audit(2060.926:16201): avc: denied { write } for pid=13577 comm="syz.9.15473" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 780.021235][T13594] netlink: 24 bytes leftover after parsing attributes in process `syz.0.15478'. [ 780.060322][ T28] audit: type=1400 audit(2061.026:16202): avc: denied { bind } for pid=13595 comm="syz.8.15479" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 780.134040][T12916] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 780.188426][T13608] netlink: 200 bytes leftover after parsing attributes in process `syz.9.15485'. [ 780.247573][T13611] xt_hashlimit: size too large, truncated to 1048576 [ 780.295500][T13622] loop9: detected capacity change from 0 to 128 [ 780.333823][T13622] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 780.380348][ T28] audit: type=1400 audit(2061.336:16203): avc: denied { write } for pid=13621 comm="syz.9.15490" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 780.669149][T12916] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 781.238855][ T28] audit: type=1400 audit(2062.146:16204): avc: denied { write } for pid=13657 comm="syz.0.15505" path="socket:[421787]" dev="sockfs" ino=421787 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 781.531489][ T28] audit: type=1400 audit(2062.496:16205): avc: denied { ioctl } for pid=13672 comm="syz.6.15511" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 781.627768][ T28] audit: type=1400 audit(2062.586:16206): avc: denied { setopt } for pid=13683 comm="syz.8.15516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 781.979506][ T28] audit: type=1400 audit(2062.946:16207): avc: denied { read write } for pid=13689 comm="syz.6.15518" name="sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 782.040944][ T28] audit: type=1400 audit(2062.946:16208): avc: denied { open } for pid=13689 comm="syz.6.15518" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 784.526996][T13875] netlink: 8 bytes leftover after parsing attributes in process `syz.6.15557'. [ 784.627316][T13879] vcan0 speed is unknown, defaulting to 1000 [ 785.077935][T13905] netlink: 'syz.0.15560': attribute type 7 has an invalid length. [ 785.103639][T13905] netlink: 'syz.0.15560': attribute type 7 has an invalid length. [ 785.191038][ T3389] IPVS: starting estimator thread 0... [ 785.279212][T13913] IPVS: using max 2208 ests per chain, 110400 per kthread [ 785.489742][T13945] vcan0 speed is unknown, defaulting to 1000 [ 785.520263][ T28] audit: type=1326 audit(2066.486:16209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13949 comm="syz.6.15566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683950de99 code=0x7ffc0000 [ 785.616303][ T28] audit: type=1326 audit(2066.486:16210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13949 comm="syz.6.15566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683950de99 code=0x7ffc0000 [ 785.716112][ T28] audit: type=1326 audit(2066.486:16211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13949 comm="syz.6.15566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683950de99 code=0x7ffc0000 [ 785.814809][ T28] audit: type=1326 audit(2066.486:16212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13949 comm="syz.6.15566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683950de99 code=0x7ffc0000 [ 785.905257][ T28] audit: type=1326 audit(2066.516:16213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13949 comm="syz.6.15566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f683950de99 code=0x7ffc0000 [ 785.945428][ T28] audit: type=1326 audit(2066.536:16214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13949 comm="syz.6.15566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683950de99 code=0x7ffc0000 [ 785.971091][ T28] audit: type=1326 audit(2066.536:16215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13949 comm="syz.6.15566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683950de99 code=0x7ffc0000 [ 786.100323][ T28] audit: type=1326 audit(2066.536:16216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13949 comm="syz.6.15566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683950de99 code=0x7ffc0000 [ 786.212400][ T28] audit: type=1326 audit(2066.536:16217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13949 comm="syz.6.15566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683950de99 code=0x7ffc0000 [ 786.329213][ T28] audit: type=1326 audit(2066.536:16218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13949 comm="syz.6.15566" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f683950de99 code=0x7ffc0000 [ 786.681878][ T9539] IPVS: stop unused estimator thread 0... [ 786.733883][T14031] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.15573'. [ 786.754596][T14031] netlink: zone id is out of range [ 786.868015][T14043] erspan0: entered promiscuous mode [ 786.885812][T14043] erspan0: left promiscuous mode [ 786.982693][T14049] syzkaller0: entered promiscuous mode [ 786.998665][T14049] syzkaller0: entered allmulticast mode [ 787.181479][ T9539] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.215326][ T9539] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.258672][ T9539] netdevsim netdevsim1 eth3 (unregistering): unset [1, 1] type 2 family 0 port 50134 - 0 [ 787.291023][ T9539] netdevsim netdevsim1 eth3 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 787.549914][T14083] loop6: detected capacity change from 0 to 512 [ 787.575813][T14083] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 787.592218][T14085] xt_hashlimit: size too large, truncated to 1048576 [ 787.615993][T14083] EXT4-fs error (device loop6): __ext4_iget:5533: inode #16: block 8388380: comm syz.6.15594: invalid block [ 787.667029][T14083] loop6: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 787.668576][T14083] EXT4-fs (loop6): Remounting filesystem read-only [ 787.677785][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 787.677804][ C0] EXT4-fs (loop6): initial error at time 2068: __ext4_iget:5533: inode 16: block 8388380 [ 787.677878][ C0] EXT4-fs (loop6): last error at time 2068: __ext4_iget:5533: inode 16: block 8388380 [ 787.780359][T14083] EXT4-fs (loop6): 1 orphan inode deleted [ 787.792343][T14083] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 787.860743][T10899] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 787.959822][ T9539] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 787.995233][ T9539] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.015022][ T9539] netdevsim netdevsim1 eth2 (unregistering): unset [1, 1] type 2 family 0 port 50134 - 0 [ 788.041495][ T9539] netdevsim netdevsim1 eth2 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 788.127795][ T9539] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 788.172004][ T9539] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.215973][ T9539] netdevsim netdevsim1 eth1 (unregistering): unset [1, 1] type 2 family 0 port 50134 - 0 [ 788.245737][ T9539] netdevsim netdevsim1 eth1 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 788.366185][ T9539] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 788.389323][ T9539] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 788.414727][ T9539] netdevsim netdevsim1 eth0 (unregistering): unset [1, 1] type 2 family 0 port 50134 - 0 [ 788.445616][ T9539] netdevsim netdevsim1 eth0 (unregistering): unset [1, 2] type 2 family 0 port 20004 - 0 [ 788.698234][T14142] vcan0 speed is unknown, defaulting to 1000 [ 788.775929][ T9539] vlan2: left allmulticast mode [ 788.785990][ T9539] vlan2: left promiscuous mode [ 788.796600][ T9539] bridge0: port 3(vlan2) entered disabled state [ 788.815022][ T9539] bridge_slave_1: left allmulticast mode [ 788.829340][ T9539] bridge_slave_1: left promiscuous mode [ 788.841066][ T9539] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.858175][ T9539] bridge_slave_0: left allmulticast mode [ 788.864226][ T9539] bridge_slave_0: left promiscuous mode [ 788.870943][ T9539] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.882167][ T9539] dvmrp8: left allmulticast mode [ 789.047751][T14196] xt_hashlimit: size too large, truncated to 1048576 [ 789.195932][ T9539] gretap0 (unregistering): left promiscuous mode [ 789.236068][ T9539] bond3 (unregistering): (slave gretap2): Releasing active interface [ 789.313673][ T9539]  (unregistering): left promiscuous mode [ 789.332880][ T9539] bond_slave_0: left promiscuous mode [ 789.355636][ T9539] bond_slave_1: left promiscuous mode [ 789.403665][ T9539]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 789.436494][ T9539]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 789.452618][ T9539]  (unregistering): Released all slaves [ 789.463608][ T9539] bond1 (unregistering): Released all slaves [ 789.482013][ T9539] bond2 (unregistering): Released all slaves [ 789.492906][ T9539] bond0 (unregistering): Released all slaves [ 789.502873][ T9539] bond3 (unregistering): Released all slaves [ 789.514786][ T9539] bond4 (unregistering): (slave bond5): Releasing backup interface [ 789.525304][ T9539] bond4 (unregistering): Released all slaves [ 789.537343][ T9539] bond5 (unregistering): Released all slaves [ 789.630267][ T9539] tipc: Disabling bearer [ 789.654683][ T9539] tipc: Left network mode [ 789.666346][T14225] netlink: 84 bytes leftover after parsing attributes in process `syz.8.15624'. [ 789.837705][ T9539] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 789.851592][ T9539] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 789.872801][ T9539] veth1_macvtap: left promiscuous mode [ 789.887351][ T9539] veth0_macvtap: left promiscuous mode [ 789.920000][ T9539] veth1_vlan: left promiscuous mode [ 789.934805][ T9539] veth0_vlan: left promiscuous mode [ 790.039474][ T9539] smc: removing net device vlan1 with user defined pnetid SYZ2 [ 790.123937][ T3020] 8021q: adding VLAN 0 to HW filter on device eth1 [ 790.229946][T14279] xt_hashlimit: size too large, truncated to 1048576 [ 790.297833][ T9539] IPVS: stop unused estimator thread 0... [ 790.500511][T14314] netlink: 'syz.6.15642': attribute type 39 has an invalid length. [ 790.552161][T14318] loop9: detected capacity change from 0 to 512 [ 790.569692][ T28] kauditd_printk_skb: 25 callbacks suppressed [ 790.569708][ T28] audit: type=1400 audit(2071.536:16244): avc: denied { write } for pid=14284 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 790.620285][T14318] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 790.660066][T14318] EXT4-fs (loop9): 1 truncate cleaned up [ 790.672673][T14318] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 790.726534][ T28] audit: type=1400 audit(2071.686:16245): avc: denied { write } for pid=14315 comm="syz.9.15645" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 790.802981][ T28] audit: type=1400 audit(2071.766:16246): avc: denied { write } for pid=14325 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 790.946452][ T3020] 8021q: adding VLAN 0 to HW filter on device eth2 [ 791.278955][T12916] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 791.334028][T14398] loop9: detected capacity change from 0 to 512 [ 791.464199][ T28] audit: type=1400 audit(2072.426:16247): avc: denied { write } for pid=14388 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 791.549282][ T28] audit: type=1400 audit(2072.506:16248): avc: denied { write } for pid=14412 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 791.617869][ T28] audit: type=1400 audit(2072.576:16249): avc: denied { connect } for pid=14413 comm="syz.9.15661" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 791.664832][ T3020] 8021q: adding VLAN 0 to HW filter on device eth3 [ 791.966972][ T28] audit: type=1400 audit(2072.926:16250): avc: denied { write } for pid=14421 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 792.094358][ T28] audit: type=1400 audit(2073.056:16251): avc: denied { write } for pid=14447 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 792.190133][ T3020] 8021q: adding VLAN 0 to HW filter on device eth4 [ 792.331916][T14473] netlink: 'syz.0.15679': attribute type 1 has an invalid length. [ 792.374624][T14473] bond9: entered promiscuous mode [ 792.380293][T14473] 8021q: adding VLAN 0 to HW filter on device bond9 [ 792.408960][T14473] 8021q: adding VLAN 0 to HW filter on device bond9 [ 792.424050][T14473] bond9: (slave vti0): The slave device specified does not support setting the MAC address [ 792.436469][T14473] bond9: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 792.449158][T14473] bond9: (slave vti0): making interface the new active one [ 792.456587][T14473] vti0: entered promiscuous mode [ 792.464206][T14473] bond9: (slave vti0): Enslaving as an active interface with an up link [ 792.743657][T14497] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15689'. [ 792.781317][T14502] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15688'. [ 793.694676][T14625] netlink: 'syz.8.15701': attribute type 1 has an invalid length. [ 793.706674][T14625] netlink: 101600 bytes leftover after parsing attributes in process `syz.8.15701'. [ 793.718107][ T28] audit: type=1400 audit(2074.686:16252): avc: denied { bind } for pid=14624 comm="syz.8.15701" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 793.767575][ T28] audit: type=1400 audit(2074.686:16253): avc: denied { node_bind } for pid=14624 comm="syz.8.15701" saddr=fe80::26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 793.793931][T14629] netlink: 71 bytes leftover after parsing attributes in process `syz.8.15702'. [ 794.045988][T14650] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 794.085917][T14657] netlink: 'syz.8.15712': attribute type 3 has an invalid length. [ 794.106994][T14657] netlink: 13435 bytes leftover after parsing attributes in process `syz.8.15712'. [ 795.041068][T14703] bond0: (slave dummy0): Releasing backup interface [ 795.068961][T14703] batman_adv: batadv0: Adding interface: dummy0 [ 795.075597][T14703] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 795.103735][T14703] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 795.176537][T14711] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15734'. [ 795.195659][T14711] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 795.204335][T14711] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 795.215477][T14711] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 795.224642][T14711] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 796.054566][ T28] kauditd_printk_skb: 4 callbacks suppressed [ 796.054597][ T28] audit: type=1400 audit(2077.016:16258): avc: denied { read } for pid=14746 comm="syz.7.15749" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 796.459142][ T28] audit: type=1400 audit(2077.416:16259): avc: denied { remount } for pid=14760 comm="syz.0.15755" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 797.718447][ T28] audit: type=1400 audit(2078.676:16260): avc: denied { mount } for pid=14780 comm="syz.6.15763" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 797.786107][ T28] audit: type=1400 audit(2078.726:16261): avc: denied { search } for pid=14780 comm="syz.6.15763" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 797.851792][ T28] audit: type=1400 audit(2078.726:16262): avc: denied { search } for pid=14780 comm="syz.6.15763" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 797.897240][ T28] audit: type=1400 audit(2078.726:16263): avc: denied { read } for pid=14780 comm="syz.6.15763" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 797.950984][ T28] audit: type=1400 audit(2078.726:16264): avc: denied { read open } for pid=14780 comm="syz.6.15763" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 797.999463][T22658] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 798.120090][ T35] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 798.311188][T14806] netlink: 24 bytes leftover after parsing attributes in process `syz.8.15775'. [ 798.540158][T14826] netlink: 16 bytes leftover after parsing attributes in process `syz.0.15784'. [ 798.581321][T14828] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15785'. [ 799.066219][T14854] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15795'. [ 799.145817][T14857] netlink: 36 bytes leftover after parsing attributes in process `syz.8.15796'. [ 799.226471][T14864] netlink: 36 bytes leftover after parsing attributes in process `syz.8.15796'. [ 800.290007][T14910] syz.7.15818: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 800.305430][T14910] CPU: 1 UID: 0 PID: 14910 Comm: syz.7.15818 Not tainted syzkaller #0 PREEMPT(lazy) [ 800.305463][T14910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 800.305477][T14910] Call Trace: [ 800.305487][T14910] [ 800.305499][T14910] __dump_stack+0x1d/0x30 [ 800.305531][T14910] dump_stack_lvl+0x95/0xd0 [ 800.305631][T14910] dump_stack+0x15/0x1b [ 800.305684][T14910] warn_alloc+0x145/0x1c0 [ 800.305718][T14910] ? audit_log_end+0x23d/0x250 [ 800.305766][T14910] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 800.305829][T14910] __vmalloc_node_range_noprof+0xaa/0x11e0 [ 800.305865][T14910] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 800.305898][T14910] ? avc_denied+0xe4/0x100 [ 800.305993][T14910] ? slow_avc_audit+0x14c/0x190 [ 800.306019][T14910] ? should_fail_ex+0x30/0x270 [ 800.306057][T14910] ? xskq_create+0x36/0xe0 [ 800.306162][T14910] ? should_failslab+0x8c/0xb0 [ 800.306291][T14910] vmalloc_user_noprof+0x7d/0xb0 [ 800.306328][T14910] ? xskq_create+0x80/0xe0 [ 800.306353][T14910] xskq_create+0x80/0xe0 [ 800.306385][T14910] xsk_init_queue+0x70/0xb0 [ 800.306482][T14910] xsk_setsockopt+0x3ef/0x640 [ 800.306552][T14910] ? __pfx_xsk_setsockopt+0x10/0x10 [ 800.306579][T14910] __sys_setsockopt+0x184/0x200 [ 800.306624][T14910] __x64_sys_setsockopt+0x64/0x80 [ 800.306708][T14910] x64_sys_call+0x2327/0x3020 [ 800.306740][T14910] do_syscall_64+0x136/0x3c0 [ 800.306774][T14910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 800.306908][T14910] RIP: 0033:0x7fc94bb9de99 [ 800.306933][T14910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 800.306960][T14910] RSP: 002b:00007fc94a5f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 800.306989][T14910] RAX: ffffffffffffffda RBX: 00007fc94be25fa0 RCX: 00007fc94bb9de99 [ 800.307009][T14910] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 800.307027][T14910] RBP: 00007fc94bc33eaf R08: 0000000000000004 R09: 0000000000000000 [ 800.307075][T14910] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 800.307093][T14910] R13: 00007fc94be26038 R14: 00007fc94be25fa0 R15: 00007ffc21d6b328 [ 800.307122][T14910] [ 800.307132][T14910] Mem-Info: [ 800.354555][ T28] audit: type=1400 audit(2081.256:16265): avc: denied { setopt } for pid=14909 comm="syz.7.15818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 800.356170][T14910] active_anon:57695 inactive_anon:157 isolated_anon:0 [ 800.356170][T14910] active_file:256 inactive_file:27995 isolated_file:0 [ 800.356170][T14910] unevictable:0 dirty:284 writeback:0 [ 800.356170][T14910] slab_reclaimable:4538 slab_unreclaimable:29360 [ 800.356170][T14910] mapped:29437 shmem:38320 pagetables:4426 [ 800.356170][T14910] sec_pagetables:0 bounce:0 [ 800.356170][T14910] kernel_misc_reclaimable:0 [ 800.356170][T14910] free:1802012 free_pcp:10815 free_cma:0 [ 800.599472][T14910] Node 0 active_anon:230896kB inactive_anon:628kB active_file:1024kB inactive_file:111980kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117748kB dirty:1136kB writeback:0kB shmem:153280kB kernel_stack:6016kB pagetables:17820kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 800.630722][T14910] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 800.661206][T14910] lowmem_reserve[]: 0 2878 7857 7857 [ 800.666610][T14910] Node 0 DMA32 free:2944140kB boost:0kB min:4128kB low:7052kB high:9976kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2947664kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:3524kB free_cma:0kB [ 800.698874][T14910] lowmem_reserve[]: 0 0 4978 4978 [ 800.704089][T14910] Node 0 Normal free:4248548kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0KB free_highatomic:0KB active_anon:230896kB inactive_anon:628kB active_file:1024kB inactive_file:111980kB unevictable:0kB writepending:1136kB zspages:0kB present:5242880kB managed:5098236kB mlocked:0kB bounce:0kB free_pcp:39560kB local_pcp:26544kB free_cma:0kB [ 800.738315][T14910] lowmem_reserve[]: 0 0 0 0 [ 800.743024][T14910] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 800.755800][T14910] Node 0 DMA32: 3*4kB (M) 2*8kB (M) 3*16kB (M) 4*32kB (M) 3*64kB (M) 2*128kB (M) 2*256kB (M) 2*512kB (M) 3*1024kB (M) 3*2048kB (M) 716*4096kB (M) = 2944140kB [ 800.772729][T14910] Node 0 Normal: 844*4kB (UM) 436*8kB (UME) 222*16kB (UM) 820*32kB (M) 395*64kB (M) 182*128kB (ME) 127*256kB (UME) 78*512kB (UME) 41*1024kB (UME) 15*2048kB (UME) 981*4096kB (UM) = 4248560kB [ 800.791752][T14910] Node 0 hugepages_total=4 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 800.801838][T14910] 66731 total pagecache pages [ 800.806560][T14910] 170 pages in swap cache [ 800.810971][T14910] Free swap = 121840kB [ 800.815152][T14910] Total swap = 124996kB [ 800.819434][T14910] 2097051 pages RAM [ 800.823273][T14910] 0 pages HighMem/MovableOnly [ 800.827978][T14910] 81736 pages reserved [ 800.918366][ T28] audit: type=1400 audit(2081.876:16266): avc: denied { bind } for pid=14921 comm="syz.6.15823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 800.948851][ T28] audit: type=1400 audit(2081.876:16267): avc: denied { node_bind } for pid=14921 comm="syz.6.15823" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 801.150699][T14936] netlink: 32 bytes leftover after parsing attributes in process `syz.9.15829'. [ 801.151701][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 801.151744][ T28] audit: type=1400 audit(2082.116:16269): avc: denied { write } for pid=14935 comm="syz.9.15829" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 801.843362][T15002] xt_hashlimit: size too large, truncated to 1048576 [ 802.257187][T15014] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.292258][T15014] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.393685][T15038] syzkaller0: entered promiscuous mode [ 802.406479][T15038] syzkaller0: entered allmulticast mode [ 802.480395][T15014] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.490860][T15014] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.527266][T15052] bond8: entered allmulticast mode [ 802.534258][T15052] ip6gre5: entered allmulticast mode [ 802.541604][T15049] bond8: left allmulticast mode [ 802.546636][T15049] ip6gre5: left allmulticast mode [ 802.581864][T15014] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.597014][T15014] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.633639][ T28] audit: type=1400 audit(2083.596:16270): avc: denied { append } for pid=15058 comm="syz.7.15846" name="icmp6" dev="proc" ino=4026533677 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 802.681278][T15014] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 802.699357][T15014] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 802.712646][T15062] netlink: 84 bytes leftover after parsing attributes in process `syz.7.15847'. [ 802.744148][ T3808] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.753165][ T3808] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.772617][ T3808] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.793226][ T3808] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.825132][ T3808] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.845242][ T3808] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.871238][ T3808] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 802.890971][ T3808] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 802.981453][ T28] audit: type=1400 audit(2083.946:16271): avc: denied { write } for pid=15067 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 803.033209][ T28] audit: type=1400 audit(2083.996:16272): avc: denied { write } for pid=15080 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 803.374779][ T28] audit: type=1326 audit(2084.326:16273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15051 comm="syz.9.15844" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56524de99 code=0x7fc00000 [ 803.429749][T15099] netlink: 4 bytes leftover after parsing attributes in process `syz.6.15857'. [ 803.448040][T15099] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 803.584011][ T28] audit: type=1400 audit(2084.546:16274): avc: denied { bind } for pid=15103 comm="syz.9.15858" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 803.616065][T15111] tipc: Failed to remove unknown binding: 66,1,1/0:3037000339/3037000341 [ 803.748378][ T28] audit: type=1400 audit(2084.706:16275): avc: denied { write } for pid=15105 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 803.843149][ T28] audit: type=1400 audit(2084.806:16276): avc: denied { write } for pid=15130 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 803.969035][ T28] audit: type=1400 audit(2084.926:16277): avc: denied { write } for pid=15139 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.030925][ T28] audit: type=1400 audit(2084.996:16278): avc: denied { write } for pid=15156 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 804.081750][T15162] netlink: 12 bytes leftover after parsing attributes in process `syz.8.15871'. [ 804.258961][T15174] netlink: 20 bytes leftover after parsing attributes in process `syz.9.15875'. [ 804.584195][T15207] SELinux: Context system_u:object_r:ssh_exec_t:s0 is not valid (left unmapped). [ 805.030066][T15238] netlink: 24 bytes leftover after parsing attributes in process `syz.7.15899'. [ 805.678231][T15261] netlink: 11575 bytes leftover after parsing attributes in process `syz.8.15907'. [ 806.097637][T15278] netdevsim netdevsim8 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 806.134025][T15278] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.166855][T15278] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 806.246774][T15278] netdevsim netdevsim8 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 806.286012][T15278] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.302695][T15278] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 806.319942][T15288] netlink: 'syz.7.15918': attribute type 1 has an invalid length. [ 806.348496][T15288] 8021q: adding VLAN 0 to HW filter on device bond9 [ 806.411777][T15288] team0: Port device syz_tun removed [ 806.438470][T15288] bond9: (slave syz_tun): Enslaving as a backup interface with an up link [ 806.497317][T15278] netdevsim netdevsim8 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 806.526260][T15278] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.537789][T15278] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 806.627645][T15278] netdevsim netdevsim8 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 806.658734][T15278] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 806.672716][T15278] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 806.794568][ T9548] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 806.818759][ T9548] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 806.838022][T15310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15928'. [ 806.851938][ T9548] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 806.913940][ T9548] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 806.923828][ T9548] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 806.943862][ T9548] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 806.973789][ T9548] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 806.982326][ T9548] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 806.997955][ T9548] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 807.048661][ T9548] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 807.080531][ T9548] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 807.096289][ T9548] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 807.172953][ T28] kauditd_printk_skb: 9 callbacks suppressed [ 807.172969][ T28] audit: type=1326 audit(2088.136:16288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15328 comm="syz.7.15935" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc94bb9de99 code=0x0 [ 807.268937][T15340] l2tp_ppp: sess 2/0: no socket in recv [ 807.382536][ T28] audit: type=1400 audit(2088.336:16289): avc: denied { create } for pid=15346 comm="syz.6.15941" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 807.464257][T15351] netlink: 'syz.9.15943': attribute type 1 has an invalid length. [ 807.491700][T15351] bond1: entered promiscuous mode [ 807.507829][T15351] 8021q: adding VLAN 0 to HW filter on device bond1 [ 807.519291][ C0] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 807.627087][T15351] veth3: entered promiscuous mode [ 807.647423][T15351] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 807.784230][T15355] -1O2~: renamed from syzkaller0 [ 808.273830][ T28] audit: type=1400 audit(2089.236:16290): avc: denied { create } for pid=15365 comm="syz.9.15949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 808.422685][T15374] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.444101][T15374] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.519422][T15374] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.540764][T15374] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.580748][T15386] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15956'. [ 808.590660][T15386] bridge_slave_0: default FDB implementation only supports local addresses [ 808.615207][T15386] netlink: 12 bytes leftover after parsing attributes in process `syz.6.15956'. [ 808.625286][T15386] bridge_slave_0: default FDB implementation only supports local addresses [ 808.676974][T15374] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.704571][T15374] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.786408][T15393] 9p: Bad value for 'rfdno' [ 808.804658][T15374] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 808.839296][T15374] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 808.868303][T15394] geneve2: entered allmulticast mode [ 808.930559][ T9548] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.938939][ T9548] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.969988][ T12] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 808.978535][ T12] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.002049][ T12] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.016572][ T12] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.040311][ T9563] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 809.048726][ T9563] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 809.716472][T15443] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.735744][T15443] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 809.751304][T15443] netdevsim netdevsim8 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 809.813060][T15443] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.828568][T15443] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 809.863648][T15443] netdevsim netdevsim8 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 809.935839][T15456] loop9: detected capacity change from 0 to 512 [ 809.949886][T15443] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 809.967102][T15456] EXT4-fs (loop9): 1 truncate cleaned up [ 809.973647][T15456] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 809.990243][T15458] 9pnet_fd: Insufficient options for proto=fd [ 809.998028][T15443] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 810.026166][T15443] netdevsim netdevsim8 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 810.047268][T15456] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.15984: bg 0: block 465: padding at end of block bitmap is not set [ 810.048258][ T28] audit: type=1400 audit(2091.006:16291): avc: denied { write } for pid=15455 comm="syz.9.15984" name="file0" dev="loop9" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 810.084279][ T28] audit: type=1400 audit(2091.006:16292): avc: denied { link } for pid=15455 comm="syz.9.15984" name="file0" dev="loop9" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 810.125500][T15443] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 810.144069][T12916] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 810.155384][T15443] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 810.172622][T15443] netdevsim netdevsim8 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 810.200280][T15468] netlink: 'syz.6.15990': attribute type 1 has an invalid length. [ 810.210405][T15470] netlink: 24 bytes leftover after parsing attributes in process `syz.9.15988'. [ 810.240252][T15466] xt_hashlimit: size too large, truncated to 1048576 [ 810.251961][T15472] netlink: 136 bytes leftover after parsing attributes in process `syz.0.15991'. [ 810.254706][T15468] 8021q: adding VLAN 0 to HW filter on device bond1 [ 810.313519][T15474] bond1: (slave veth3): Enslaving as an active interface with a down link [ 810.339496][T15468] batman_adv: batadv0: Removing interface: dummy0 [ 810.370575][T15468] bond1: (slave dummy0): making interface the new active one [ 810.385736][T15468] dummy0: entered promiscuous mode [ 810.396848][T15468] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 810.464750][T15492] netlink: 24 bytes leftover after parsing attributes in process `syz.9.15995'. [ 810.665558][T15510] netlink: 'syz.9.16004': attribute type 1 has an invalid length. [ 810.704393][T15510] 8021q: adding VLAN 0 to HW filter on device bond2 [ 810.725766][T15517] bond2: (slave syz_tun): Enslaving as a backup interface with an up link [ 810.792062][T15529] loop9: detected capacity change from 0 to 512 [ 810.807663][T15529] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 810.829566][ T28] audit: type=1400 audit(2091.796:16293): avc: denied { bind } for pid=15532 comm="syz.0.16014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 810.851372][T15529] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 810.879543][ T28] audit: type=1400 audit(2091.846:16294): avc: denied { write } for pid=15527 comm="syz.9.16012" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 810.904636][ T9548] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.914218][ T9548] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 810.923318][ T9548] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 810.937436][ T9563] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.946457][ T9563] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 810.954928][ T9563] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 810.967527][ T12] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 810.979923][ T12] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 810.988285][ T12] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 811.001454][ T9548] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 811.009964][ T9548] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 811.021948][ T9548] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 811.035091][ T28] audit: type=1400 audit(2091.986:16295): avc: denied { map } for pid=15527 comm="syz.9.16012" path="/132/bus/file1" dev="loop9" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 811.082875][T15548] netdevsim netdevsim8 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 811.095085][T15548] netdevsim netdevsim8 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 811.105444][T15548] netdevsim netdevsim8 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 811.109693][T12916] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.174990][T15548] netdevsim netdevsim8 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 811.193215][T15548] netdevsim netdevsim8 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 811.218322][T15548] netdevsim netdevsim8 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 811.276036][T15548] netdevsim netdevsim8 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 811.288499][T15548] netdevsim netdevsim8 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 811.311258][T15548] netdevsim netdevsim8 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 811.384306][T15548] netdevsim netdevsim8 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 811.406835][T15548] netdevsim netdevsim8 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20004 - 0 [ 811.419026][T15548] netdevsim netdevsim8 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 811.625600][T15580] netlink: 136 bytes leftover after parsing attributes in process `syz.9.16030'. [ 811.878536][T15609] netlink: 8 bytes leftover after parsing attributes in process `syz.0.16047'. [ 812.514891][T15626] netlink: 136 bytes leftover after parsing attributes in process `syz.7.16046'. [ 813.666921][T15672] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16067'. [ 813.785555][T15654] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.800685][T15654] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.810779][T15654] netdevsim netdevsim0 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 813.871669][T15654] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 813.896333][T15654] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 813.939297][T15654] netdevsim netdevsim0 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 814.006672][T15654] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 814.017826][T15654] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.028931][T15654] netdevsim netdevsim0 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 814.047458][ T28] audit: type=1400 audit(2095.006:16296): avc: denied { watch watch_reads } for pid=15685 comm="syz.7.16074" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 814.111725][T15654] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 814.121698][T15654] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 814.132171][T15654] netdevsim netdevsim0 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 814.196630][ T9563] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.205032][ T9563] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.213430][ T9563] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 814.226206][ T9563] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.234896][ T9563] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.243480][ T9563] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 814.256583][ T9563] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.264989][ T9563] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.273390][ T9563] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 814.286203][ T9563] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 814.294831][ T9563] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 814.303363][ T9563] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 815.015848][ T9563] netdevsim netdevsim8 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.024134][ T9563] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 20004 - 0 [ 815.032645][ T9563] netdevsim netdevsim8 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 815.044833][ T12] netdevsim netdevsim8 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.053229][ T12] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 20004 - 0 [ 815.061625][ T12] netdevsim netdevsim8 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 815.073605][ T12] netdevsim netdevsim8 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.081950][ T12] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 20004 - 0 [ 815.091139][ T12] netdevsim netdevsim8 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 815.103210][ T9563] netdevsim netdevsim8 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 815.111697][ T9563] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 20004 - 0 [ 815.120979][ T9563] netdevsim netdevsim8 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 815.149280][T15690] netlink: 24 bytes leftover after parsing attributes in process `syz.9.16077'. [ 815.246874][ T28] audit: type=1400 audit(2096.206:16297): avc: denied { connect } for pid=15705 comm="syz.0.16082" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 815.303031][T15709] vcan0 speed is unknown, defaulting to 1000 [ 815.379942][T15714] netlink: 'syz.6.16086': attribute type 11 has an invalid length. [ 815.397713][T15714] netlink: 52 bytes leftover after parsing attributes in process `syz.6.16086'. [ 815.459857][ T28] audit: type=1400 audit(2096.416:16298): avc: denied { connect } for pid=15718 comm="syz.9.16088" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 816.262829][ T28] audit: type=1400 audit(2097.226:16299): avc: denied { accept } for pid=15737 comm="syz.6.16094" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 816.268237][T15731] netlink: 136 bytes leftover after parsing attributes in process `syz.8.16089'. [ 816.485114][T15755] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16103'. [ 816.532387][ T28] audit: type=1326 audit(2097.496:16300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15762 comm="syz.9.16107" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56524de99 code=0x7ffc0000 [ 816.565300][ T28] audit: type=1326 audit(2097.496:16301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15762 comm="syz.9.16107" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56524de99 code=0x7ffc0000 [ 816.626295][ T28] audit: type=1326 audit(2097.496:16302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15762 comm="syz.9.16107" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56524de99 code=0x7ffc0000 [ 816.667354][ T28] audit: type=1326 audit(2097.496:16303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15762 comm="syz.9.16107" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa56524de99 code=0x7ffc0000 [ 816.754428][ T28] audit: type=1326 audit(2097.496:16304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15762 comm="syz.9.16107" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa56524dc02 code=0x7ffc0000 [ 816.814607][ T28] audit: type=1326 audit(2097.526:16305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15762 comm="syz.9.16107" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa56520e6ce code=0x7ffc0000 [ 817.377783][T15793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16120'. [ 817.387653][T15793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16120'. [ 817.437774][T15799] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16122'. [ 817.768805][T15807] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16126'. [ 817.827019][T15810] netlink: 24 bytes leftover after parsing attributes in process `syz.7.16128'. [ 817.994534][T15815] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.084334][T15815] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.155567][T15815] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.239416][T15815] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 818.323480][T26709] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.349534][T26709] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.373432][T26709] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.391244][T26709] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 818.629750][T15853] 9pnet: p9_errstr2errno: server reported unknown error Ð [ 818.710955][T15862] netlink: 'syz.9.16147': attribute type 1 has an invalid length. [ 818.733194][T15862] 8021q: adding VLAN 0 to HW filter on device bond3 [ 818.750773][T15862] bond3: (slave gretap1): Enslaving as a backup interface with an up link [ 818.778172][T15862] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 818.791363][T15862] bond3 (unregistering): Released all slaves [ 818.968012][T15878] netdevsim netdevsim7 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 818.994694][T15878] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.064465][T15878] netdevsim netdevsim7 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.080558][T15878] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.169979][T15878] netdevsim netdevsim7 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.197247][T15878] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.276938][T15878] netdevsim netdevsim7 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 819.287969][T15878] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 819.320153][T15916] netlink: 6 bytes leftover after parsing attributes in process `syz.6.16169'. [ 819.331308][T15916] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 819.365350][ T12] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.374664][ T12] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.387943][ T12] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.397363][ T12] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.411367][ T9563] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.420040][ T9563] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.434005][T26709] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 819.442542][T26709] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 819.952232][T15951] netlink: 136 bytes leftover after parsing attributes in process `syz.6.16182'. [ 820.376754][T15959] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.16186'. [ 820.400600][T15959] netlink: zone id is out of range [ 820.423762][T15959] netlink: zone id is out of range [ 820.437653][T15959] netlink: zone id is out of range [ 820.445157][T15959] netlink: zone id is out of range [ 820.451980][T15959] netlink: zone id is out of range [ 820.457427][T15959] netlink: zone id is out of range [ 820.466064][T15959] netlink: zone id is out of range [ 820.472714][T15959] netlink: zone id is out of range [ 820.478141][T15959] netlink: zone id is out of range [ 820.535647][ T28] kauditd_printk_skb: 38 callbacks suppressed [ 820.535665][ T28] audit: type=1400 audit(2101.496:16344): avc: denied { setopt } for pid=15978 comm="syz.9.16195" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 820.662643][T15981] netlink: 136 bytes leftover after parsing attributes in process `syz.6.16196'. [ 820.802679][ T28] audit: type=1400 audit(2101.766:16345): avc: denied { mount } for pid=15995 comm="syz.9.16202" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 820.864263][ T28] audit: type=1400 audit(2101.766:16346): avc: denied { watch watch_reads } for pid=15995 comm="syz.9.16202" path="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 820.982567][T15997] 8021q: adding VLAN 0 to HW filter on device eth0 [ 821.001724][T15997] 8021q: adding VLAN 0 to HW filter on device eth1 [ 821.021597][T15997] 8021q: adding VLAN 0 to HW filter on device eth2 [ 821.048937][T15997] 8021q: adding VLAN 0 to HW filter on device eth3 [ 821.089434][ T9563] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 821.543945][T16023] netlink: 136 bytes leftover after parsing attributes in process `syz.8.16211'. [ 821.632297][T16032] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16216'. [ 821.648998][T16038] netlink: 'syz.7.16215': attribute type 1 has an invalid length. [ 821.664449][T16032] bond2: (slave syz_tun): Removing an active aggregator [ 821.679976][T16032] bond2: (slave syz_tun): Releasing backup interface [ 821.712693][T16038] bond10: entered promiscuous mode [ 821.726379][T16038] 8021q: adding VLAN 0 to HW filter on device bond10 [ 821.748512][ T28] audit: type=1400 audit(2102.706:16347): avc: denied { mounton } for pid=16043 comm="syz.6.16220" path="/" dev="nullfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 821.796309][T16046] veth7: entered promiscuous mode [ 821.806272][T16046] bond10: (slave veth7): Enslaving as a backup interface with a down link [ 821.889849][ T9563] dummy0: left promiscuous mode [ 821.945510][T16060] netlink: 48 bytes leftover after parsing attributes in process `syz.7.16225'. [ 822.066591][T16071] netlink: 136 bytes leftover after parsing attributes in process `syz.8.16228'. [ 822.118776][T16076] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16239'. [ 822.189455][ T28] audit: type=1400 audit(2103.146:16348): avc: denied { write } for pid=16081 comm="syz.7.16231" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 822.478445][T16098] tmpfs: Bad value for 'nr_blocks' [ 822.509340][T16098] veth0_macvtap: left promiscuous mode [ 822.599620][T16111] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16244'. [ 822.820245][ T28] audit: type=1400 audit(2103.786:16349): avc: denied { write } for pid=16118 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 822.921776][ T28] audit: type=1400 audit(2103.876:16350): avc: denied { write } for pid=16149 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 822.971728][ T3020] veth0_macvtap: entered promiscuous mode [ 823.034614][T16159] 9p: Bad value for 'rfdno' [ 823.869235][ T28] audit: type=1400 audit(2104.806:16351): avc: denied { write } for pid=16173 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 823.958205][ T28] audit: type=1400 audit(2104.916:16352): avc: denied { write } for pid=16186 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 824.456661][T16210] __nla_validate_parse: 1 callbacks suppressed [ 824.456684][T16210] netlink: 8 bytes leftover after parsing attributes in process `syz.9.16270'. [ 825.010832][T16230] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16276'. [ 825.503309][T16243] netlink: 6 bytes leftover after parsing attributes in process `syz.9.16281'. [ 825.559651][T16243] net_ratelimit: 71 callbacks suppressed [ 825.559670][T16243] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 826.147751][T16270] 9pnet_fd: Insufficient options for proto=fd [ 826.228389][T16278] netlink: 6 bytes leftover after parsing attributes in process `syz.0.16294'. [ 826.242383][T16278] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 826.470226][T16300] netlink: 'syz.7.16302': attribute type 1 has an invalid length. [ 826.516515][T16300] 8021q: adding VLAN 0 to HW filter on device bond11 [ 826.603626][T16306] bond11: (slave gretap2): Enslaving as a backup interface with an up link [ 826.619754][ T12] bond11: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 826.692745][T16300] bond11 (unregistering): (slave gretap2): Removing an active aggregator [ 826.713722][T16300] bond11 (unregistering): (slave gretap2): Releasing backup interface [ 826.760752][T16300] bond11 (unregistering): Released all slaves [ 827.145503][T16327] netlink: 16 bytes leftover after parsing attributes in process `syz.9.16313'. [ 827.161888][T16330] lo: entered promiscuous mode [ 827.178344][T16330] tunl0: entered promiscuous mode [ 827.198043][T16330] gre0: entered promiscuous mode [ 827.236550][T16330] gretap0: entered promiscuous mode [ 827.274427][T16330] erspan0: entered promiscuous mode [ 827.287123][T16330] ip_vti0: entered promiscuous mode [ 827.304676][T16330] ip6_vti0: entered promiscuous mode [ 827.320375][T16330] sit0: entered promiscuous mode [ 827.354549][T16330] ip6tnl0: entered promiscuous mode [ 827.443840][T16330] ip6gre0: entered promiscuous mode [ 827.477251][T16330] syz_tun: entered promiscuous mode [ 827.549236][T16330] ip6gretap0: entered promiscuous mode [ 827.594538][T16330] vcan0: entered promiscuous mode [ 827.624778][T16330] bond0: entered promiscuous mode [ 827.634496][T16330] bond_slave_0: entered promiscuous mode [ 827.640473][T16330] bond_slave_1: entered promiscuous mode [ 827.648515][T16330] team0: entered promiscuous mode [ 827.664267][T16330] team_slave_0: entered promiscuous mode [ 827.676031][T16330] team_slave_1: entered promiscuous mode [ 827.694951][T16330] dummy0: entered promiscuous mode [ 827.732852][T16330] nlmon0: entered promiscuous mode [ 827.746232][T16330] batadv0: entered promiscuous mode [ 827.775554][T16330] vxcan0: entered promiscuous mode [ 827.806789][T16330] vxcan1: entered promiscuous mode [ 827.822505][T16330] veth0: entered promiscuous mode [ 827.838864][T16330] veth1: entered promiscuous mode [ 827.880453][T16330] wg0: entered promiscuous mode [ 827.914088][T16330] wg2: entered promiscuous mode [ 827.931713][T16330] veth0_to_bridge: entered promiscuous mode [ 827.964375][T16330] bridge_slave_0: entered promiscuous mode [ 828.003389][T16346] netlink: 24 bytes leftover after parsing attributes in process `syz.7.16320'. [ 828.037422][T16330] veth1_to_bridge: entered promiscuous mode [ 828.063586][T16330] bridge_slave_1: entered promiscuous mode [ 828.097726][T16330] veth0_to_bond: entered promiscuous mode [ 828.152520][T16330] veth1_to_bond: entered promiscuous mode [ 828.197786][T16330] veth0_to_team: entered promiscuous mode [ 828.243200][T16330] veth1_to_team: entered promiscuous mode [ 828.297462][T16330] veth0_to_batadv: entered promiscuous mode [ 828.329978][T16330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 828.344416][T16330] batadv_slave_0: entered promiscuous mode [ 828.374081][T16330] veth1_to_batadv: entered promiscuous mode [ 828.409018][T16330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 828.443453][T16330] batadv_slave_1: entered promiscuous mode [ 828.451352][T16330] xfrm0: entered promiscuous mode [ 828.488506][T16330] veth0_to_hsr: entered promiscuous mode [ 828.551569][T16330] veth1_to_hsr: entered promiscuous mode [ 828.606164][T16330] hsr0: entered promiscuous mode [ 828.629718][T16330] veth1_virt_wifi: entered promiscuous mode [ 828.637448][T16330] veth0_virt_wifi: entered promiscuous mode [ 828.671157][T16330] vlan1: entered promiscuous mode [ 828.682814][T16330] macvlan0: entered promiscuous mode [ 828.691510][T16330] macvlan1: entered promiscuous mode [ 828.698034][T16330] ipvlan0: entered promiscuous mode [ 828.705723][T16330] ipvlan1: entered promiscuous mode [ 828.716692][T16330] macvtap0: entered promiscuous mode [ 828.724321][T16330] macsec0: entered promiscuous mode [ 828.732164][T16330] geneve0: entered promiscuous mode [ 828.745947][T16330] geneve1: entered promiscuous mode [ 828.763423][T16330] >: entered promiscuous mode [ 828.771274][T16330] batadv0.5: entered promiscuous mode [ 828.778142][T16330] batadv0.7: entered promiscuous mode [ 828.791867][T16330] gre1: entered promiscuous mode [ 828.798250][T16330] netdevsim netdevsim6 eth0: entered promiscuous mode [ 828.817066][T16330] netdevsim netdevsim6 eth1: entered promiscuous mode [ 828.832434][T16330] netdevsim netdevsim6 eth2: entered promiscuous mode [ 828.855451][T16330] netdevsim netdevsim6 eth3: entered promiscuous mode [ 828.873461][T16330] bond1: entered promiscuous mode [ 828.886012][T16330] veth2: entered promiscuous mode [ 828.899684][T16330] veth3: entered promiscuous mode [ 828.912198][T16330] ip6tnl1: entered promiscuous mode [ 829.016197][T16357] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16322'. [ 829.063499][T16331] 8021q: adding VLAN 0 to HW filter on device bond1 [ 829.091572][T16331] 8021q: adding VLAN 0 to HW filter on device eth0 [ 829.101801][T16331] 8021q: adding VLAN 0 to HW filter on device eth1 [ 829.112164][T16331] 8021q: adding VLAN 0 to HW filter on device eth2 [ 829.123573][T16331] 8021q: adding VLAN 0 to HW filter on device eth3 [ 829.161837][T16349] netlink: 16 bytes leftover after parsing attributes in process `syz.7.16320'. [ 829.171115][T16349] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16320'. [ 829.200824][ T9563] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 829.216086][ T9563] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.231616][ T9563] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 829.257968][ T9563] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.280871][T16367] netlink: 'syz.7.16326': attribute type 1 has an invalid length. [ 829.313513][T16367] 8021q: adding VLAN 0 to HW filter on device bond11 [ 829.337253][ T9563] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 829.362347][ T9563] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.377555][ T9563] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 829.393027][ T9563] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 829.423316][T16367] bond11: (slave veth11): Enslaving as an active interface with a down link [ 829.464837][T16377] bond0: (slave dummy0): Releasing backup interface [ 829.508161][T16377] bond11: (slave dummy0): making interface the new active one [ 829.526584][T16377] dummy0: entered promiscuous mode [ 829.539505][T16377] bond11: (slave dummy0): Enslaving as an active interface with an up link [ 829.584038][T16387] netlink: 'syz.8.16331': attribute type 26 has an invalid length. [ 829.907964][T16399] 8021q: adding VLAN 0 to HW filter on device eth0 [ 829.929669][T16399] 8021q: adding VLAN 0 to HW filter on device eth1 [ 829.947867][T16399] 8021q: adding VLAN 0 to HW filter on device eth2 [ 829.969616][T16399] 8021q: adding VLAN 0 to HW filter on device eth3 [ 831.264934][T16442] netlink: 'syz.8.16353': attribute type 1 has an invalid length. [ 831.282935][ T9548] bond1: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 831.294933][ T9548] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 831.335594][ T9548] bond1: active interface up! [ 831.368624][T16442] bond2: entered promiscuous mode [ 831.386016][T16442] 8021q: adding VLAN 0 to HW filter on device bond2 [ 831.434678][T16454] netlink: 24 bytes leftover after parsing attributes in process `syz.9.16356'. [ 831.769049][T16450] A link change request failed with some changes committed already. Interface vxlan0 may have been left with an inconsistent configuration, please check. [ 831.848372][T16460] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.16357'. [ 831.860776][T16460] netlink: del zone limit has 4 unknown bytes [ 831.871445][T16452] bond2: (slave gretap2): making interface the new active one [ 831.895200][T16452] gretap2: entered promiscuous mode [ 831.924480][T16452] gretap2: left promiscuous mode [ 832.168043][T16486] netlink: 20 bytes leftover after parsing attributes in process `syz.6.16367'. [ 833.206027][T16536] vcan0 speed is unknown, defaulting to 1000 [ 834.644947][T16556] netlink: 'syz.7.16394': attribute type 1 has an invalid length. [ 834.707675][T16556] bond7: (slave veth0_to_bond): Releasing active interface [ 834.753831][T16556] bond12: (slave veth0_to_bond): making interface the new active one [ 834.796878][T16556] bond12: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 835.080378][ T28] audit: type=1400 audit(2116.046:16353): avc: denied { write } for pid=16573 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 835.171915][ T28] audit: type=1400 audit(2116.116:16354): avc: denied { write } for pid=16595 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 835.674708][T16627] tipc: Enabling of bearer rejected, already enabled [ 835.893748][ T28] audit: type=1400 audit(2116.856:16355): avc: denied { unmount } for pid=12916 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 836.037628][T16650] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16427'. [ 836.152319][T16667] netlink: 12 bytes leftover after parsing attributes in process `syz.7.16435'. [ 836.179287][T16667] netlink: 92 bytes leftover after parsing attributes in process `syz.7.16435'. [ 836.223088][T16671] tipc: Started in network mode [ 836.232246][T16671] tipc: Node identity ac14140f, cluster identity 4711 [ 836.242210][T16671] tipc: New replicast peer: 255.255.255.255 [ 836.255163][T16671] tipc: Enabled bearer , priority 10 [ 836.269368][T16674] lo: entered promiscuous mode [ 836.276580][T16674] tunl0: entered promiscuous mode [ 836.324163][T16674] gre0: entered promiscuous mode [ 836.445507][T16689] netlink: 24 bytes leftover after parsing attributes in process `syz.6.16443'. [ 836.586671][T16674] gretap0: entered promiscuous mode [ 836.618038][T16674] erspan0: entered promiscuous mode [ 836.653626][T16674] ip_vti0: entered promiscuous mode [ 836.680646][T16674] ip6_vti0: entered promiscuous mode [ 836.748678][T16674] sit0: left allmulticast mode [ 836.772328][T16704] netlink: 20 bytes leftover after parsing attributes in process `syz.9.16450'. [ 836.776974][T16674] ip6tnl0: entered promiscuous mode [ 836.808853][T16674] ip6gre0: entered promiscuous mode [ 836.819371][T16674] syz_tun: entered promiscuous mode [ 836.842470][T16674] vcan0: entered promiscuous mode [ 836.850970][T16674] team0: entered promiscuous mode [ 836.856322][T16674] team_slave_1: entered promiscuous mode [ 836.880210][T16674] bridge1: entered promiscuous mode [ 836.890965][T16674] nlmon0: entered promiscuous mode [ 836.902404][T16674] batadv0: entered promiscuous mode [ 836.984751][T16674] wg0: entered promiscuous mode [ 837.003499][T16674] wg2: entered promiscuous mode [ 837.052121][T16674] veth0_to_bridge: entered promiscuous mode [ 837.070016][T16674] bridge_slave_0: entered promiscuous mode [ 837.108233][T16674] veth1_to_bridge: entered promiscuous mode [ 837.162430][T16674] veth0_to_bond: entered promiscuous mode [ 837.184392][T16674] bond_slave_0: entered promiscuous mode [ 837.211881][T16674] veth1_to_bond: left allmulticast mode [ 837.241525][T16674] bond_slave_1: entered promiscuous mode [ 837.248633][T16674] veth1_to_team: entered promiscuous mode [ 837.282245][T16674] veth0_to_batadv: entered promiscuous mode [ 837.290194][T16674] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 837.298022][T16674] batadv_slave_0: entered promiscuous mode [ 837.305363][T16674] veth1_to_batadv: entered promiscuous mode [ 837.312735][T16674] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 837.333817][T16674] batadv_slave_1: entered promiscuous mode [ 837.350621][T16674] xfrm0: entered promiscuous mode [ 837.362418][T16674] veth0_to_hsr: entered promiscuous mode [ 837.370039][T16674] hsr_slave_0: entered promiscuous mode [ 837.378156][T16674] veth1_to_hsr: entered promiscuous mode [ 837.386609][T16674] hsr_slave_1: entered promiscuous mode [ 837.393322][T16674] veth1_virt_wifi: entered promiscuous mode [ 837.400871][T16674] veth0_virt_wifi: entered promiscuous mode [ 837.407939][T16674] geneve0: entered promiscuous mode [ 837.415193][T16674] geneve1: entered promiscuous mode [ 837.422601][T16674] vxlan0: entered promiscuous mode [ 837.428151][T16674] vxlan1: entered promiscuous mode [ 837.433708][T16674] macvlan2: entered promiscuous mode [ 837.440244][T16674] vxlan2: entered promiscuous mode [ 837.447208][T16674] macsec1: entered promiscuous mode [ 837.454488][T16674] syztnl1: entered promiscuous mode [ 837.460151][T16674] bond0: entered promiscuous mode [ 837.465644][T16674] gtp0: entered promiscuous mode [ 837.471111][T16674] bond1: entered promiscuous mode [ 837.476670][T16674] vxlan3: entered promiscuous mode [ 837.482880][T16674] r: entered promiscuous mode [ 837.487968][T16674] bridge1: left allmulticast mode [ 837.493921][T16674] ipvlan0: entered promiscuous mode [ 837.499544][T16674] ipvlan1: entered promiscuous mode [ 837.505043][T16674] sit1: entered promiscuous mode [ 837.511173][T16674] geneve2: entered promiscuous mode [ 837.516896][T16674] syztnl2: entered promiscuous mode [ 837.528172][T16674] geneve3: entered promiscuous mode [ 837.533733][T16674] geneve3: left allmulticast mode [ 837.541139][T16674] ip6erspan0: entered promiscuous mode [ 837.546924][T16674] bridge2: entered promiscuous mode [ 837.553749][T16674] : entered promiscuous mode [ 837.558873][T16674] ip6tnl1: entered promiscuous mode [ 837.564956][T16674] sit2: entered promiscuous mode [ 837.571396][T16674] bond2: entered promiscuous mode [ 837.576692][T16674] ip6gre1: entered promiscuous mode [ 837.582431][T16674] geneve4: entered promiscuous mode [ 837.588660][T16674] bond3: entered promiscuous mode [ 837.594263][T16674] geneve5: entered promiscuous mode [ 837.605747][T16674] ?M: entered promiscuous mode [ 837.612597][T16674] ip6tnl2: entered promiscuous mode [ 837.619033][T16674] ip6tnl3: entered promiscuous mode [ 837.628303][T16674] team1: left allmulticast mode [ 837.636623][T16674] gtp1: entered promiscuous mode [ 837.643208][T16674] gre1: entered promiscuous mode [ 837.649724][T16674] vlan0: entered promiscuous mode [ 837.657508][T16674] bond5: entered promiscuous mode [ 837.657634][T16742] netlink: 4 bytes leftover after parsing attributes in process `syz.7.16465'. [ 837.663064][T16674] : entered promiscuous mode [ 837.664871][T16674] ip6tnl4: entered promiscuous mode [ 837.684157][T16674] bond6: entered promiscuous mode [ 837.691073][T16674] geneve6: entered promiscuous mode [ 837.698066][T16674] bond8: entered promiscuous mode [ 837.703571][T16674] gretap1: entered promiscuous mode [ 837.709526][T16674] gretap1: left allmulticast mode [ 837.715265][T16674] sit3: entered promiscuous mode [ 837.723182][T16674] veth0: entered promiscuous mode [ 837.728721][T16674] veth1: entered promiscuous mode [ 837.735857][T16674] gre2: entered promiscuous mode [ 837.741978][T16674] netdevsim netdevsim0 eth0: entered promiscuous mode [ 837.751159][T16674] netdevsim netdevsim0 eth1: entered promiscuous mode [ 837.758221][T16674] netdevsim netdevsim0 eth2: entered promiscuous mode [ 837.766986][T16674] netdevsim netdevsim0 eth3: entered promiscuous mode [ 837.774411][T16674] erspan1: entered promiscuous mode [ 837.904071][T20548] tipc: Node number set to 2886997007 [ 837.926216][ T9555] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 837.935855][ T9555] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 837.961342][ T9555] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 837.997735][ T9555] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.036806][ T9555] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.046656][ T9555] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 838.128108][ T28] audit: type=1400 audit(2119.086:16356): avc: denied { write } for pid=16749 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 838.208282][ T28] audit: type=1400 audit(2119.146:16357): avc: denied { write } for pid=16779 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 838.284431][ T9555] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.304675][ T9555] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.313408][ T9555] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 838.340995][ T9555] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 838.362803][ T9555] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 838.400527][ T9555] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 838.432320][T16760] vcan0 speed is unknown, defaulting to 1000 [ 838.472611][T16805] netlink: 24 bytes leftover after parsing attributes in process `syz.7.16479'. [ 838.676139][ T28] audit: type=1326 audit(2119.636:16358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16825 comm="syz.9.16489" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56524de99 code=0x7ffc0000 [ 838.735087][ T28] audit: type=1326 audit(2119.636:16359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16825 comm="syz.9.16489" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56524de99 code=0x7ffc0000 [ 838.761482][ T28] audit: type=1326 audit(2119.636:16360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16825 comm="syz.9.16489" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56524de99 code=0x7ffc0000 [ 838.788256][ T28] audit: type=1326 audit(2119.636:16361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16825 comm="syz.9.16489" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa56524de99 code=0x7ffc0000 [ 838.817149][ T28] audit: type=1326 audit(2119.666:16362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16825 comm="syz.9.16489" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa56520e6ce code=0x7ffc0000 [ 839.603127][T16875] 9pnet_fd: Insufficient options for proto=fd [ 840.018362][T16882] vcan0 speed is unknown, defaulting to 1000 [ 840.717712][T16904] ip6erspan0: entered allmulticast mode [ 840.801772][T16923] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16527'. [ 840.821185][ T9563] dummy0: left promiscuous mode [ 841.002417][T16944] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16538'. [ 841.650483][T16997] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16554'. [ 841.699784][T17000] netlink: 'syz.8.16555': attribute type 1 has an invalid length. [ 841.803495][T17008] netlink: 'syz.8.16555': attribute type 10 has an invalid length. [ 841.812211][T17008] netlink: 40 bytes leftover after parsing attributes in process `syz.8.16555'. [ 841.907592][T17000] 8021q: adding VLAN 0 to HW filter on device bond3 [ 841.920978][T17002] bond0: (slave dummy0): Releasing backup interface [ 841.956498][T17002] bond3: (slave dummy0): Enslaving as a backup interface with an up link [ 841.979167][T17008] dummy0: entered promiscuous mode [ 841.985023][ T28] kauditd_printk_skb: 19 callbacks suppressed [ 841.985038][ T28] audit: type=1400 audit(2122.946:16382): avc: denied { getopt } for pid=17017 comm="syz.9.16562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 842.011414][T17008] bond3: (slave dummy0): Releasing backup interface [ 842.125704][T17034] vcan0 speed is unknown, defaulting to 1000 [ 842.226454][T17050] netlink: 12 bytes leftover after parsing attributes in process `syz.6.16573'. [ 842.244153][T17050] netlink: 'syz.6.16573': attribute type 1 has an invalid length. [ 842.382322][T17057] netlink: 'syz.6.16576': attribute type 1 has an invalid length. [ 842.410176][T17057] 8021q: adding VLAN 0 to HW filter on device bond2 [ 842.438459][T17057] bond1: (slave dummy0): Releasing active interface [ 842.458191][T17057] dummy0: left promiscuous mode [ 842.465155][T17057] bond1: (slave veth3): making interface the new active one [ 842.488549][T17069] netlink: 'syz.6.16576': attribute type 10 has an invalid length. [ 842.497548][T17057] bond2: (slave dummy0): Enslaving as a backup interface with an up link [ 842.506296][T17069] netlink: 40 bytes leftover after parsing attributes in process `syz.6.16576'. [ 842.519906][T26709] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 842.534993][T17072] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16579'. [ 842.547205][T17069] dummy0: entered promiscuous mode [ 842.564539][T17069] bond2: (slave dummy0): Removing an active aggregator [ 842.583734][T17069] bond2: (slave dummy0): Releasing backup interface [ 842.810859][ T28] audit: type=1326 audit(2123.776:16383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17031 comm="syz.0.16567" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe020c2de99 code=0x0 [ 842.979108][T17105] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16593'. [ 843.340846][ T28] audit: type=1400 audit(2124.306:16384): avc: denied { write } for pid=17107 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 843.421886][ T28] audit: type=1400 audit(2124.366:16385): avc: denied { write } for pid=17129 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 843.701227][T17136] 9pnet: p9_errstr2errno: server reported unknown error 0x000000 [ 843.742986][T17141] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16611'. [ 843.843697][ T28] audit: type=1400 audit(2124.806:16386): avc: denied { write } for pid=17133 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 843.912927][ T28] audit: type=1400 audit(2124.876:16387): avc: denied { write } for pid=17157 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 843.962664][T17161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16604'. [ 844.010488][T17161] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16604'. [ 844.221424][ T28] audit: type=1400 audit(2125.186:16388): avc: denied { write } for pid=17164 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 844.289170][ T28] audit: type=1400 audit(2125.246:16389): avc: denied { write } for pid=17190 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 844.388016][T17204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.16613'. [ 844.488103][ T28] audit: type=1400 audit(2125.446:16390): avc: denied { watch watch_reads } for pid=17217 comm="syz.6.16620" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 844.661385][ T28] audit: type=1400 audit(2125.616:16391): avc: denied { write } for pid=17199 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 845.608688][T17348] vcan0 speed is unknown, defaulting to 1000 [ 845.702391][T17353] vcan0 speed is unknown, defaulting to 1000 [ 846.496449][T17416] vcan0 speed is unknown, defaulting to 1000 [ 846.658366][T17421] netlink: 'syz.9.16676': attribute type 1 has an invalid length. [ 846.681352][T17421] 8021q: adding VLAN 0 to HW filter on device bond3 [ 846.725719][T17421] macvlan2: entered promiscuous mode [ 846.731340][T17421] macvlan2: entered allmulticast mode [ 846.737851][T17421] bond3: entered promiscuous mode [ 846.747538][T17421] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 846.758296][T17421] bond3: left promiscuous mode [ 847.608281][ T28] kauditd_printk_skb: 23 callbacks suppressed [ 847.608300][ T28] audit: type=1400 audit(2128.566:16415): avc: denied { connect } for pid=17474 comm="syz.9.16696" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 848.088356][T17499] vcan0 speed is unknown, defaulting to 1000 [ 848.201183][T17501] vcan0 speed is unknown, defaulting to 1000 [ 848.254981][T17504] 8021q: adding VLAN 0 to HW filter on device bond0 [ 848.273749][T17504] 8021q: adding VLAN 0 to HW filter on device team0 [ 848.293470][T17504] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 848.339180][T17504] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 848.368292][T17504] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 848.395096][T17504] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 848.417309][T17504] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 848.515303][T17504] 8021q: adding VLAN 0 to HW filter on device eth0 [ 848.537275][T17504] 8021q: adding VLAN 0 to HW filter on device eth1 [ 848.564071][T17504] 8021q: adding VLAN 0 to HW filter on device eth2 [ 848.580782][T17504] 8021q: adding VLAN 0 to HW filter on device eth3 [ 848.604174][T17504] 8021q: adding VLAN 0 to HW filter on device bond1 [ 848.681244][T20545] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 848.721654][ T9555] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 848.730563][ T9555] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.741165][ T9555] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 848.750409][ T9555] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.783396][ T9555] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 848.811290][ T9555] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.837348][ T9555] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 848.867259][ T9555] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 848.901553][ T12] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 849.115775][ T28] audit: type=1400 audit(2130.076:16416): avc: denied { setopt } for pid=17543 comm="syz.7.16720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 849.230964][T17551] __nla_validate_parse: 1 callbacks suppressed [ 849.230985][T17551] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16723'. [ 849.316428][ T3374] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 849.376211][ T28] audit: type=1400 audit(2130.336:16417): avc: denied { setopt } for pid=17558 comm="syz.6.16727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 849.920048][ T9555] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 849.928056][ T9555] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 850.109020][T17569] netlink: 24 bytes leftover after parsing attributes in process `syz.6.16730'. [ 850.326116][T17585] vcan0 speed is unknown, defaulting to 1000 [ 850.372190][T17591] netlink: 24 bytes leftover after parsing attributes in process `syz.6.16738'. [ 850.493545][T17593] vcan0 speed is unknown, defaulting to 1000 [ 850.559819][ T3402] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 851.331304][T17637] netlink: 2024 bytes leftover after parsing attributes in process `syz.9.16755'. [ 851.348665][T17636] geneve1: entered promiscuous mode [ 851.366297][T17638] netlink: 64859 bytes leftover after parsing attributes in process `syz.6.16756'. [ 851.396256][T17637] netlink: 24 bytes leftover after parsing attributes in process `syz.9.16755'. [ 851.456494][T17642] netlink: 'syz.7.16758': attribute type 9 has an invalid length. [ 851.470216][T17642] netlink: 399 bytes leftover after parsing attributes in process `syz.7.16758'. [ 851.687856][T17655] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=17655 comm=syz.7.16763 [ 851.783274][T17661] netlink: 'syz.0.16734': attribute type 83 has an invalid length. [ 852.992067][ T28] audit: type=1400 audit(2133.956:16418): avc: denied { connect } for pid=17686 comm="syz.6.16776" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 853.052968][ T28] audit: type=1326 audit(2133.976:16419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17688 comm="syz.9.16777" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa56524de99 code=0x0 [ 853.188528][T17700] netlink: 'syz.0.16781': attribute type 10 has an invalid length. [ 853.202962][T17700] team0 (unregistering): Port device team_slave_1 removed [ 853.212190][T17700] team0 (unregistering): Port device bridge1 removed [ 853.222481][T17700] team0 (unregistering): Port device syz_tun removed [ 853.625394][T17711] netlink: 'syz.7.16785': attribute type 1 has an invalid length. [ 853.642779][T17711] 8021q: adding VLAN 0 to HW filter on device bond13 [ 853.668126][T17711] team0: Port device team_slave_1 removed [ 853.700859][T17711] bond13: (slave team_slave_1): making interface the new active one [ 853.710955][T17711] bond13: (slave team_slave_1): Enslaving as an active interface with an up link [ 853.736696][T17713] bond13 (unregistering): (slave team_slave_1): Releasing active interface [ 853.748399][T17713] bond13 (unregistering): Released all slaves [ 853.839128][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 854.409975][T17737] netlink: zone id is out of range [ 854.420345][T17737] netlink: zone id is out of range [ 854.434006][T17737] netlink: zone id is out of range [ 854.447685][T17737] netlink: zone id is out of range [ 854.461963][T17737] netlink: zone id is out of range [ 854.474361][T17737] netlink: zone id is out of range [ 854.499929][T17737] netlink: zone id is out of range [ 854.511295][T17737] netlink: zone id is out of range [ 854.530810][T17737] netlink: zone id is out of range [ 854.538557][T17737] netlink: zone id is out of range [ 854.737035][T17745] netlink: 'syz.8.16799': attribute type 1 has an invalid length. [ 854.773262][T17745] bond4: entered promiscuous mode [ 854.792298][T17745] 8021q: adding VLAN 0 to HW filter on device bond4 [ 854.884028][T17751] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=17751 comm=syz.6.16801 [ 854.922315][T17745] bond4: (slave veth5): making interface the new active one [ 854.929944][T17745] veth5: entered promiscuous mode [ 854.936242][T17745] bond4: (slave veth5): Enslaving as an active interface with an up link [ 855.086859][T17769] netlink: 68 bytes leftover after parsing attributes in process `syz.7.16808'. [ 855.624012][ T28] audit: type=1400 audit(2136.586:16420): avc: denied { map } for pid=17788 comm="syz.7.16817" path="socket:[434500]" dev="sockfs" ino=434500 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 855.650566][T20545] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 855.773718][ T28] audit: type=1400 audit(2136.736:16421): avc: denied { watch } for pid=17795 comm="syz.7.16820" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 855.854392][ T28] audit: type=1326 audit(2136.816:16422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17798 comm="syz.7.16821" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94bb9de99 code=0x7ffc0000 [ 855.911769][ T28] audit: type=1326 audit(2136.846:16423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17798 comm="syz.7.16821" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94bb9de99 code=0x7ffc0000 [ 855.981817][ T28] audit: type=1326 audit(2136.846:16424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17798 comm="syz.7.16821" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94bb9de99 code=0x7ffc0000 [ 856.017425][ T28] audit: type=1326 audit(2136.846:16425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17798 comm="syz.7.16821" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fc94bb9de99 code=0x7ffc0000 [ 856.044317][T17807] vcan0 speed is unknown, defaulting to 1000 [ 856.044309][ T28] audit: type=1326 audit(2136.846:16426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17798 comm="syz.7.16821" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94bb9de99 code=0x7ffc0000 [ 856.099160][T17810] GUP no longer grows the stack in syz.7.16826 (17810): 200000004000-20000000a000 (200000002000) [ 856.118807][ T28] audit: type=1326 audit(2136.846:16427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17798 comm="syz.7.16821" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc94bb9de99 code=0x7ffc0000 [ 856.140758][T17810] CPU: 0 UID: 0 PID: 17810 Comm: syz.7.16826 Not tainted syzkaller #0 PREEMPT(lazy) [ 856.140853][T17810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 856.140907][T17810] Call Trace: [ 856.141000][T17810] [ 856.141024][T17810] __dump_stack+0x1d/0x30 [ 856.141102][T17810] dump_stack_lvl+0x95/0xd0 [ 856.141234][T17810] dump_stack+0x15/0x1b [ 856.141307][T17810] __get_user_pages+0x1b27/0x1f10 [ 856.141520][T17810] ? __rcu_read_unlock+0x4e/0x70 [ 856.141634][T17810] get_user_pages_remote+0x1d5/0x6b0 [ 856.141818][T17810] __access_remote_vm+0x156/0x4d0 [ 856.141946][T17810] access_remote_vm+0x32/0x40 [ 856.142087][T17810] proc_pid_cmdline_read+0x334/0x710 [ 856.142258][T17810] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 856.142404][T17810] vfs_readv+0x417/0x6d0 [ 856.142551][T17810] __x64_sys_preadv+0xfd/0x1c0 [ 856.142642][T17810] x64_sys_call+0x2915/0x3020 [ 856.142748][T17810] do_syscall_64+0x136/0x3c0 [ 856.142841][T17810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.142966][T17810] RIP: 0033:0x7fc94bb9de99 [ 856.142991][T17810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 856.143033][T17810] RSP: 002b:00007fc94a5f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 856.143092][T17810] RAX: ffffffffffffffda RBX: 00007fc94be25fa0 RCX: 00007fc94bb9de99 [ 856.143144][T17810] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000004 [ 856.143237][T17810] RBP: 00007fc94bc33eaf R08: 00000000fffffff9 R09: 0000000000000000 [ 856.143283][T17810] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 856.143327][T17810] R13: 00007fc94be26038 R14: 00007fc94be25fa0 R15: 00007ffc21d6b328 [ 856.143480][T17810] [ 856.480372][ T9] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 856.979970][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 857.062573][T17844] 8021q: adding VLAN 0 to HW filter on device eth0 [ 857.084397][T17844] 8021q: adding VLAN 0 to HW filter on device eth1 [ 857.103857][T17844] 8021q: adding VLAN 0 to HW filter on device eth2 [ 857.124285][T17844] 8021q: adding VLAN 0 to HW filter on device eth3 [ 857.176740][T17844] 8021q: adding VLAN 0 to HW filter on device bond12 [ 857.271191][ T12] bond10: (slave veth7): link status definitely up, 10000 Mbps full duplex [ 857.290427][T17865] netlink: 8 bytes leftover after parsing attributes in process `syz.6.16842'. [ 857.305225][ T12] bond10: active interface up! [ 857.432850][ T3808] bond11: (slave veth11): link status definitely up, 10000 Mbps full duplex [ 857.463855][T17872] netlink: 44 bytes leftover after parsing attributes in process `syz.7.16846'. [ 857.999302][ T9] ip6_tunnel: ip6gre2 xmit: Local address not yet configured! [ 858.181282][T17910] hsr0: entered promiscuous mode [ 858.207960][T17910] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16856'. [ 858.567142][T17928] vcan0 speed is unknown, defaulting to 1000 [ 858.890211][T17932] vcan0 speed is unknown, defaulting to 1000 [ 859.889158][T17999] netlink: 20 bytes leftover after parsing attributes in process `syz.7.16876'. [ 860.372809][ T28] kauditd_printk_skb: 18 callbacks suppressed [ 860.372824][ T28] audit: type=1400 audit(2141.336:16446): avc: denied { read } for pid=18038 comm="syz.8.16894" path="socket:[435586]" dev="sockfs" ino=435586 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 861.155813][ T28] audit: type=1400 audit(2142.116:16447): avc: denied { getopt } for pid=18087 comm="syz.6.16911" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 861.349225][T18102] netlink: 180 bytes leftover after parsing attributes in process `syz.8.16913'. [ 861.360975][T18102] netlink: 'syz.8.16913': attribute type 2 has an invalid length. [ 861.381598][T18102] netlink: 9 bytes leftover after parsing attributes in process `syz.8.16913'. [ 861.541575][T18108] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16915'. [ 861.838507][T18092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 861.856747][T18092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 861.919302][ C1] ip6_tunnel: ip6erspan0 xmit: Local address not yet configured! [ 862.775811][T18108] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16915'. [ 862.789805][T18110] gretap3: entered promiscuous mode [ 862.795209][T18113] netlink: 'syz.7.16916': attribute type 10 has an invalid length. [ 862.803912][T18113] bond0: option actor_port_prio: mode dependency failed, not supported in mode balance-rr(0) [ 862.835892][ T9544] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 862.848824][ T9544] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.868809][ T9544] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 862.886897][ T9544] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.918354][ T9544] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 862.956977][ T9544] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 862.981475][ T9544] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 863.003415][ T9544] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 863.086225][ T28] audit: type=1326 audit(2144.046:16448): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18144 comm="syz.8.16930" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b98e1de99 code=0x7ffc0000 [ 863.147783][ T28] audit: type=1326 audit(2144.046:16449): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18144 comm="syz.8.16930" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b98e1de99 code=0x7ffc0000 [ 863.240435][ T28] audit: type=1326 audit(2144.076:16450): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18144 comm="syz.8.16930" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b98e1de99 code=0x7ffc0000 [ 863.350358][ T28] audit: type=1326 audit(2144.076:16451): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18144 comm="syz.8.16930" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b98e1de99 code=0x7ffc0000 [ 863.445236][ T28] audit: type=1326 audit(2144.076:16452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18144 comm="syz.8.16930" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7b98e1de99 code=0x7ffc0000 [ 863.475750][T18149] ================================================================== [ 863.483990][T18149] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 863.492655][T18149] [ 863.495022][T18149] write to 0xffff888126bc53a0 of 8 bytes by task 18155 on cpu 1: [ 863.502773][T18149] shmem_file_splice_read+0x401/0x590 [ 863.508208][T18149] splice_direct_to_actor+0x261/0x680 [ 863.513635][T18149] do_splice_direct+0x119/0x1a0 [ 863.518550][T18149] do_sendfile+0x37d/0x640 [ 863.523021][T18149] __x64_sys_sendfile64+0x105/0x150 [ 863.528274][T18149] x64_sys_call+0x2dc4/0x3020 [ 863.533011][T18149] do_syscall_64+0x136/0x3c0 [ 863.537671][T18149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.543607][T18149] [ 863.545965][T18149] write to 0xffff888126bc53a0 of 8 bytes by task 18149 on cpu 0: [ 863.553722][T18149] shmem_file_splice_read+0x401/0x590 [ 863.559160][T18149] splice_direct_to_actor+0x261/0x680 [ 863.564581][T18149] do_splice_direct+0x119/0x1a0 [ 863.569479][T18149] do_sendfile+0x37d/0x640 [ 863.573933][T18149] __x64_sys_sendfile64+0x105/0x150 [ 863.579182][T18149] x64_sys_call+0x2dc4/0x3020 [ 863.583918][T18149] do_syscall_64+0x136/0x3c0 [ 863.588640][T18149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.594612][T18149] [ 863.596961][T18149] value changed: 0x000000000000090c -> 0x0000000000000910 [ 863.604096][T18149] [ 863.606441][T18149] Reported by Kernel Concurrency Sanitizer on: [ 863.612614][T18149] CPU: 0 UID: 0 PID: 18149 Comm: syz.8.16931 Not tainted syzkaller #0 PREEMPT(lazy) [ 863.622104][T18149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 863.632192][T18149] ================================================================== [ 863.645305][ T28] audit: type=1326 audit(2144.086:16453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18144 comm="syz.8.16930" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f7b98e1de99 code=0x7ffc0000 [ 863.681611][ T28] audit: type=1326 audit(2144.136:16454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18144 comm="syz.8.16930" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7b98dde6ce code=0x7ffc0000 [ 863.708257][ T28] audit: type=1326 audit(2144.136:16455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18144 comm="syz.8.16930" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7b98dde6ce code=0x7ffc0000