last executing test programs: 3m18.283320011s ago: executing program 32 (id=53): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg$inet(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="db", 0x1}], 0x1}}], 0x1, 0x40040) sendmmsg(r0, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000001e00)=[{&(0x7f0000000a80)="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", 0x201}], 0x1, &(0x7f0000000180)=ANY=[@ANYBLOB="10000000000000003a0000000d0000001000000000b56eca"], 0x30}}], 0x1, 0x404c044) 2m47.549259647s ago: executing program 33 (id=727): perf_event_open(&(0x7f0000000bc0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x3, 0x800000, 0x1b9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x2, 0x2, 0x73) sendmsg(r0, &(0x7f0000001440)={&(0x7f0000000000)=@isdn={0x22, 0x81, 0x9, 0x5, 0x5}, 0x80, 0x0}, 0x40000) r1 = syz_open_dev$usbfs(0x0, 0x100000000003, 0x161341) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000440)={0x0, 0xb, 0x8, 0x0, 0x0, 0xffff, 0x0}) syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') close(0xffffffffffffffff) 1m50.603594123s ago: executing program 0 (id=1811): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x44, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x9, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1001a}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10010}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000000300000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="040000000000000020001280070001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x40) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m50.478150646s ago: executing program 0 (id=1813): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffff9, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x16, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd3d, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfff2, 0x3}, {}, {0x6, 0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r3}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x410c4}, 0x4880) 1m49.713181196s ago: executing program 0 (id=1819): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000380)=0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r2 = syz_open_pts(r0, 0x0) ioctl$TCSETSW2(r2, 0x5437, 0x0) 1m49.712571096s ago: executing program 0 (id=1821): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f00000002c0)='./bus\x00', 0x14927d, 0x8) r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124) write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6f8, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4f1ce5d29c3ee5e5c3676345a41499db7aac63a01010000000000004faa2ae2c08485d90000000000007700000c00002000", "036c432004cbc329834c9b1b167263bdbcef549ba197fce47d0100173400fff7ffffff000000f3e7f29b00000200000000000600", "b73200000000000000000d00000000000000000000080100", [0x40000000004, 0x670]}) 1m49.196745759s ago: executing program 0 (id=1833): openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180), 0x2000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0x2bb}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m48.601368614s ago: executing program 0 (id=1850): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) semop(0x0, &(0x7f0000000200)=[{0x4, 0x7, 0x1000}, {0x1, 0xffc3, 0x800}, {0x1, 0x7, 0x1c00}], 0x3) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0xe8, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xd4, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x78, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x38, 0x6, "a772a737158996ce1bd7eab0f068a0346ba53041493b141255d270cb0690a80c2010e341e79bd7144ac1758a93d58de17e7a8b51"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) 1m48.579137334s ago: executing program 34 (id=1850): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000640)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) semop(0x0, &(0x7f0000000200)=[{0x4, 0x7, 0x1000}, {0x1, 0xffc3, 0x800}, {0x1, 0x7, 0x1c00}], 0x3) sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0xe8, 0x30, 0x1, 0x70bd2b, 0x25dfdbde, {}, [{0xd4, 0x1, [@m_bpf={0x58, 0x1, 0x0, 0x0, {{0x8}, {0x30, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x1}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x1, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0xc, 0x4, [{0x16, 0xf2, 0x3, 0x7}]}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_bpf={0x78, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0x2, 0x0, 0x6, 0x80}}]}, {0x38, 0x6, "a772a737158996ce1bd7eab0f068a0346ba53041493b141255d270cb0690a80c2010e341e79bd7144ac1758a93d58de17e7a8b51"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0xc044}, 0x4000814) 1m43.29210551s ago: executing program 4 (id=1946): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x9, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x8}, 0x10ecc8, 0x1222, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000400)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffe}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=@newtfilter={0x5c, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r2, {0xc, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x7, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x88}, {0x0, 0x9}}}]}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20041090}, 0xc080) 1m43.172671273s ago: executing program 4 (id=1951): openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x40084) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0xa, 0x5, 0x0) close(0x3) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="18020000e2ffffff00000000000000c685000000360000009500001800000000922ae83713ab9600010000801b10fb54a8cb72d232ad558c46fff4208d4990ec11ce9413ac30e00bd0081f8504e19a5183d769676520e98a263345e44d5ad12bca35510100c4d86abeb12303ff1c9fe0d0020000d60400000007d3670000008aff66d6b3181ffc1d62a3954c1198bbc4fa13aee48ca9e8969faebf3183fe803ab3f5024b52dc265b36fc9dae00a09404f01f9504d0976d252bd8d24538556e5e57bee3b8cf464ef3c6a7def8bad3ca6e3abdb21696e340bb8e2a093add57196b40def3858ef569147fa4108328392d322ab5df10a2f69a6bdf72ee7944e810d0223917c3d042410f57466f59544047d6d8ac44060000000000ee16c729300d2301800000000000002b5a8b05fcc154ad5290a8cdb97c343f454ff69dd6cbde49b28a6cb5f4fc0001745cff6e00e7ffffff0000acf3209a08439f1ff01779b6f6df7e02aa6d7760525b595fe1f697bc114ed1778e97a3f0395f946974cfb458be2a34cf924dc37b5592bf17956f3547497aba814382ff67b345b677a9d6523d87008000000400000000003fe8613ca29ff92be0d8deffff7b68136b0046d535dd39c0f35408869e9b342b953f91447e6b9eab304f134306320600a44095254b45a6c1312a13696c7202df5f764713504facc532c5a6d44d99ec7530ed7b0311000000000000e54e9072a22d911f4a2c2e2fa806e63c5cd98a8569a6d6bcfb000064885117e2ad910eae67e0ebe380d0f648713e68153579e02d71c58d147b00821ab9a6475b31e1ebf1369a04000000fbf3983f283f2f00000000992774814d63c933912d000006000000a66acb0a38856929e7d8b1b06c9bd5d7e5490f3b8596b694ea9483bd4bd287c83dd998a74694d18bdd8ad0983bc90770bbd26a82b9d99d5fc04563b523c47ef8c33400e90d02000000000000000edf1147a7afe772cd45af8aeffe2753088e02ca6bb2feec446ce7dbce66f0a93a03371320980865c7c62ea4d8f8a864dce9fa85aeb0454349100296ee2dba39c3f6fd6cf96714e11fe03b5062809a7418b165dd0336d226bac1e1223be1c97b15175d0e664beb126000e96549e1a1228c686edb475b705eaa9515c96f4fc6b3c925ea404e0f1de61026dc6c6618580fd6ce9eac602c1756f6d1056712412131ed9925989e01eae489ec7052e0ed72c326c7a8aa63999e2297c54ce1822d14b7c7699a9d0600f11f2e7f474cffbc35bc8623cd5eb68af82275a940be0400000000423346da092cbe220de96d6a8e9f32f18d1f606b381e4903b500000000000000000000004a2357ba5f03000000000000005dcf4f2aaee86d4802000000000000007cdb686d5da2a42e4b5024b6535811f362201d4f82012e6af704973d04ea923c19e6cb723c1923b3eea2d73e176dff383c9fbbac53dfdcb1a68c98e96fe39eec23963faf3ebed3409144c7c53d6318ced678a621450a9b01e9f2772e5f2999d3435da02556e36c3215d2bd4e96c93bff3ad04a82ff3cfadcf65eb92adc6c68d66b11cb2d7556414a86dfa94bb7aa52c7febb1e9b2efcbbc5bccf9d39bed802f4f056976a9a362ee9cc624ec454b90200fd9603f96908bddc14500000000000000000000000000044d917c62b27679913075731e8fddb07c10c82002d60181588ae63a440454287de9e340f611267f37bdd0f2d21cb06fcaf45a0a297e396f428d43371424b307eef82c5d6d19f3ef0d3b8f7fa51957e3099caab31133b34a1d3eebc0f0c9056df2e9667ba0b55695c7894010079b07e7aef7785e248deb8c83ab6eb2c72c484241dc3b66da78260f800fffd39368b952f6f4a10295c50c887a31d8b543c5d10f2dbd4d0b84eaad43feb6e169a9f2fcff7000000000000000000e011bc6366f56fa787f212c1f8c0f47f5078191c8a02ad436725771738a2a98891971e3b932352896e1ea10f62e8ef7a87e16151b39d6c27575714540d8c293a3fa4b5a825360423c1cbc8b5d19167152823ed853140edda002c16c842b168bb55f6bb713deb57d0aa78d6d4e5fc5be2c402bd77125d98120358900000892b135a92e8c844938aa98ba4839a1408a696454d40e5eed4d4dce481ca86bfac54c330331b7f2cde17cbaeb0377696faf546ecbe742d73d47d726a50f6e752f3325255bd7e8b5923aa3cfb6f7e06494f21ca450139c558000000000000000000000800000000000000000075aa0000000000000000000000005560bd9eb81e839e4992e64b074a66cccccf00334fa94da8477be7d99b558ec6a5b1596ac1e7617c6b32eed0cc70286caf2c5189a103f4b0b04aff171c4d388ccf67fea37e782f025c94c853cde330a193a967d907a8c88fcb033e680f559a72150cb900bafcd536f48797915a2fe9922ce27300009e1b36aa4730117d9b00000000003c630000000000008fbbd11b015c415ca04192fbfb1a8b0e3460af35771dbac10062835c9bab3ad09f7a022c52d8000000000000000000004000000000000000000000000000000000000000000400000000000000000000000000006ec473c54399b7b8aa1ee46132fc45da8292631178cecf19550108b8b8423de4295777a17bf4dfdfee5de0f3e4dadf51ab9562827b762fa611ba5f32861c19dffe1dc9fd5c41cd46cf131fd6b0c2ddad90ac33f768f9ecc70327c59918fa5a249befe98262f53c8182d95f6da3698a6a88c2c31d801a8f1f5e0ce05138d5422da0a6a62b9dfe1f39775d1d0c9186096415f544aaf76b0a1c877a6c826a5adcfb22c4a0e5a46271caa3eaf4f389dd5f3c20dbddc0377a4266d7b9fd61b9287e9b4be0a413ee31be0ddecab0ef7b25cba1fb3654ddf291ecb7768ac1e177042cb4c452fa6b3966950000000000000000c187da23d6855500fe8510b51e13a890e394b84a6ea2cc8d42b97c697c29122298d55e2e1cca8e07abda2606a3f381c64b9fec0000000a7965e4854e8e3572ad5149b3872342dea9252132860c9af1bd5fe263c0313dea5d6e0c11a466d6892ed65f34667dd79b07b5cbdd8aa7dd561a26b5562d4861a7e1b0f48930e0b696ea3bee7eb72794e163d7aeac9a0fa5403ac9cb421eae283b0550f1d0d339cd7b96e71d3ab48ad9d7975e0c9b117f71d3ab80a0c9b0284ecc469fa6181c9c71fce07a6ffb23296a107763138e8d9876291af2076890c47925ac773d95d2ca42acb3e5f3a1550665b898462c139ffd0106bc8a61b6117d252efcab7106b4c3a3c13a70ff452e9d2096142c517b0e91b5cf88332faca5b3ee96363065c3ce32d3d39ec36e20d597e05664f2526bd918090649da11f7299789d00f502cdf1e99d3efecb9b457642fe810370ba4fbe00fa60a28af966a27a1659e448bbe43a1dcd2ea760018b57a36ac41ef2051a7b703d55c0602540663016e20d50385766df4dac47802a55bd38dd767ee9960c6daa704fc5d01a14591f26b7b538c9bb22f6a2f7a34d1b9edfd125a9e25a110228c64253588ff420644dbc0854e69a7bdda72f93ceaccf92cfe7dd6296c950db10f6dd8a5ef9b73cf6a12a1ba16fdc7e35b805f4fd2fcff0a623722149c1465e4de2d53f0f10b14c21865027abc71a12cb1e9f8029c7a20000000eeb0d53a83e518c8d2052c08b515d9d0bde24ac4e798040c7db0bb03c019507d6377f3d5dd94a27abc6d6b120d61f772407e0d2cb50d29168b68aef9f176b4c3aa8b21279d4ea9c1f669aa8c2c17d5b3a8d1dda58d26f1019af04b7774c85d5bce8be010f27c5211938031c3404680b01279c778bd1fe1b48c4b5b8e0fe756e54a8d76b7cec5e3407d93b4eadc446440607de844acf5524a4657e33af2115547b735b57b5092d0bc8fa6acb832509abe0882d570ce400aaebd7baff88526608d6991aac95751671174129457e4a03aca69d82b64b89e6ad6ed1e275ec5002e48170e4c7b4f3971481098dedb88fba90770e44bf404d5a97fefe2fe8e459fe45933b78c7ab5fe985a480193a20fb07da1455fb283df68af569ac82aa6dc703e29bf158931fb79f2abfa6ff7eb8c4f381c9da58bea460e2ead969933e5391970ca4fddd64da2e5df9c4d82044068caaaab771b37bb06bbe673056d849825525f1120b2250f6b8520381f7a74b1c687781cb6b23e67b918844b83dbaeeb559ec8520d710dd6d6b4e64838bd434a36ed03fc0c488b24571032ffbc9f8ce97041e1bc4729d539358dc9599c1266b9ce2cb6dd0ad57a6e9d3d4a11a27f70b2934c96237e2ba09c58eeda678d4d08b6da99b7a86e946215afb1b48792fde54492e306cb5342e2589874b603a1de972b1f09cc350096f5c3e814118af9ba0793cfdf20c77b34eacfdf63ce59ec4d2f867bf884e941559b068d908325667672b5e1cf71f4829c0493e8b141399ed926b822becead7a0a2b4a4c008ab16b616d60f347e4da54f06443507efe57ea62399ef4eb11b2f559e1b056456a53998bf1c6d13c92e75136147f91ae3a75ca15eb1b51bf700b3c0bf54bc3745ff313c5e75dc66386897f6ee45429371b8d0878c442ad2fe9baf85c1390da13efc353ccbef950c29f39ddf436f0d9bf1be1515ed251d8b6f11ecb16b1e8d1ed04196e9b6c2f9e068b7749bb6c1f533e493f22c901662c65cb761dc2eeff2f698bd4dbae83e2dfdc4f1c7f918a00515c1bc189d10ec22b35c92725cbf0ba244fd029c4f026f68e000000060000ab0476c3fd7f7c1e5c000000000000000000000011e43e39d3f4394fbfa13c416b1c443c5e52eea726491ad75100ebad7c6d5a665c59a3fb158e43da904f19e7e8daa4e90390b8da945f6cd78536c0d2be07221f85ad46b180f256d4d84592691d15d65896b66b63a46705338b67b72dc1c3075fcdc5cbffb0366151632ba5be8ae815dfea9fadfd31c473a24a73d3e5116c3023b3563c72d26fbd59877132bde5ca4ef8d92fd3613c768b35223f6fd0b5e9a8b98cccf1e2b4612e620e3a159d6365c9045aaa826aa0ee6d26cf0397ce674c20824584b464ebdc2f3ea26a7aec4570b242a6677a4e9187f8591c3a9bdc0000001a002364bbd93964a8d0bdc802b9be2500"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r0, 0x29, 0x22, &(0x7f0000000100)=r1, 0x120) 1m43.151003403s ago: executing program 4 (id=1952): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x181000, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x19, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x29e9c934, 0x5, 0x0, 0x4}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="200000001600010800000000000000000a0000000c0000800800", @ANYRES16=r0], 0x20}, 0x1, 0x0, 0x0, 0x240c0811}, 0x0) 1m43.116518414s ago: executing program 4 (id=1965): msgsnd(0x0, 0x0, 0x8, 0x800) r0 = socket(0x11, 0x2, 0x0) syz_clone3(0x0, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000040), 0x4) 1m42.165645668s ago: executing program 4 (id=1985): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x0, &(0x7f0000000a00)={[{@init_itable_val={'init_itable', 0x3d, 0x1}}, {@errors_remount}, {@resgid}, {@barrier}, {@quota}, {@delalloc}]}, 0x1, 0x783, &(0x7f0000001340)="$eJzs3M9rXOUaAOD3nGaa/si9kwt3ce+mCi20UDpJmk27Mm7ETaFQcFtDMgkhJ5mSmdQkFpq6E4TabFQE0b1Lt0Kpf4A7KSi4F0RrXKibkTOZTNt0Zjptk04bnwdO5vvOfN9533dm8uUcyJkA/rFezX8kEUMRcTEiis39aUQcbLQORaxvjdu8d20q35Ko1y/9kuTTYrNebB0raT4ejcaU+F9E3ClEnH7v0bjV1bX5ySwrLzX7I7WFKyPV1bUzcwuTs+XZ8uLY+PnRc+Pj50bHd63WE2+dP3zr2zc2Nr77qnbz2MCZJCYadUeztl0L9ICt16QQEzv2L+5FsD5Kehgz8BzyAACgu/w8/0Dz3KwQxTjQ7SzNCRwAAAC8lOqD9V792fNIAAAA4AWTRL8zAAAAAPbW9v8BbN/bu1f3wXby8+sRMdwu/kDjHuKIQ1GIiCObyUO3HyRb0+CZrN+IiNsTbT5/vdzR3N3o/ebh3Tkiu+12vv5MtFt/0tb6E23Wn4Ht7054Rp3Xv/vxD3RY/y72GOPrz/5f6Bj/RnXl/WPt4iet+EmH+G/3GP/mxge3Oj1X/yLiZNu/P8lDsbp8P8TIzFzW7lerle6dv07d7Vx/xJFH4idJI2rSvf4rPdb/7uZv8+td4p863v3934o/+NC8/DPxYTOPNCJuNR/z/saOGMcXvv/m0cjJ+nb86Q6vf/v3/81W/Z/3WP+PXw6u9DgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIokLbXaaVoqRRyNiP/GkTSrVGunZyrLi9P5cxHDUUhn5rLyaEQUt/pJ3h9rtO/3z+7oj0fEf344vBV0LiuXpirZdL+LBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoOVoRAxFkpYiIo2I34tpWir1OysAAABg1w33OwEAAABgz7n+BwAAgP3vaa//k13OAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjXLl64kG/1zXvXpvL+9NXV5fnK1TPT5ep8aWF5qjRVWbpSmq1UZrNyaaqy8LjjpRExdj6WV0Zq5WptpLq6dnmhsrxYuzy3MDlbvlwuPJeqAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFJDjS1JSxGRNtppWipF/CsihqOQzMxl5dGI+HdE3C0WBvP+WL+TBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYNdVV9fmJ7OsvPRyN+r7q5yeG5FEvABpdGh80nxXuo1J1iP6nmraTPRZjhPxJLOuP+Zl6XfjlT6tRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9Fd1dW1+MsvKS9V+ZwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB/pT8lEZFvJ4snhnY+ezD5o9h4jIh3Pr300cpkrbY0lu//tbW/9nFz/9kHJl5/njUAAADAvvfakwzevk7fvo4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADoVXV1bX4yy8pLe9iIG/2uEgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeBp/BwAA//9Js7nR") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r0, 0x7f, 0x0, 0x4) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed0044, &(0x7f0000000100)={[{@noblock_validity}, {@usrquota}, {@grpquota}, {@noload}, {@nobarrier}, {@lazytime}]}, 0xfe, 0x472, &(0x7f0000000940)="$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") r1 = open(&(0x7f0000000300)='.\x00', 0x100, 0x30) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) 1m41.603354763s ago: executing program 4 (id=1995): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x805}, @void, @x25={0x0, 0xfd, 0x1, "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"}}, 0x109) 1m26.326297983s ago: executing program 35 (id=1995): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) write$tun(r0, &(0x7f0000000180)={@val={0x0, 0x805}, @void, @x25={0x0, 0xfd, 0x1, "0b007e0b0a42b820a8e8c9881db660164333526f68eb13254bccba0eaccdb36cc0691cef8c863a63f79fe7f1d5514a5a2b016bc0ab07b7ea2909619c0548a3c94ff542d23d8d2253f8e3843394132280bfa1629888fe0f017805cd8f9bceac64d35287f5704d58322a0765d9585883e4f48958696855767c1b1ed4b2f5c0bde2d4bc831a95f12204e404f6e2ddc1c08d939d51f7290486c1d0845da7cfe0e7320ef850f382f5b45fd5892ca051651bdd7684d21852262ce07ffb57e906995986fe95b80e0fe01d58ca97674d0dd973b0c7fbe9562d52d8a8ee3ea936c8db7cb8a784e04f693d991979a3c84a0fb4fd67bda62ac36427e7581df0259848a45cc45f8b"}}, 0x109) 1m25.837055086s ago: executing program 6 (id=2072): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x800}, 0x94) close(0x3) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, r1, 0x26, 0x0, @val=@iter={0x0}}, 0x20) close_range(r0, 0xffffffffffffffff, 0x0) 1m25.789205497s ago: executing program 6 (id=2074): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) accept4$x25(r0, 0x0, 0x0, 0x80800) 1m24.675725236s ago: executing program 6 (id=2088): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x400c804) io_uring_setup(0x1cf8, &(0x7f0000000040)={0x0, 0xe83e, 0xc000, 0x2000008, 0x4c1}) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='4', 0x1) 1m23.256044562s ago: executing program 6 (id=2092): r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r2, 0x101, 0x1) getdents(r2, 0x0, 0x0) 1m23.098703496s ago: executing program 6 (id=2094): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./debug/tracing/trace_pipe\x00', 0x800, 0xc2) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000040)={0x3}, 0x4) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 1m22.768865515s ago: executing program 6 (id=2111): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r0], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xc3ffffffffffffff}, 0x0) 1m7.29496046s ago: executing program 36 (id=2111): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="200000006800e97800000000000000000a0000000000000008000500", @ANYRES16=r0], 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000001800090400000000000000000a000000000000030000000008001e0001"], 0x24}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x420}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0xc3ffffffffffffff}, 0x0) 53.920746792s ago: executing program 9 (id=2522): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) socket$netlink(0x10, 0x3, 0xc) 53.489353263s ago: executing program 9 (id=2537): r0 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x100000000, 0x3, 0x8, 0x6, 0x6, 0x20000000ffd, 0x6, 0xfffffffd}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) syz_mount_image$vfat(&(0x7f0000006d80), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800053, 0x0, 0x1, 0x0, &(0x7f00000000c0)) r1 = open(&(0x7f00000002c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x58100, 0x18) fstat(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r1, r2, 0xffffffffffffffff) 53.291651638s ago: executing program 9 (id=2539): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc08c, 0x7, @perf_bp={0x0, 0x2}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000010428bd7000ffdbdf2500000000", @ANYRES32=0x0, @ANYBLOB='\x00\x00', @ANYRES32=0x0, @ANYBLOB="14001280090001007866726d0000000004"], 0x3c}, 0x1, 0xd, 0x0, 0x20008045}, 0x20000000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008"], 0xa4}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="3400000013000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="000000000000000014001a80100005800c"], 0x34}}, 0x0) 53.115609453s ago: executing program 9 (id=2540): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f00000001c0)='./file0/../file0\x00') mount$tmpfs(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x20000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x11050ca, 0x0) 53.073717714s ago: executing program 9 (id=2541): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x4000006f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 52.81640934s ago: executing program 9 (id=2545): setns(0xc9, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0xa001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000100, @loopback, 0xfffffffe}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x4000000, @loopback}, 0x1c) 52.741861892s ago: executing program 37 (id=2545): setns(0xc9, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4022, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0xa001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x80000100, @loopback, 0xfffffffe}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x4000000, @loopback}, 0x1c) 46.15403654s ago: executing program 7 (id=2644): socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x1c) 46.012929864s ago: executing program 7 (id=2648): setns(0xc9, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0xfffd, 0xe9, @mcast1, 0x5}, 0x1c) timer_create(0x3, 0x0, 0x0) timer_gettime(0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x952c, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) getsockname$inet6(r0, 0x0, &(0x7f00000002c0)) 45.891338897s ago: executing program 7 (id=2650): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x439, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, 0x21801, 0x1103}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x28, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e20}, @IFLA_IPTUN_ENCAP_FLAGS={0x6, 0x10, 0x3}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @local}]}}}]}, 0x58}}, 0x4048084) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 45.807750529s ago: executing program 7 (id=2664): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x5) r1 = eventfd2(0x0, 0x0) io_setup(0x4, &(0x7f0000000080)=0x0) io_pgetevents(r2, 0x2, 0x2, &(0x7f0000000100)=[{}, {}], 0x0, 0x0) io_submit(r2, 0x2, &(0x7f00000000c0)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0, 0x0, 0x0, 0x0, 0x3, r1}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) shutdown(r0, 0x0) 45.615678244s ago: executing program 7 (id=2655): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ef) mount(0x0, &(0x7f0000000040)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xff, 0x0, 0x12, r0, 0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone3(&(0x7f0000000140)={0x48d86500, 0x0, 0x0, 0x0, {0x8}, 0x0, 0x0, 0x0, 0x0}, 0x58) 45.614822354s ago: executing program 7 (id=2656): socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$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") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 30.589164568s ago: executing program 38 (id=2656): socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000b00)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x380000c, &(0x7f0000000340)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x5}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@debug}, {@data_journal}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000240), &(0x7f0000000280)='system_u:object_r:fsadm_exec_t:s0\x00', 0x1001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 4.486768335s ago: executing program 5 (id=3324): getrandom(&(0x7f0000000580)=""/265, 0xffffff3f, 0x3) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) connect$pppl2tp(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000002200)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002000)=ANY=[@ANYBLOB="28000000130a01030000000000000000020000000900010073797a30"], 0x28}}, 0x0) 3.483920591s ago: executing program 5 (id=3334): perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x2, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) unshare(0x40200) r0 = semget(0x2, 0x3, 0x39c) semop(r0, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}], 0x1) semop(r0, &(0x7f0000000000)=[{0x2, 0xbbdd, 0x1000}], 0x1) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000040)=[0x6, 0x7fff]) unshare(0x40400) 2.186988554s ago: executing program 5 (id=3360): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x2fb, 0x2a02) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x2b, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x8080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0101020000000001100000020000"], 0x18) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d0000000000050001000400000005"], 0x4c}}, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) 2.139638335s ago: executing program 8 (id=3354): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000001200)=0xd0, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1f}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000100)=[{0x6, 0x7, 0x0, 0x101}]}, 0x10) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 2.062407797s ago: executing program 5 (id=3356): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bic', 0x3) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) 1.199375119s ago: executing program 5 (id=3377): gettid() mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x1, 0x198) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2446, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x551a, 0x8fb0}, 0x100, 0x0, 0x0, 0x5, 0x0, 0x1, 0x400, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$phonet_pipe(0x23, 0x5, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r0, 0x6, 0x1, 0x0, &(0x7f0000000040)) 1.16918513s ago: executing program 8 (id=3378): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x104) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) syz_clone3(&(0x7f0000000900)={0x23800000, 0x0, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r0, &(0x7f0000000c40)=ANY=[], 0x13) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000140)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) 1.077981522s ago: executing program 5 (id=3380): io_uring_register$IORING_REGISTER_SEND_MSG_RING(0xffffffffffffffff, 0x1f, 0x0, 0x1) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x804a, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x10, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.039426853s ago: executing program 8 (id=3382): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x2fb, 0x2a02) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x2b, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x8080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0101020000000001100000020000"], 0x18) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d0000000000050001000400000005"], 0x4c}}, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) 929.611046ms ago: executing program 1 (id=3384): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10acc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup(r1, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0) r3 = openat$cgroup_type(r2, &(0x7f00000001c0), 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) write$cgroup_type(r3, &(0x7f0000000140), 0x9) 923.130176ms ago: executing program 8 (id=3395): r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, r0, 0x0) r2 = perf_event_open$cgroup(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x10c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66}, 0xffffffffffffffff, 0x0, r1, 0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) alarm(0xfd48) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000004a"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x10, 0x13, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0xa}, 0x94) 727.593491ms ago: executing program 1 (id=3387): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x4, @perf_config_ext={0x3, 0x11}, 0xc108, 0x1, 0xc, 0x6, 0x4, 0x4, 0xfff9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x700, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYRES16=r0], 0x50) ioctl$TUNGETVNETLE(r0, 0x40047451, &(0x7f0000000180)) 717.457221ms ago: executing program 3 (id=3388): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa101, 0x0) write$binfmt_aout(r0, &(0x7f0000000100)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x3, 0x0, 0x15, "0062ba7d82000000000000000000f7fffeff00"}) r1 = syz_open_pts(r0, 0x8182) r2 = dup3(r1, r0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000280)='fd/3\x00') ioctl$TCSETSW(r2, 0x5403, &(0x7f0000000000)={0x7, 0x1, 0xfff, 0x100, 0x16, "8dcd999ff2fa3a6edb62beb37323012b7b85c2"}) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000100)="d9", 0x1}], 0x1) 621.214884ms ago: executing program 2 (id=3389): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) tkill(r0, 0x7) wait4(r0, 0x0, 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r1, r1) setpgid(0x0, r1) 617.115124ms ago: executing program 1 (id=3390): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffffffffffff, 0xffffffffffffffff, 0x1) r0 = open(&(0x7f00009e1000)='./file0\x00', 0x149040, 0x40) fcntl$setsig(r0, 0xa, 0x13) fcntl$setlease(r0, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(&(0x7f0000000080)='./file0\x00', 0x8003) fcntl$setlease(r0, 0x400, 0x2) 614.660354ms ago: executing program 3 (id=3391): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x700, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="002000000102"}) 591.236475ms ago: executing program 8 (id=3392): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r3, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)={0x2c, r1, 0x3, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x11}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) 522.961717ms ago: executing program 2 (id=3393): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0xff, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r1, &(0x7f000000a540)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000540)="050000eb3a49a8d125", 0x9}], 0x1}}], 0xfffffffffffffd9e, 0x4000041) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000380)=[{0x0, 0x3, {0x1}, {0x2, 0xf}, 0x2, 0xfd}], 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x74, r2, {0xffff, 0xfff2}, {0xfff1, 0xffff}, {0xfff2}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x20000050) 519.232527ms ago: executing program 3 (id=3394): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110c230000) r1 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x104046, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, 0xfffffffffffffffe) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000480)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) perf_event_open(0x0, 0x0, 0xe, r2, 0x1) ioctl$TUNSETOFFLOAD(r0, 0x8004745a, 0xf0ff1f00000000) 491.738037ms ago: executing program 1 (id=3396): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0x2fb, 0x2a02) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x2b, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x8080, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000180)=ANY=[@ANYBLOB="0a0101020000000001100000020000"], 0x18) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d0000000000050001000400000005"], 0x4c}}, 0x0) arch_prctl$ARCH_REQ_XCOMP_GUEST_PERM(0x1025, 0x12) 461.843748ms ago: executing program 8 (id=3397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000080)='\\\x00\x00', 0x3}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20004080) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x9) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x3e8, 0xe, 0x6) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 445.940228ms ago: executing program 2 (id=3398): r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000800)="9f914dd6", 0x4}], 0x1}}], 0x1, 0x24008800) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000240)=""/250, 0xfa}], 0x1}, 0x2}], 0x1, 0x20022, 0x0) 359.486751ms ago: executing program 3 (id=3399): r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, @perf_config_ext={0x7, 0xa}, 0x20a8, 0x0, 0x80, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xb, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r2, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x3, &(0x7f00000001c0)={r2, &(0x7f0000000240), 0x0}, 0x20) 351.122111ms ago: executing program 2 (id=3400): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000840)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_u32={{0x8}, {0x60, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x0, 0x4}}, @TCA_U32_SEL={0x54, 0x5, {0x2, 0x7, 0x4, 0x6, 0x9, 0x8000, 0x80, 0x7, [{0xffffff59, 0x9, 0xe, 0x4}, {0x80000000, 0xb92, 0x7ff, 0xe}, {0x7ff, 0x10005, 0x2, 0x350}, {0x1, 0xbe1, 0x4cd72bd8, 0x69ce}]}}]}}]}, 0x8c}}, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r3, 0xffffffffffffffff, 0x0) 297.981823ms ago: executing program 3 (id=3401): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000300), 0x12) r3 = syz_clone(0xa2100000, &(0x7f0000000180)="b5be46e3b5f0ced42b85c1ee03b0839a3a61d0cfe718a7fccede8b6785b0c83562b17ad634c45d9d62844389a8484692d9e3929d70660ad77aa973a7e50a21527c01d30695252c8e52411f05e8826986a58ae97524fcc1fbceb0a1d27491bd4c67d0cb22288b36631e3605423a2d753494d933016dcb548a7d47423d8860e71bf09a2f71bff3156ab835e98381e5f2a65a2cf45d4cdd977c0a", 0x99, &(0x7f0000000240), 0x0, &(0x7f0000000340)) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0x3, 0x6, 0x4, 0x78, 0x0, 0x9, 0x8600, 0x8, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, @perf_config_ext={0x8, 0xff}, 0x1200, 0xffffffffffffffff, 0x8, 0xd, 0xd, 0x35e, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffed6}, r3, 0x0, 0xffffffffffffffff, 0x8) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 211.908485ms ago: executing program 3 (id=3402): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x0) recvmsg(r0, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000025c0)=[{0x0}, {&(0x7f00000015c0)=""/4096, 0x94}], 0x2}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070}, 0x94) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 207.442365ms ago: executing program 1 (id=3403): r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) socket$inet6(0xa, 0x3, 0x1) socket$packet(0x11, 0x2, 0x300) socket$inet6(0xa, 0x3, 0x1) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000100)=r1, 0x4) bind$llc(r0, &(0x7f0000000200)={0x1a, 0x0, 0xfe, 0x0, 0x2, 0xd2, @random="750701ff7fbe"}, 0x10) 129.701037ms ago: executing program 2 (id=3404): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) fcntl$setstatus(r0, 0x4, 0x42000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101081, 0x20) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r3, &(0x7f0000000280)={0x7, 0x1b, 0x2}, 0x7) splice(r2, 0x0, r1, 0x0, 0x20000000000002, 0xa) 79.571428ms ago: executing program 1 (id=3405): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) close(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x40400, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0x0, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, @perf_bp={0x0, 0x3}, 0x80, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x200a}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000001980)={[{@noquota}, {@noquota}, {@dioread_nolock}, {@jqfmt_vfsv1}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x70}}, {@max_dir_size_kb}, {@errors_continue}, {@bsdgroups}, {@max_batch_time={'max_batch_time', 0x3d, 0x3fe}}, {@user_xattr}, {@noinit_itable}]}, 0x5, 0x5a4, &(0x7f0000001a80)="$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") ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110e22ffe6) ioctl$TUNGETVNETLE(r0, 0x40107446, &(0x7f0000000180)) 0s ago: executing program 2 (id=3406): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x90646}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_FAIL_OVER_MAC={0x5, 0xd, 0x1}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14300}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x800) kernel console output (not intermixed with test programs): ing attributes in process `syz.8.2405'. [ 194.891272][T10930] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2405'. [ 195.213046][T10954] loop7: detected capacity change from 0 to 1024 [ 195.213692][T10954] EXT4-fs: Ignoring removed nomblk_io_submit option [ 195.237964][T10954] EXT4-fs (loop7): mounted filesystem 00000000-0100-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 195.238051][T10954] ext4 filesystem being mounted at /109/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 195.381441][ T12] EXT4-fs error (device loop7): ext4_validate_block_bitmap:445: comm kworker/u8:0: bg 0: block 112: padding at end of block bitmap is not set [ 195.381679][ T12] EXT4-fs (loop7): Remounting filesystem read-only [ 195.381886][ T12] EXT4-fs warning (device loop7): ext4_convert_unwritten_extents:5172: inode #15: block 7: len 1: ext4_map_blocks returned -30 [ 195.452191][ T8941] EXT4-fs (loop7): unmounting filesystem 00000000-0100-0006-0000-000000000000. [ 195.684005][T10986] loop7: detected capacity change from 0 to 256 [ 196.999512][T11058] loop9: detected capacity change from 0 to 4096 [ 197.010444][T11058] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.041278][T10532] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.209985][T11075] netlink: 'syz.9.2457': attribute type 1 has an invalid length. [ 197.210016][T11075] netlink: 'syz.9.2457': attribute type 4 has an invalid length. [ 197.210040][T11075] netlink: 9462 bytes leftover after parsing attributes in process `syz.9.2457'. [ 197.274051][T11079] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2459'. [ 197.277938][T11079] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2459'. [ 197.292992][ T12] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.293129][ T12] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.293247][ T12] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.293436][ T12] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 197.352248][T11081] hub 7-0:1.0: USB hub found [ 197.352385][T11081] hub 7-0:1.0: 8 ports detected [ 197.520929][T11077] loop9: detected capacity change from 0 to 512 [ 197.887503][T11077] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.888720][T11077] ext4 filesystem being mounted at /34/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 198.052517][T11116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2471'. [ 198.052564][T11116] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2471'. [ 198.159259][T10532] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.350576][T11151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2485'. [ 198.350614][T11151] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2485'. [ 198.613193][T11169] netdevsim netdevsim3: Firmware load for '../file0/../file0/../file0' refused, path contains '..' component [ 198.663671][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 198.663703][ T29] audit: type=1400 audit(1788315617.869:2122): avc: denied { map } for pid=11170 comm="syz.3.2494" path="socket:[30695]" dev="sockfs" ino=30695 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 198.867735][T11181] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2498'. [ 199.302699][T11195] loop9: detected capacity change from 0 to 128 [ 199.310410][T11195] msdos: Unknown parameter '`ots' [ 199.350712][T11197] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2505'. [ 199.757937][ T29] audit: type=1400 audit(1788315618.959:2123): avc: denied { write } for pid=11212 comm="syz.9.2513" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 199.791407][T11205] loop7: detected capacity change from 0 to 512 [ 199.892134][T11218] 9p: Bad value for 'rfdno' [ 199.910072][T11205] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.925007][T11205] ext4 filesystem being mounted at /130/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 199.957649][ T29] audit: type=1400 audit(1788315619.159:2124): avc: denied { write } for pid=11204 comm="syz.7.2508" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 199.965578][T11224] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2518'. [ 200.001552][T11224] bond1: entered promiscuous mode [ 200.001592][T11224] bond1: entered allmulticast mode [ 200.001786][T11224] 8021q: adding VLAN 0 to HW filter on device bond1 [ 200.034023][T11228] erspan1: entered allmulticast mode [ 200.043865][T11228] erspan1: entered promiscuous mode [ 200.053630][T11228] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 200.094994][ T8941] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.308256][T11251] net_ratelimit: 3544 callbacks suppressed [ 200.308291][T11251] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 200.530646][T11272] netlink: 'syz.1.2533': attribute type 32 has an invalid length. [ 200.564111][ T29] audit: type=1400 audit(1788315619.769:2125): avc: denied { listen } for pid=11275 comm="syz.1.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 200.585427][ T29] audit: type=1400 audit(1788315619.789:2126): avc: denied { accept } for pid=11275 comm="syz.1.2536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 200.611191][T11280] loop9: detected capacity change from 0 to 512 [ 200.636611][T11280] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 200.636725][T11280] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.661332][ T29] audit: type=1400 audit(1788315619.849:2127): avc: denied { write } for pid=11279 comm="syz.9.2537" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.661443][ T29] audit: type=1400 audit(1788315619.859:2128): avc: denied { write } for pid=11279 comm="syz.9.2537" name="/" dev="loop9" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 200.705407][ T29] audit: type=1400 audit(1788315619.879:2129): avc: denied { setattr } for pid=11279 comm="syz.9.2537" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="loop9" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 200.756189][T10532] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.899814][ T29] audit: type=1400 audit(1788315620.099:2130): avc: denied { mounton } for pid=11292 comm="syz.9.2540" path="/" dev="ramfs" ino=31326 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 200.971152][ T29] audit: type=1400 audit(1788315620.169:2131): avc: denied { unmount } for pid=10532 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 201.202993][T11302] hub 7-0:1.0: USB hub found [ 201.208657][T11302] hub 7-0:1.0: 8 ports detected [ 201.255804][ T727] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.331028][ T727] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.406337][ T727] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.495575][ T727] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.665603][ T727] bridge_slave_1: left allmulticast mode [ 201.665636][ T727] bridge_slave_1: left promiscuous mode [ 201.665790][ T727] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.683420][ T727] bridge_slave_0: left allmulticast mode [ 201.683495][ T727] bridge_slave_0: left promiscuous mode [ 201.683816][ T727] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.823511][ T727] bond1 (unregistering): (slave erspan1): Releasing backup interface [ 201.825566][ T727] erspan1 (unregistering): left promiscuous mode [ 201.860389][ T727] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.871994][ T727] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.880731][ T727] bond0 (unregistering): Released all slaves [ 201.891956][ T727] bond1 (unregistering): Released all slaves [ 201.924536][ T727] hsr_slave_0: left promiscuous mode [ 201.930246][ T727] hsr_slave_1: left promiscuous mode [ 201.930821][ T727] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.930844][ T727] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.953824][ T727] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.953862][ T727] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.976978][ T727] veth1_macvtap: left promiscuous mode [ 201.977020][ T727] veth0_macvtap: left promiscuous mode [ 202.092200][ T727] team0 (unregistering): Port device team_slave_1 removed [ 202.104323][ T727] team0 (unregistering): Port device team_slave_0 removed [ 202.275584][T11325] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.275630][T11325] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.275711][T11325] bridge_slave_0: entered allmulticast mode [ 202.295686][T11325] bridge_slave_0: entered promiscuous mode [ 202.299179][T11325] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.299289][T11325] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.299607][T11325] bridge_slave_1: entered allmulticast mode [ 202.302349][T11325] bridge_slave_1: entered promiscuous mode [ 202.337270][T11325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.346292][T11325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.364534][T11325] team0: Port device team_slave_0 added [ 202.371754][T11325] team0: Port device team_slave_1 added [ 202.390861][T11325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.390900][T11325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.390937][T11325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.436147][ T3025] 8021q: adding VLAN 0 to HW filter on device eth17 [ 202.445595][T11325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.445619][T11325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 202.445705][T11325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.509730][T11325] hsr_slave_0: entered promiscuous mode [ 202.510260][T11325] hsr_slave_1: entered promiscuous mode [ 202.510546][T11325] debugfs: 'hsr0' already exists in 'hsr' [ 202.510568][T11325] Cannot create hsr debugfs directory [ 202.619039][ T3025] 8021q: adding VLAN 0 to HW filter on device eth18 [ 202.735327][ T3025] 8021q: adding VLAN 0 to HW filter on device eth19 [ 202.856649][T11325] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 202.866065][T11325] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 202.867586][ T3025] 8021q: adding VLAN 0 to HW filter on device eth20 [ 202.880616][T11325] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 202.890026][T11325] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 202.898488][T11325] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 202.907503][T11325] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 202.919031][T11325] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 202.929256][T11325] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 202.946405][T11325] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.946461][T11325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.946615][T11325] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.946718][T11325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.994512][T11325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 203.005082][ T71] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.014956][ T71] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.027223][T11325] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.038379][ T71] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.038428][ T71] bridge0: port 1(bridge_slave_0) entered forwarding state [ 203.057528][ T71] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.057581][ T71] bridge0: port 2(bridge_slave_1) entered forwarding state [ 203.216990][T11325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.305212][T11325] veth0_vlan: entered promiscuous mode [ 203.314053][T11325] veth1_vlan: entered promiscuous mode [ 203.333898][T11325] veth0_macvtap: entered promiscuous mode [ 203.341862][T11325] veth1_macvtap: entered promiscuous mode [ 203.353353][T11325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.366422][T11325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.393723][ T71] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.393845][ T71] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.393883][ T71] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.394045][ T71] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.502419][T11522] __nla_validate_parse: 4 callbacks suppressed [ 203.502466][T11522] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2546'. [ 203.710815][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 203.710873][ T29] audit: type=1400 audit(1788315622.909:2166): avc: denied { write } for pid=11547 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 203.910797][T11563] loop7: detected capacity change from 0 to 128 [ 203.928536][T11563] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 203.944729][T11563] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.986161][ T29] audit: type=1400 audit(1788315623.189:2167): avc: denied { write } for pid=11554 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.023084][T11572] netlink: 'syz.2.2562': attribute type 1 has an invalid length. [ 204.043335][ T8941] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 204.086472][ T29] audit: type=1400 audit(1788315623.289:2168): avc: denied { write } for pid=11573 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.183143][ T29] audit: type=1400 audit(1788315623.379:2169): avc: denied { setopt } for pid=11577 comm="syz.7.2567" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 204.254152][ T29] audit: type=1400 audit(1788315623.459:2170): avc: denied { ioctl } for pid=11585 comm="syz.2.2572" path="/dev/usbmon7" dev="devtmpfs" ino=163 ioctlcmd=0x920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 204.429443][ T29] audit: type=1400 audit(1788315623.629:2171): avc: denied { write } for pid=11579 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.557512][ T29] audit: type=1326 audit(1788315623.759:2172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11620 comm="syz.3.2581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2dc9e159 code=0x7ffc0000 [ 204.557568][ T29] audit: type=1326 audit(1788315623.759:2173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11620 comm="syz.3.2581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2dc9e159 code=0x7ffc0000 [ 204.610197][ T29] audit: type=1400 audit(1788315623.799:2174): avc: denied { write } for pid=11618 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 204.637060][ T29] audit: type=1326 audit(1788315623.839:2175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11620 comm="syz.3.2581" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7fac2dc9e159 code=0x7ffc0000 [ 204.688813][T11628] netlink: 'syz.8.2582': attribute type 1 has an invalid length. [ 204.713297][T11628] 8021q: adding VLAN 0 to HW filter on device bond1 [ 204.767366][T11628] bridge0: port 3(team0) entered disabled state [ 204.770729][T11628] team0: left allmulticast mode [ 204.775682][T11628] team_slave_0: left allmulticast mode [ 204.775747][T11628] team_slave_1: left allmulticast mode [ 204.775858][T11628] team0: left promiscuous mode [ 204.775910][T11628] team_slave_0: left promiscuous mode [ 204.776165][T11628] team_slave_1: left promiscuous mode [ 204.776689][T11628] bridge0: port 3(team0) entered disabled state [ 204.806708][T11628] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.830231][T11628] bond1: (slave team0): Enslaving as a backup interface with an up link [ 205.231361][ T4611] kernel read not supported for file /per_cpu/cpu0/trace_pipe_raw (pid: 4611 comm: kworker/1:6) [ 205.342585][T11682] FAULT_INJECTION: forcing a failure. [ 205.342585][T11682] name failslab, interval 1, probability 0, space 0, times 0 [ 205.342682][T11682] CPU: 1 UID: 0 PID: 11682 Comm: syz.8.2593 Not tainted syzkaller #0 PREEMPT(lazy) [ 205.342709][T11682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 205.342723][T11682] Call Trace: [ 205.342731][T11682] [ 205.342740][T11682] __dump_stack+0x1d/0x30 [ 205.342848][T11682] dump_stack_lvl+0x95/0xd0 [ 205.342875][T11682] dump_stack+0x15/0x1b [ 205.342897][T11682] should_fail_ex+0x262/0x280 [ 205.342921][T11682] ? security_file_alloc+0x32/0xf0 [ 205.342973][T11682] should_failslab+0x8c/0xb0 [ 205.343009][T11682] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 205.343062][T11682] ? security_file_alloc+0x32/0xf0 [ 205.343114][T11682] security_file_alloc+0x32/0xf0 [ 205.343153][T11682] init_file+0x5b/0x1b0 [ 205.343176][T11682] alloc_empty_file+0x85/0x1e0 [ 205.343279][T11682] alloc_file_pseudo+0x92/0x120 [ 205.343305][T11682] anon_inode_getfile+0xa0/0x120 [ 205.343365][T11682] init_listener+0xc5/0x170 [ 205.343405][T11682] do_seccomp+0x70b/0xa40 [ 205.343443][T11682] ? restore_fpregs_from_fpstate+0x61/0x110 [ 205.343500][T11682] __x64_sys_seccomp+0x40/0x50 [ 205.343536][T11682] x64_sys_call+0x3f0/0x2550 [ 205.343572][T11682] do_syscall_64+0x112/0x360 [ 205.343613][T11682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.343745][T11682] RIP: 0033:0x7f61096ae159 [ 205.343768][T11682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 205.343793][T11682] RSP: 002b:00007f6108107028 EFLAGS: 00000246 ORIG_RAX: 000000000000013d [ 205.343822][T11682] RAX: ffffffffffffffda RBX: 00007f6109935fa0 RCX: 00007f61096ae159 [ 205.343843][T11682] RDX: 0000200000000240 RSI: 000000000000000c RDI: 0000000000000001 [ 205.343863][T11682] RBP: 00007f6109745024 R08: 0000000000000000 R09: 0000000000000000 [ 205.343881][T11682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.343946][T11682] R13: 00007f6109936038 R14: 00007f6109935fa0 R15: 00007ffcf7859198 [ 205.343969][T11682] [ 206.230060][T11749] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 206.237567][T11753] loop8: detected capacity change from 0 to 512 [ 206.339465][T11753] EXT4-fs: Ignoring removed nobh option [ 206.352306][T11753] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 206.352373][T11753] System zones: 1-12 [ 206.364917][T11753] EXT4-fs error (device loop8): ext4_iget_extra_inode:5210: inode #15: comm syz.8.2612: corrupted in-inode xattr: overlapping e_value [ 206.364967][T11753] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 206.378909][ C1] EXT4-fs (loop8): error count since last fsck: 1 [ 206.378940][ C1] EXT4-fs (loop8): initial error at time 1788315625: ext4_iget_extra_inode:5210: inode 15 [ 206.378983][ C1] EXT4-fs (loop8): last error at time 1788315625: ext4_iget_extra_inode:5210: inode 15 [ 206.416896][T11753] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.2612: couldn't read orphan inode 15 (err -117) [ 206.416941][T11753] loop8: lost filesystem error report for type 5 error -117 [ 206.430204][T11753] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.124092][ T9731] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 207.279359][T11810] loop7: detected capacity change from 0 to 512 [ 207.289562][T11810] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 207.309764][T11810] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 207.309915][T11810] ext4 filesystem being mounted at /152/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 207.379746][T11822] IPv6: Can't replace route, no match found [ 207.536938][ T8941] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.065480][ T29] kauditd_printk_skb: 23 callbacks suppressed [ 209.065512][ T29] audit: type=1326 audit(1788315628.269:2199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.1.2657" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61f91e159 code=0x7ffc0000 [ 209.065631][ T29] audit: type=1326 audit(1788315628.269:2200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.1.2657" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61f91e159 code=0x7ffc0000 [ 209.066059][ T29] audit: type=1326 audit(1788315628.269:2201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.1.2657" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61f91e159 code=0x7ffc0000 [ 209.066156][ T29] audit: type=1326 audit(1788315628.269:2203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.1.2657" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe61f91e159 code=0x7ffc0000 [ 209.066218][ T29] audit: type=1326 audit(1788315628.269:2202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.1.2657" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61f91e159 code=0x7ffc0000 [ 209.105402][ T29] audit: type=1326 audit(1788315628.279:2204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.1.2657" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61f91e159 code=0x7ffc0000 [ 209.105452][ T29] audit: type=1326 audit(1788315628.279:2205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.1.2657" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61f91e159 code=0x7ffc0000 [ 209.131886][ T29] audit: type=1326 audit(1788315628.309:2206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.1.2657" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe61f91e159 code=0x7ffc0000 [ 209.131925][ T29] audit: type=1326 audit(1788315628.309:2207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11908 comm="syz.1.2657" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe61f91e159 code=0x7ffc0000 [ 210.760131][T11858] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 210.817428][T11933] loop2: detected capacity change from 0 to 512 [ 210.840522][T11933] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 210.860958][T11933] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 210.861046][T11933] ext4 filesystem being mounted at /13/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.891806][ T29] audit: type=1400 audit(1788315630.089:2208): avc: denied { write } for pid=11931 comm="syz.2.2663" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 211.059946][T11325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 211.399268][T11974] gretap0 speed is unknown, defaulting to 1000 [ 211.399308][T11974] gretap0 speed is unknown, defaulting to 1000 [ 211.399515][T11974] gretap0 speed is unknown, defaulting to 1000 [ 211.419503][T11974] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 211.430807][T11974] gretap0 speed is unknown, defaulting to 1000 [ 211.431141][T11974] gretap0 speed is unknown, defaulting to 1000 [ 211.444263][T11974] gretap0 speed is unknown, defaulting to 1000 [ 211.444655][T11974] gretap0 speed is unknown, defaulting to 1000 [ 211.445011][T11974] gretap0 speed is unknown, defaulting to 1000 [ 211.445410][T11974] gretap0 speed is unknown, defaulting to 1000 [ 211.928650][T11985] gretap0 speed is unknown, defaulting to 1000 [ 211.994568][T11994] loop8: detected capacity change from 0 to 1024 [ 211.996200][T11994] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 212.892213][T12004] loop8: detected capacity change from 0 to 512 [ 212.911096][T12004] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 212.928402][T12004] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 212.928501][T12004] ext4 filesystem being mounted at /99/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 212.999677][T12011] ./dev/sda1: Can't lookup blockdev [ 213.156311][ T9731] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.174750][T12022] netlink: 'syz.1.2694': attribute type 4 has an invalid length. [ 213.184127][T12022] netlink: 'syz.1.2694': attribute type 4 has an invalid length. [ 213.236111][T12026] gretap0 speed is unknown, defaulting to 1000 [ 213.310043][T12035] gretap2: entered promiscuous mode [ 213.597840][T12052] loop8: detected capacity change from 0 to 512 [ 213.605987][T12052] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 213.628431][T12052] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.628595][T12052] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 213.780007][ T9731] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 213.875039][T12016] 9pnet_fd: p9_fd_create_tcp (12016): problem connecting socket to 127.0.0.1 [ 214.060597][T12082] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 214.226872][T12099] netlink: 11870 bytes leftover after parsing attributes in process `syz.3.2722'. [ 214.325013][T12107] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2725'. [ 214.442518][T12111] netlink: 'syz.1.2727': attribute type 1 has an invalid length. [ 214.562142][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 214.562168][ T29] audit: type=1400 audit(1788315633.759:2212): avc: denied { ioctl } for pid=12116 comm="syz.2.2739" path="/dev/input/event2" dev="devtmpfs" ino=245 ioctlcmd=0x4592 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 214.613372][ T29] audit: type=1400 audit(1788315633.819:2213): avc: denied { write } for pid=12116 comm="syz.2.2739" name="event2" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 215.287010][T12146] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2740'. [ 215.372285][T12152] batadv_slave_0: entered promiscuous mode [ 215.384339][T12152] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2742'. [ 215.387864][T12152] batadv_slave_0 (unregistering): left promiscuous mode [ 215.388531][T12152] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.426618][T12155] xt_hashlimit: size too large, truncated to 1048576 [ 215.746831][T12167] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2749'. [ 215.855036][ T29] audit: type=1400 audit(1788315635.059:2214): avc: denied { read write } for pid=12172 comm="syz.8.2752" name="rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 215.855136][ T29] audit: type=1400 audit(1788315635.059:2215): avc: denied { open } for pid=12172 comm="syz.8.2752" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 215.964855][ T29] audit: type=1400 audit(1788315635.169:2216): avc: denied { bind } for pid=12176 comm="syz.8.2753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 216.127032][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 216.135619][ T29] audit: type=1400 audit(1788315635.329:2217): avc: denied { bind } for pid=12182 comm="syz.8.2756" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 216.171836][T12185] loop2: detected capacity change from 0 to 1024 [ 216.189151][T12185] EXT4-fs (loop2): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 216.200271][T12185] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 2: comm syz.2.2757: lblock 2 mapped to illegal pblock 2 (length 1) [ 216.200351][T12185] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 216.200841][T12185] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 216.200900][T12185] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 48: comm syz.2.2757: lblock 0 mapped to illegal pblock 48 (length 1) [ 216.200989][T12185] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 216.201778][T12185] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 216.201832][T12185] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.2757: Failed to acquire dquot type 0 [ 216.201919][T12185] loop2: lost filesystem error report for type 5 error -117 [ 216.202239][T12185] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 216.202290][T12185] loop2: lost filesystem error report for type 5 error -117 [ 216.202481][T12185] EXT4-fs error (device loop2): ext4_evict_inode:269: inode #11: comm syz.2.2757: mark_inode_dirty error [ 216.202595][T12185] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 216.204019][T12185] EXT4-fs warning (device loop2): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 216.204187][T12185] EXT4-fs (loop2): 1 orphan inode deleted [ 216.207761][T12185] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.231750][ T38] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 216.233148][ T38] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 216.233300][ T38] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:2: Failed to release dquot type 0 [ 216.243013][ T29] audit: type=1400 audit(1788315635.429:2218): avc: denied { write } for pid=12184 comm="syz.2.2757" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 216.352604][T11325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 216.366033][ T38] EXT4-fs error (device loop2): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:2: lblock 1 mapped to illegal pblock 1 (length 1) [ 216.366158][ T38] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 216.367916][ T38] EXT4-fs error (device loop2): ext4_release_dquot:7105: comm kworker/u8:2: Failed to release dquot type 0 [ 216.367992][ T38] loop2: lost filesystem error report for type 5 error -117 [ 216.371850][T11325] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 216.371938][T11325] loop2: lost filesystem error report for type 5 error -117 [ 216.372161][T11325] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 216.372262][T11325] loop2: lost filesystem error report for type 5 error -117 [ 216.372476][T11325] EXT4-fs error (device loop2): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 216.372558][T11325] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 216.376694][T11325] EXT4-fs error (device loop2): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 216.376792][T11325] loop2: lost filesystem error report for type 5 error -117 [ 216.595793][T12195] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2761'. [ 217.273459][T12210] syz.3.2768: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 217.273844][T12210] CPU: 0 UID: 0 PID: 12210 Comm: syz.3.2768 Not tainted syzkaller #0 PREEMPT(lazy) [ 217.274059][T12210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 217.274105][T12210] Call Trace: [ 217.274134][T12210] [ 217.274157][T12210] __dump_stack+0x1d/0x30 [ 217.274232][T12210] dump_stack_lvl+0x95/0xd0 [ 217.274309][T12210] dump_stack+0x15/0x1b [ 217.274376][T12210] warn_alloc+0x146/0x1c0 [ 217.274546][T12210] __vmalloc_node_range_noprof+0xa3/0x1000 [ 217.274653][T12210] ? avc_lookup+0x128/0x1a0 [ 217.274735][T12210] ? __tsan_read4+0xe6/0x190 [ 217.274755][T12210] ? __rcu_read_unlock+0x4e/0x70 [ 217.274883][T12210] ? should_fail_ex+0x31/0x280 [ 217.274957][T12210] ? xskq_create+0x38/0x160 [ 217.275125][T12210] ? should_failslab+0x8c/0xb0 [ 217.275236][T12210] ? __kmalloc_cache_noprof+0x19b/0x400 [ 217.275356][T12210] xskq_create+0xea/0x160 [ 217.275478][T12210] ? xsk_init_queue+0x70/0xb0 [ 217.275577][T12210] xsk_init_queue+0x70/0xb0 [ 217.275692][T12210] xsk_setsockopt+0x3ef/0x640 [ 217.275789][T12210] ? __pfx_xsk_setsockopt+0x10/0x10 [ 217.275890][T12210] __sys_setsockopt+0x184/0x200 [ 217.276019][T12210] __x64_sys_setsockopt+0x64/0x80 [ 217.276119][T12210] x64_sys_call+0x248f/0x2550 [ 217.276220][T12210] do_syscall_64+0x112/0x360 [ 217.276341][T12210] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.276420][T12210] RIP: 0033:0x7fac2dc9e159 [ 217.276526][T12210] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 217.276627][T12210] RSP: 002b:00007fac2c6f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 217.276735][T12210] RAX: ffffffffffffffda RBX: 00007fac2df25fa0 RCX: 00007fac2dc9e159 [ 217.276803][T12210] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 217.276857][T12210] RBP: 00007fac2dd35024 R08: 0000000000000004 R09: 0000000000000000 [ 217.276921][T12210] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 217.277066][T12210] R13: 00007fac2df26038 R14: 00007fac2df25fa0 R15: 00007ffffb6a71e8 [ 217.277133][T12210] [ 217.292184][T12210] Mem-Info: [ 217.292218][T12210] active_anon:41960 inactive_anon:16669 isolated_anon:0 [ 217.292218][T12210] active_file:17 inactive_file:27912 isolated_file:0 [ 217.292218][T12210] unevictable:0 dirty:194 writeback:0 [ 217.292218][T12210] slab_reclaimable:3814 slab_unreclaimable:19700 [ 217.292218][T12210] mapped:29451 shmem:50315 pagetables:3771 [ 217.292218][T12210] sec_pagetables:0 bounce:0 [ 217.292218][T12210] kernel_misc_reclaimable:0 [ 217.292218][T12210] free:1812955 free_pcp:9367 free_cma:0 [ 217.292317][T12210] Node 0 active_anon:167840kB inactive_anon:66676kB active_file:68kB inactive_file:111648kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117804kB dirty:776kB writeback:0kB shmem:201260kB kernel_stack:5072kB pagetables:15084kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 217.292512][T12210] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 217.292692][T12210] lowmem_reserve[]: 0 2877 7856 7856 [ 217.292903][T12210] Node 0 DMA32 free:2943396kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2946920kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 217.292984][T12210] lowmem_reserve[]: 0 0 4978 4978 [ 217.293202][T12210] Node 0 Normal free:4293064kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0kB free_highatomic:0kB active_anon:167840kB inactive_anon:66676kB active_file:68kB inactive_file:111648kB unevictable:0kB writepending:776kB zspages:0kB present:5242880kB managed:5098228kB mlocked:0kB bounce:0kB free_pcp:33944kB local_pcp:10164kB free_cma:0kB [ 217.293416][T12210] lowmem_reserve[]: 0 0 0 0 [ 217.293564][T12210] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 217.294155][T12210] Node 0 DMA32: 1*4kB (M) 2*8kB (M) 3*16kB (M) 1*32kB (M) 3*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 2*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2943396kB [ 217.295649][T12210] Node 0 Normal: 2*4kB (ME) 2*8kB (ME) 53*16kB (UE) 265*32kB (UME) 81*64kB (UME) 248*128kB (UM) 151*256kB (UME) 31*512kB (UM) 12*1024kB (UM) 3*2048kB (UM) 1019*4096kB (UM) = 4293064kB [ 217.298188][T12210] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 217.298321][T12210] 78276 total pagecache pages [ 217.298829][T12210] 8 pages in swap cache [ 217.299128][T12210] Free swap = 123604kB [ 217.299284][T12210] Total swap = 124996kB [ 217.299488][T12210] 2097051 pages RAM [ 217.299651][T12210] 0 pages HighMem/MovableOnly [ 217.300009][T12210] 81924 pages reserved [ 217.845013][T12221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.845129][T12221] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.864178][T12221] netlink: 'syz.2.2774': attribute type 1 has an invalid length. [ 217.888165][T12221] 8021q: adding VLAN 0 to HW filter on device bond1 [ 218.183647][ T3910] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 218.527389][T12274] loop2: detected capacity change from 0 to 1024 [ 218.536899][T12274] EXT4-fs: Ignoring removed nobh option [ 218.537056][T12274] EXT4-fs: Ignoring removed bh option [ 218.577389][T12274] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 218.577435][T12274] System zones: 0-1, 3-12 [ 218.586349][T12274] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 218.707933][T11325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 219.017640][T12314] loop8: detected capacity change from 0 to 256 [ 219.027053][T12314] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 219.056722][T12314] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 219.261156][T12331] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2795'. [ 219.746506][T12349] FAULT_INJECTION: forcing a failure. [ 219.746506][T12349] name failslab, interval 1, probability 0, space 0, times 0 [ 219.746575][T12349] CPU: 1 UID: 0 PID: 12349 Comm: syz.2.2802 Not tainted syzkaller #0 PREEMPT(lazy) [ 219.746677][T12349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 219.746696][T12349] Call Trace: [ 219.746706][T12349] [ 219.746716][T12349] __dump_stack+0x1d/0x30 [ 219.746752][T12349] dump_stack_lvl+0x95/0xd0 [ 219.746811][T12349] dump_stack+0x15/0x1b [ 219.746841][T12349] should_fail_ex+0x262/0x280 [ 219.746872][T12349] ? tipc_sub_subscribe+0xc4/0x330 [ 219.746982][T12349] should_failslab+0x8c/0xb0 [ 219.747020][T12349] __kmalloc_cache_noprof+0x7a/0x400 [ 219.747058][T12349] ? idr_alloc_u32+0x140/0x1a0 [ 219.747096][T12349] ? tipc_sub_subscribe+0xc4/0x330 [ 219.747206][T12349] tipc_sub_subscribe+0xc4/0x330 [ 219.747253][T12349] tipc_conn_rcv_sub+0xf4/0x200 [ 219.747298][T12349] tipc_topsrv_kern_subscr+0x17a/0x1e0 [ 219.747347][T12349] tipc_group_create+0x234/0x270 [ 219.747435][T12349] tipc_sk_join+0x110/0x450 [ 219.747474][T12349] ? lock_sock_nested+0x84/0x110 [ 219.747499][T12349] tipc_setsockopt+0x594/0x620 [ 219.747528][T12349] ? __pfx_tipc_setsockopt+0x10/0x10 [ 219.747698][T12349] __sys_setsockopt+0x184/0x200 [ 219.747733][T12349] __x64_sys_setsockopt+0x64/0x80 [ 219.747841][T12349] x64_sys_call+0x248f/0x2550 [ 219.747890][T12349] do_syscall_64+0x112/0x360 [ 219.747938][T12349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.747989][T12349] RIP: 0033:0x7fa05566e159 [ 219.748007][T12349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 219.748086][T12349] RSP: 002b:00007fa0540c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 219.748114][T12349] RAX: ffffffffffffffda RBX: 00007fa0558f5fa0 RCX: 00007fa05566e159 [ 219.748133][T12349] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 219.748149][T12349] RBP: 00007fa055705024 R08: 0000000000000010 R09: 0000000000000000 [ 219.748164][T12349] R10: 0000200000000040 R11: 0000000000000246 R12: 0000000000000000 [ 219.748235][T12349] R13: 00007fa0558f6038 R14: 00007fa0558f5fa0 R15: 00007fff8467fae8 [ 219.748264][T12349] [ 219.762085][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 219.762103][ T29] audit: type=1400 audit(1788315638.959:2228): avc: denied { name_bind } for pid=12348 comm="syz.8.2803" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 219.899469][T12349] tipc: Subscription rejected, no memory [ 220.350401][T12374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2810'. [ 221.013283][T12402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2826'. [ 221.013385][T12402] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2826'. [ 221.092575][T12407] ./dev/sda1: Can't lookup blockdev [ 221.294808][T12397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 221.321752][T12397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 221.325450][T12423] FAULT_INJECTION: forcing a failure. [ 221.325450][T12423] name failslab, interval 1, probability 0, space 0, times 0 [ 221.325549][T12423] CPU: 0 UID: 0 PID: 12423 Comm: syz.2.2835 Not tainted syzkaller #0 PREEMPT(lazy) [ 221.325632][T12423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 221.325676][T12423] Call Trace: [ 221.325705][T12423] [ 221.325806][T12423] __dump_stack+0x1d/0x30 [ 221.325951][T12423] dump_stack_lvl+0x95/0xd0 [ 221.326026][T12423] dump_stack+0x15/0x1b [ 221.326100][T12423] should_fail_ex+0x262/0x280 [ 221.326174][T12423] ? __register_sysctl_table+0x7a0/0xbe0 [ 221.326372][T12423] should_failslab+0x8c/0xb0 [ 221.326556][T12423] __kmalloc_noprof+0xd0/0x4d0 [ 221.326650][T12423] ? __register_sysctl_table+0x7a0/0xbe0 [ 221.326819][T12423] __register_sysctl_table+0x7a0/0xbe0 [ 221.327008][T12423] setup_ipc_sysctls+0x894/0x8d0 [ 221.327124][T12423] copy_ipcs+0x297/0x460 [ 221.327252][T12423] create_new_namespaces+0x121/0x420 [ 221.327429][T12423] unshare_nsproxy_namespaces+0x115/0x150 [ 221.327593][T12423] ksys_unshare+0x42b/0x710 [ 221.327696][T12423] __x64_sys_unshare+0x1f/0x30 [ 221.327883][T12423] x64_sys_call+0x1e33/0x2550 [ 221.327989][T12423] do_syscall_64+0x112/0x360 [ 221.328094][T12423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.328202][T12423] RIP: 0033:0x7fa05566e159 [ 221.328257][T12423] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 221.328344][T12423] RSP: 002b:00007fa0540c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 221.328404][T12423] RAX: ffffffffffffffda RBX: 00007fa0558f5fa0 RCX: 00007fa05566e159 [ 221.328456][T12423] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 221.328499][T12423] RBP: 00007fa055705024 R08: 0000000000000000 R09: 0000000000000000 [ 221.328606][T12423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 221.328648][T12423] R13: 00007fa0558f6038 R14: 00007fa0558f5fa0 R15: 00007fff8467fae8 [ 221.328712][T12423] [ 221.336935][T12423] sysctl could not get directory: /kernel -12 [ 221.605284][ T29] audit: type=1326 audit(1788315640.809:2229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12429 comm="syz.2.2839" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05566e159 code=0x7ffc0000 [ 221.613155][ T29] audit: type=1326 audit(1788315640.809:2230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12429 comm="syz.2.2839" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05566e159 code=0x7ffc0000 [ 221.613274][ T29] audit: type=1326 audit(1788315640.809:2231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12429 comm="syz.2.2839" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05566e159 code=0x7ffc0000 [ 221.661954][ T29] audit: type=1326 audit(1788315640.859:2232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12429 comm="syz.2.2839" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa05566e159 code=0x7ffc0000 [ 221.662475][ T29] audit: type=1326 audit(1788315640.859:2233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12429 comm="syz.2.2839" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa05566dec2 code=0x7ffc0000 [ 221.663422][ T29] audit: type=1326 audit(1788315640.859:2234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12429 comm="syz.2.2839" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fa05566df57 code=0x7ffc0000 [ 221.668883][ T29] audit: type=1326 audit(1788315640.869:2235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12429 comm="syz.2.2839" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fa05562ae51 code=0x7ffc0000 [ 221.669383][ T29] audit: type=1326 audit(1788315640.869:2236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12429 comm="syz.2.2839" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7fa05566ef49 code=0x7ffc0000 [ 221.669747][ T29] audit: type=1326 audit(1788315640.869:2237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12429 comm="syz.2.2839" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7fa05562a5ac code=0x7ffc0000 [ 222.121615][T12462] loop8: detected capacity change from 0 to 1024 [ 222.134573][T12462] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 222.506017][ T9731] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 222.589053][T12470] FAULT_INJECTION: forcing a failure. [ 222.589053][T12470] name failslab, interval 1, probability 0, space 0, times 0 [ 222.589102][T12470] CPU: 1 UID: 0 PID: 12470 Comm: syz.2.2855 Not tainted syzkaller #0 PREEMPT(lazy) [ 222.589185][T12470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 222.589200][T12470] Call Trace: [ 222.589209][T12470] [ 222.589220][T12470] __dump_stack+0x1d/0x30 [ 222.589247][T12470] dump_stack_lvl+0x95/0xd0 [ 222.589270][T12470] dump_stack+0x15/0x1b [ 222.589336][T12470] should_fail_ex+0x262/0x280 [ 222.589360][T12470] should_failslab+0x8c/0xb0 [ 222.589391][T12470] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 222.589434][T12470] ? xas_create+0xb9c/0xbf0 [ 222.589481][T12470] ? kstrdup_const+0x3e/0x50 [ 222.589500][T12470] ? kstrdup_const+0x3e/0x50 [ 222.589527][T12470] kstrdup+0x3e/0xd0 [ 222.589625][T12470] kstrdup_const+0x3e/0x50 [ 222.589652][T12470] __kernfs_new_node+0x42/0x440 [ 222.589690][T12470] ? make_kgid+0x15c/0x350 [ 222.589759][T12470] ? net_ns_get_ownership+0xb3/0xd0 [ 222.589783][T12470] ? __pfx_net_get_ownership+0x10/0x10 [ 222.589815][T12470] kernfs_create_dir_ns+0xd0/0x170 [ 222.589911][T12470] sysfs_create_dir_ns+0xd4/0x1d0 [ 222.590032][T12470] kobject_add_internal+0x470/0x770 [ 222.590064][T12470] kobject_add+0xdb/0x150 [ 222.590109][T12470] ? kobject_put+0x108/0x180 [ 222.590145][T12470] ? device_add+0x2e8/0x790 [ 222.590174][T12470] device_add+0x2f6/0x790 [ 222.590201][T12470] netdev_register_kobject+0x127/0x240 [ 222.590320][T12470] register_netdevice+0xaf7/0x11a0 [ 222.590355][T12470] tun_set_iff+0x5fe/0x870 [ 222.590405][T12470] __tun_chr_ioctl+0x682/0x1550 [ 222.590442][T12470] ? selinux_file_ioctl+0x33c/0x3c0 [ 222.590558][T12470] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 222.590593][T12470] tun_chr_ioctl+0x27/0x40 [ 222.590627][T12470] __se_sys_ioctl+0xce/0x140 [ 222.590683][T12470] __x64_sys_ioctl+0x43/0x50 [ 222.590718][T12470] x64_sys_call+0x239d/0x2550 [ 222.590746][T12470] do_syscall_64+0x112/0x360 [ 222.590848][T12470] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.590877][T12470] RIP: 0033:0x7fa05566e159 [ 222.590894][T12470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 222.590913][T12470] RSP: 002b:00007fa0540c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 222.590937][T12470] RAX: ffffffffffffffda RBX: 00007fa0558f5fa0 RCX: 00007fa05566e159 [ 222.591038][T12470] RDX: 0000200000000040 RSI: 00000000400454ca RDI: 0000000000000004 [ 222.591113][T12470] RBP: 00007fa055705024 R08: 0000000000000000 R09: 0000000000000000 [ 222.591141][T12470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 222.591155][T12470] R13: 00007fa0558f6038 R14: 00007fa0558f5fa0 R15: 00007fff8467fae8 [ 222.591220][T12470] [ 222.721419][T12470] kobject: kobject_add_internal failed for syzkaller0 (error: -12 parent: net) [ 223.171144][T12491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2863'. [ 223.171226][T12491] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2863'. [ 223.190293][T12491] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Remote Mapping info ret = -22) [ 223.504490][ T8941] bridge0: port 4(syz_tun) entered disabled state [ 223.511766][T12495] loop8: detected capacity change from 0 to 512 [ 223.711955][ T8941] syz_tun (unregistering): left allmulticast mode [ 223.711985][ T8941] syz_tun (unregistering): left promiscuous mode [ 223.712053][ T8941] bridge0: port 4(syz_tun) entered disabled state [ 223.827345][ T404] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.827450][ T404] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.892272][T12526] ip_tables: iptables: counters copy to user failed while replacing table [ 223.924043][ T404] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 223.924171][ T404] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.947000][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 224.008851][T12506] gretap0 speed is unknown, defaulting to 1000 [ 224.021716][ T404] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.021848][ T404] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.119296][ T404] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 224.119380][ T404] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.260983][T12506] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.261036][T12506] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.261164][T12506] bridge_slave_0: entered allmulticast mode [ 224.262121][T12506] bridge_slave_0: entered promiscuous mode [ 224.293812][T12506] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.293862][T12506] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.294052][T12506] bridge_slave_1: entered allmulticast mode [ 224.315628][T12506] bridge_slave_1: entered promiscuous mode [ 224.351434][T12506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.359633][T12506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.451075][T12560] FAULT_INJECTION: forcing a failure. [ 224.451075][T12560] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 224.451120][T12560] CPU: 0 UID: 0 PID: 12560 Comm: syz.8.2886 Not tainted syzkaller #0 PREEMPT(lazy) [ 224.451220][T12560] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 224.451238][T12560] Call Trace: [ 224.451248][T12560] [ 224.451259][T12560] __dump_stack+0x1d/0x30 [ 224.451294][T12560] dump_stack_lvl+0x95/0xd0 [ 224.451358][T12560] dump_stack+0x15/0x1b [ 224.451383][T12560] should_fail_ex+0x262/0x280 [ 224.451410][T12560] ? __pfx_ucma_reject+0x10/0x10 [ 224.451500][T12560] should_fail+0xb/0x20 [ 224.451519][T12560] should_fail_usercopy+0x1a/0x20 [ 224.451621][T12560] _copy_from_user+0x1c/0xb0 [ 224.451653][T12560] ucma_reject+0x52/0x1f0 [ 224.451706][T12560] ? __pfx_ucma_reject+0x10/0x10 [ 224.451798][T12560] ucma_write+0x1c9/0x260 [ 224.451835][T12560] ? __pfx_ucma_write+0x10/0x10 [ 224.451893][T12560] vfs_write+0x254/0x9a0 [ 224.451931][T12560] ? __fget_files+0x184/0x1c0 [ 224.451963][T12560] ksys_write+0xdc/0x1a0 [ 224.452064][T12560] __x64_sys_write+0x40/0x50 [ 224.452093][T12560] x64_sys_call+0x154e/0x2550 [ 224.452181][T12560] do_syscall_64+0x112/0x360 [ 224.452264][T12560] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.452346][T12560] RIP: 0033:0x7f61096ae159 [ 224.452369][T12560] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 224.452396][T12560] RSP: 002b:00007f6108107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 224.452425][T12560] RAX: ffffffffffffffda RBX: 00007f6109935fa0 RCX: 00007f61096ae159 [ 224.452485][T12560] RDX: 0000000000000110 RSI: 00002000000003c0 RDI: 0000000000000003 [ 224.452504][T12560] RBP: 00007f6109745024 R08: 0000000000000000 R09: 0000000000000000 [ 224.452523][T12560] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 224.452539][T12560] R13: 00007f6109936038 R14: 00007f6109935fa0 R15: 00007ffcf7859198 [ 224.452566][T12560] [ 224.486942][ T404] team0: left allmulticast mode [ 224.487021][ T404] team_slave_0: left allmulticast mode [ 224.487042][ T404] team_slave_1: left allmulticast mode [ 224.487095][ T404] team0: left promiscuous mode [ 224.487109][ T404] team_slave_0: left promiscuous mode [ 224.487179][ T404] team_slave_1: left promiscuous mode [ 224.487403][ T404] bridge0: port 3(team0) entered disabled state [ 224.494232][ T404] bridge_slave_1: left allmulticast mode [ 224.494297][ T404] bridge_slave_1: left promiscuous mode [ 224.494638][ T404] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.511037][ T404] bridge_slave_0: left allmulticast mode [ 224.511108][ T404] bridge_slave_0: left promiscuous mode [ 224.511503][ T404] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.741557][T12564] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2888'. [ 224.760052][ T404] bond2 (unregistering): (slave ip6gre1): Releasing backup interface [ 224.760091][ T404] ip6gre1 (unregistering): left promiscuous mode [ 224.831415][T12573] ip_tables: iptables: counters copy to user failed while replacing table [ 224.846545][ T404] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.868608][ T404] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.871711][ T404] bond0 (unregistering): Released all slaves [ 224.885658][ T404] bond1 (unregistering): (slave veth3): Releasing active interface [ 224.895019][ T404] bond1 (unregistering): Released all slaves [ 224.902407][ T404] bond2 (unregistering): Released all slaves [ 224.912617][T12506] team0: Port device team_slave_0 added [ 224.948910][T12564] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.967231][T12564] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.977408][T12564] bond0 (unregistering): Released all slaves [ 225.003425][T12506] team0: Port device team_slave_1 added [ 225.011565][ T404] hsr_slave_0: left promiscuous mode [ 225.019589][ T404] hsr_slave_1: left promiscuous mode [ 225.020175][ T404] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.020312][ T404] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.022093][ T404] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.022169][ T404] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.049571][ T404] veth1_macvtap: left promiscuous mode [ 225.049613][ T404] veth0_macvtap: left promiscuous mode [ 225.202874][T12569] loop8: detected capacity change from 0 to 512 [ 225.255170][ T404] team0 (unregistering): Port device team_slave_1 removed [ 225.265727][ T404] team0 (unregistering): Port device team_slave_0 removed [ 225.325114][T12569] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 225.366680][T12575] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.366842][T12575] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.367125][T12575] bridge0: entered allmulticast mode [ 225.389769][T12578] bridge_slave_1: left allmulticast mode [ 225.389800][T12578] bridge_slave_1: left promiscuous mode [ 225.390057][T12578] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.390921][T12578] bridge_slave_0: left allmulticast mode [ 225.390947][T12578] bridge_slave_0: left promiscuous mode [ 225.391310][T12578] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.434804][T12506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.434828][T12506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.434943][T12506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.479602][T12506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.479628][T12506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 225.479672][T12506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.636666][T12506] hsr_slave_0: entered promiscuous mode [ 225.637047][T12506] hsr_slave_1: entered promiscuous mode [ 225.639217][T12506] debugfs: 'hsr0' already exists in 'hsr' [ 225.639270][T12506] Cannot create hsr debugfs directory [ 225.688019][T12569] EXT4-fs (loop8): orphan cleanup on readonly fs [ 225.699057][T12569] EXT4-fs warning (device loop8): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 225.699203][T12569] EXT4-fs (loop8): Cannot turn on quotas: error -22 [ 225.699225][T12569] EXT4-fs error (device loop8): ext4_orphan_get:1429: comm syz.8.2890: bad orphan inode 768 [ 225.699249][T12569] loop8: lost filesystem error report for type 5 error -117 [ 225.714561][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 225.714590][ C0] EXT4-fs (loop8): initial error at time 1788315644: ext4_orphan_get:1429 [ 225.714623][ C0] EXT4-fs (loop8): last error at time 1788315644: ext4_orphan_get:1429 [ 225.745714][ T29] kauditd_printk_skb: 41 callbacks suppressed [ 225.745734][ T29] audit: type=1400 audit(1788315644.949:2279): avc: denied { write } for pid=12586 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 225.818361][T12569] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 225.856561][T12609] FAULT_INJECTION: forcing a failure. [ 225.856561][T12609] name failslab, interval 1, probability 0, space 0, times 0 [ 225.856609][T12609] CPU: 1 UID: 0 PID: 12609 Comm: syz.2.2900 Not tainted syzkaller #0 PREEMPT(lazy) [ 225.856711][T12609] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 225.856729][T12609] Call Trace: [ 225.856740][T12609] [ 225.856751][T12609] __dump_stack+0x1d/0x30 [ 225.856784][T12609] dump_stack_lvl+0x95/0xd0 [ 225.856946][T12609] dump_stack+0x15/0x1b [ 225.857024][T12609] should_fail_ex+0x262/0x280 [ 225.857119][T12609] should_failslab+0x8c/0xb0 [ 225.857238][T12609] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 225.857398][T12609] ? clockevents_program_event+0x2fd/0x340 [ 225.857507][T12609] ? kstrdup_const+0x3e/0x50 [ 225.857579][T12609] ? kstrdup_const+0x3e/0x50 [ 225.857656][T12609] kstrdup+0x3e/0xd0 [ 225.857801][T12609] kstrdup_const+0x3e/0x50 [ 225.857940][T12609] __kernfs_new_node+0x42/0x440 [ 225.858058][T12609] ? irqentry_exit+0x58f/0x610 [ 225.858154][T12609] kernfs_create_dir_ns+0xd0/0x170 [ 225.858344][T12609] sysfs_create_dir_ns+0xd4/0x1d0 [ 225.858452][T12609] kobject_add_internal+0x470/0x770 [ 225.858543][T12609] kobject_init_and_add+0x13c/0x1e0 [ 225.858734][T12609] ? bus_add_driver+0x11f/0x450 [ 225.858906][T12609] ? __kmalloc_cache_noprof+0x331/0x400 [ 225.859015][T12609] bus_add_driver+0x1a7/0x450 [ 225.859139][T12609] driver_register+0x162/0x220 [ 225.859227][T12609] usb_gadget_register_driver_owner+0x92/0x1a0 [ 225.859394][T12609] raw_ioctl+0xc5b/0x1df0 [ 225.859497][T12609] ? ioctl_has_perm+0x273/0x2c0 [ 225.859612][T12609] ? do_vfs_ioctl+0x848/0xe50 [ 225.859739][T12609] ? selinux_file_ioctl+0x33c/0x3c0 [ 225.859774][T12609] ? __fget_files+0x184/0x1c0 [ 225.859829][T12609] ? __pfx_raw_ioctl+0x10/0x10 [ 225.860046][T12609] __se_sys_ioctl+0xce/0x140 [ 225.860153][T12609] __x64_sys_ioctl+0x43/0x50 [ 225.860260][T12609] x64_sys_call+0x239d/0x2550 [ 225.860429][T12609] do_syscall_64+0x112/0x360 [ 225.860526][T12609] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.860615][T12609] RIP: 0033:0x7fa05566ddeb [ 225.860632][T12609] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 225.860745][T12609] RSP: 002b:00007fa0540c4f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.860820][T12609] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fa05566ddeb [ 225.860871][T12609] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000005 [ 225.860969][T12609] RBP: 00007fa0540c5fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 225.861020][T12609] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 225.861072][T12609] R13: 0000200000000000 R14: 0000000000000001 R15: 0000000000000000 [ 225.861137][T12609] [ 225.892501][T12609] kobject: kobject_add_internal failed for raw-gadget.0 (error: -12 parent: drivers) [ 225.892570][T12609] UDC core: USB Raw Gadget: driver registration failed: -12 [ 225.892630][T12609] misc raw-gadget: fail, usb_gadget_register_driver returned -12 [ 226.010722][ T29] audit: type=1400 audit(1788315645.219:2280): avc: denied { write } for pid=12610 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.085980][T12569] EXT4-fs (loop8): warning: mounting fs with errors, running e2fsck is recommended [ 226.188346][T12569] EXT4-fs warning (device loop8): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 226.233469][ T3025] 8021q: adding VLAN 0 to HW filter on device eth1 [ 226.243162][ T9731] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 226.301543][ T29] audit: type=1400 audit(1788315645.499:2281): avc: denied { create } for pid=12617 comm="syz.8.2902" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 226.452139][ T29] audit: type=1400 audit(1788315645.649:2282): avc: denied { write } for pid=12622 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.525726][ T29] audit: type=1400 audit(1788315645.729:2283): avc: denied { write } for pid=12645 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.548192][ T29] audit: type=1400 audit(1788315645.729:2284): avc: denied { shutdown } for pid=12646 comm="syz.2.2910" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 226.560206][T12506] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 226.579054][T12506] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 226.582186][T12506] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 226.599080][T12506] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 226.607672][T12506] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 226.632203][T12506] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 226.640359][T12506] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 226.659083][T12506] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 226.678597][ T3025] 8021q: adding VLAN 0 to HW filter on device eth2 [ 226.830575][T12506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.860860][T12506] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.889775][ T404] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.889840][ T404] bridge0: port 1(bridge_slave_0) entered forwarding state [ 226.910284][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.910346][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.987145][ T29] audit: type=1400 audit(1788315646.189:2285): avc: denied { write } for pid=12663 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.097920][ T29] audit: type=1400 audit(1788315646.299:2286): avc: denied { write } for pid=12679 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.157373][ T3025] 8021q: adding VLAN 0 to HW filter on device eth3 [ 227.384989][ T29] audit: type=1400 audit(1788315646.589:2287): avc: denied { write } for pid=12690 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.480394][T12506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.509830][ T29] audit: type=1400 audit(1788315646.709:2288): avc: denied { write } for pid=12714 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 227.564944][ T3025] 8021q: adding VLAN 0 to HW filter on device eth4 [ 227.607741][ T38] tipc: Subscription rejected, illegal request [ 227.636174][T12730] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2920'. [ 227.680723][T12732] loop8: detected capacity change from 0 to 512 [ 227.714672][T12732] EXT4-fs error (device loop8): ext4_validate_block_bitmap:436: comm syz.8.2923: bg 0: block 5: invalid block bitmap [ 227.714740][T12732] loop8: lost filesystem error report for type 5 error -117 [ 227.727132][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 227.727160][ C0] EXT4-fs (loop8): initial error at time 1788315646: ext4_validate_block_bitmap:436 [ 227.727192][ C0] EXT4-fs (loop8): last error at time 1788315646: ext4_validate_block_bitmap:436 [ 227.760067][T12732] EXT4-fs error (device loop8) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 227.760100][T12732] loop8: lost filesystem error report for type 5 error -117 [ 227.769288][T12732] EXT4-fs error (device loop8): ext4_free_branches:1023: inode #11: comm syz.8.2923: invalid indirect mapped block 3 (level 2) [ 227.769341][T12732] loop8: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 227.769676][T12732] EXT4-fs (loop8): 1 orphan inode deleted [ 227.769762][T12732] EXT4-fs (loop8): 1 truncate cleaned up [ 227.770179][T12732] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 227.950896][ T9731] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 227.962427][T12506] veth0_vlan: entered promiscuous mode [ 227.981712][T12506] veth1_vlan: entered promiscuous mode [ 228.047074][T12506] veth0_macvtap: entered promiscuous mode [ 228.056039][T12506] veth1_macvtap: entered promiscuous mode [ 228.076552][T12506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.086119][T12506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.123304][ T6340] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.123594][ T6340] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.123689][ T6340] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.124297][ T6340] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.194224][T12741] loop2: detected capacity change from 0 to 512 [ 228.316740][T12754] ip_tables: iptables: counters copy to user failed while replacing table [ 228.606670][T12761] hub 7-0:1.0: USB hub found [ 228.606787][T12761] hub 7-0:1.0: 8 ports detected [ 228.738723][T12764] FAULT_INJECTION: forcing a failure. [ 228.738723][T12764] name failslab, interval 1, probability 0, space 0, times 0 [ 228.738809][T12764] CPU: 0 UID: 0 PID: 12764 Comm: syz.5.2928 Not tainted syzkaller #0 PREEMPT(lazy) [ 228.738849][T12764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 228.738868][T12764] Call Trace: [ 228.738878][T12764] [ 228.738890][T12764] __dump_stack+0x1d/0x30 [ 228.738943][T12764] dump_stack_lvl+0x95/0xd0 [ 228.738976][T12764] dump_stack+0x15/0x1b [ 228.739006][T12764] should_fail_ex+0x262/0x280 [ 228.739037][T12764] ? __register_sysctl_table+0x7a0/0xbe0 [ 228.739117][T12764] should_failslab+0x8c/0xb0 [ 228.739156][T12764] __kmalloc_noprof+0xd0/0x4d0 [ 228.739196][T12764] ? __register_sysctl_table+0x7a0/0xbe0 [ 228.739276][T12764] __register_sysctl_table+0x7a0/0xbe0 [ 228.739330][T12764] setup_ipc_sysctls+0x894/0x8d0 [ 228.739385][T12764] copy_ipcs+0x297/0x460 [ 228.739499][T12764] create_new_namespaces+0x121/0x420 [ 228.739653][T12764] unshare_nsproxy_namespaces+0x115/0x150 [ 228.739701][T12764] ksys_unshare+0x42b/0x710 [ 228.739745][T12764] __x64_sys_unshare+0x1f/0x30 [ 228.739783][T12764] x64_sys_call+0x1e33/0x2550 [ 228.739820][T12764] do_syscall_64+0x112/0x360 [ 228.739943][T12764] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.739976][T12764] RIP: 0033:0x7f0d6260e159 [ 228.739999][T12764] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.740041][T12764] RSP: 002b:00007f0d61067028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 228.740096][T12764] RAX: ffffffffffffffda RBX: 00007f0d62895fa0 RCX: 00007f0d6260e159 [ 228.740114][T12764] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 228.740130][T12764] RBP: 00007f0d626a5024 R08: 0000000000000000 R09: 0000000000000000 [ 228.740146][T12764] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.740171][T12764] R13: 00007f0d62896038 R14: 00007f0d62895fa0 R15: 00007ffcb0fee2d8 [ 228.740195][T12764] [ 228.891827][T12764] sysctl could not get directory: /kernel -12 [ 229.257870][T12785] loop5: detected capacity change from 0 to 1024 [ 229.287391][T12785] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.470310][T12802] bond0: (slave vlan0): Opening slave failed [ 229.507020][T12506] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.582509][T12807] netlink: 14 bytes leftover after parsing attributes in process `syz.5.2945'. [ 229.617331][T12807] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.628998][T12807] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.630497][T12807] bond0 (unregistering): Released all slaves [ 229.637252][T12810] loop2: detected capacity change from 0 to 512 [ 229.653512][T12810] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.2948: bg 0: block 393: padding at end of block bitmap is not set [ 229.653638][T12810] loop2: lost filesystem error report for type 5 error -117 [ 229.653990][T12810] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 229.654011][T12810] loop2: lost filesystem error report for type 5 error -117 [ 229.654472][T12810] EXT4-fs (loop2): 2 truncates cleaned up [ 229.655223][T12810] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 229.805305][T11325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 229.974149][T12821] netlink: 25 bytes leftover after parsing attributes in process `syz.2.2953'. [ 229.985169][T12821] netlink: 'syz.2.2953': attribute type 4 has an invalid length. [ 230.047317][T12823] loop2: detected capacity change from 0 to 128 [ 230.064138][T12823] bio_check_eod: 8 callbacks suppressed [ 230.064246][T12823] syz.2.2954: attempt to access beyond end of device [ 230.064246][T12823] loop2: rw=2049, sector=154, nr_sectors = 8 limit=128 [ 230.064848][T12823] syz.2.2954: attempt to access beyond end of device [ 230.064848][T12823] loop2: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 230.064910][T12823] Buffer I/O error on dev loop2, logical block 80, lost async page write [ 230.066713][T12823] syz.2.2954: attempt to access beyond end of device [ 230.066713][T12823] loop2: rw=2049, sector=162, nr_sectors = 8 limit=128 [ 230.071932][T12823] syz.2.2954: attempt to access beyond end of device [ 230.071932][T12823] loop2: rw=8390657, sector=168, nr_sectors = 2 limit=128 [ 230.072067][T12823] Buffer I/O error on dev loop2, logical block 84, lost async page write [ 230.074131][T12823] syz.2.2954: attempt to access beyond end of device [ 230.074131][T12823] loop2: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 230.080286][T12823] syz.2.2954: attempt to access beyond end of device [ 230.080286][T12823] loop2: rw=8390657, sector=176, nr_sectors = 2 limit=128 [ 230.080431][T12823] Buffer I/O error on dev loop2, logical block 88, lost async page write [ 230.081460][T12823] syz.2.2954: attempt to access beyond end of device [ 230.081460][T12823] loop2: rw=2049, sector=178, nr_sectors = 8 limit=128 [ 230.085549][T12823] syz.2.2954: attempt to access beyond end of device [ 230.085549][T12823] loop2: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 230.085650][T12823] Buffer I/O error on dev loop2, logical block 92, lost async page write [ 230.086404][T12823] syz.2.2954: attempt to access beyond end of device [ 230.086404][T12823] loop2: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 230.095067][T12823] syz.2.2954: attempt to access beyond end of device [ 230.095067][T12823] loop2: rw=8390657, sector=192, nr_sectors = 2 limit=128 [ 230.095096][T12823] Buffer I/O error on dev loop2, logical block 96, lost async page write [ 230.097805][T12823] Buffer I/O error on dev loop2, logical block 100, lost async page write [ 230.099168][T12823] Buffer I/O error on dev loop2, logical block 104, lost async page write [ 230.110508][T12823] Buffer I/O error on dev loop2, logical block 108, lost async page write [ 230.126741][T12823] Buffer I/O error on dev loop2, logical block 112, lost async page write [ 230.140765][T12823] Buffer I/O error on dev loop2, logical block 116, lost async page write [ 230.412731][T12832] FAULT_INJECTION: forcing a failure. [ 230.412731][T12832] name failslab, interval 1, probability 0, space 0, times 0 [ 230.412955][T12832] CPU: 1 UID: 0 PID: 12832 Comm: syz.2.2958 Not tainted syzkaller #0 PREEMPT(lazy) [ 230.412987][T12832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 230.413035][T12832] Call Trace: [ 230.413044][T12832] [ 230.413057][T12832] __dump_stack+0x1d/0x30 [ 230.413090][T12832] dump_stack_lvl+0x95/0xd0 [ 230.413113][T12832] dump_stack+0x15/0x1b [ 230.413230][T12832] should_fail_ex+0x262/0x280 [ 230.413258][T12832] should_failslab+0x8c/0xb0 [ 230.413297][T12832] __kvmalloc_node_noprof+0x168/0x5c0 [ 230.413398][T12832] ? alloc_fdtable+0x115/0x1d0 [ 230.413465][T12832] ? alloc_fdtable+0x115/0x1d0 [ 230.413508][T12832] alloc_fdtable+0x115/0x1d0 [ 230.413549][T12832] dup_fd+0x4ae/0x530 [ 230.413612][T12832] ? _raw_spin_unlock+0x9/0x30 [ 230.413702][T12832] ksys_unshare+0x36c/0x710 [ 230.413743][T12832] __x64_sys_unshare+0x1f/0x30 [ 230.413779][T12832] x64_sys_call+0x1e33/0x2550 [ 230.413886][T12832] do_syscall_64+0x112/0x360 [ 230.413962][T12832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.413985][T12832] RIP: 0033:0x7fa05566e159 [ 230.414004][T12832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.414027][T12832] RSP: 002b:00007fa0540c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 230.414056][T12832] RAX: ffffffffffffffda RBX: 00007fa0558f5fa0 RCX: 00007fa05566e159 [ 230.414152][T12832] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006020400 [ 230.414166][T12832] RBP: 00007fa055705024 R08: 0000000000000000 R09: 0000000000000000 [ 230.414179][T12832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 230.414195][T12832] R13: 00007fa0558f6038 R14: 00007fa0558f5fa0 R15: 00007fff8467fae8 [ 230.414223][T12832] [ 230.811578][T12847] gretap0 speed is unknown, defaulting to 1000 [ 230.826016][T12850] loop2: detected capacity change from 0 to 256 [ 230.826771][T12850] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 230.842536][T12850] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 230.964959][T12854] vxcan1: tx drop: invalid da for name 0xfffffffffffffffe [ 230.979198][T12851] vxcan1: tx drop: invalid da for name 0xfffffffffffffffe [ 231.056461][T12860] loop2: detected capacity change from 0 to 128 [ 231.081880][T12860] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 231.093603][T12860] ext4 filesystem being mounted at /89/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 231.113948][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 231.114018][ T29] audit: type=1400 audit(1788315650.319:2291): avc: denied { write } for pid=12859 comm="syz.2.2969" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.144742][ T29] audit: type=1400 audit(1788315650.349:2292): avc: denied { write } for pid=12859 comm="syz.2.2969" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.169786][ T29] audit: type=1400 audit(1788315650.379:2293): avc: denied { write } for pid=12859 comm="syz.2.2969" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.193810][ T29] audit: type=1400 audit(1788315650.399:2294): avc: denied { write } for pid=12859 comm="syz.2.2969" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.219905][ T29] audit: type=1400 audit(1788315650.419:2295): avc: denied { write } for pid=12859 comm="syz.2.2969" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.219956][ T29] audit: type=1400 audit(1788315650.419:2296): avc: denied { write } for pid=12859 comm="syz.2.2969" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.219998][ T29] audit: type=1400 audit(1788315650.419:2297): avc: denied { rename } for pid=12859 comm="syz.2.2969" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 231.220133][ T29] audit: type=1400 audit(1788315650.419:2298): avc: denied { unlink } for pid=12859 comm="syz.2.2969" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 231.354670][T11325] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 231.547645][T12871] loop8: detected capacity change from 0 to 128 [ 231.561217][T12871] EXT4-fs (loop8): mounting ext2 file system using the ext4 subsystem [ 231.572945][T12871] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 231.585513][T12871] ext2 filesystem being mounted at /152/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.613907][ T29] audit: type=1400 audit(1788315650.809:2299): avc: denied { write } for pid=12870 comm="syz.8.2975" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 231.657168][ T9731] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 231.797995][ T29] audit: type=1326 audit(1788315650.999:2300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12857 comm="syz.3.2968" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fac2dc9e159 code=0x7fc00000 [ 231.983965][T12895] gretap1: entered promiscuous mode [ 232.095657][T12906] syz.8.2989: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 232.095895][T12906] CPU: 0 UID: 0 PID: 12906 Comm: syz.8.2989 Not tainted syzkaller #0 PREEMPT(lazy) [ 232.095922][T12906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 232.095957][T12906] Call Trace: [ 232.095966][T12906] [ 232.095977][T12906] __dump_stack+0x1d/0x30 [ 232.096011][T12906] dump_stack_lvl+0x95/0xd0 [ 232.096054][T12906] dump_stack+0x15/0x1b [ 232.096082][T12906] warn_alloc+0x146/0x1c0 [ 232.096128][T12906] __vmalloc_node_range_noprof+0xa3/0x1000 [ 232.096274][T12906] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 232.096306][T12906] ? xskq_create+0x38/0x160 [ 232.096412][T12906] ? __kmalloc_cache_noprof+0x103/0x400 [ 232.096446][T12906] ? __kmalloc_cache_noprof+0x19b/0x400 [ 232.096496][T12906] xskq_create+0xea/0x160 [ 232.096536][T12906] ? xsk_init_queue+0x70/0xb0 [ 232.096566][T12906] xsk_init_queue+0x70/0xb0 [ 232.096647][T12906] xsk_setsockopt+0x3ef/0x640 [ 232.096686][T12906] ? __pfx_xsk_setsockopt+0x10/0x10 [ 232.096747][T12906] __sys_setsockopt+0x184/0x200 [ 232.096786][T12906] __x64_sys_setsockopt+0x64/0x80 [ 232.096897][T12906] x64_sys_call+0x248f/0x2550 [ 232.096930][T12906] do_syscall_64+0x112/0x360 [ 232.096970][T12906] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.096997][T12906] RIP: 0033:0x7f61096ae159 [ 232.097085][T12906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.097106][T12906] RSP: 002b:00007f6108107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 232.097129][T12906] RAX: ffffffffffffffda RBX: 00007f6109935fa0 RCX: 00007f61096ae159 [ 232.097265][T12906] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 232.097283][T12906] RBP: 00007f6109745024 R08: 0000000000000004 R09: 0000000000000000 [ 232.097302][T12906] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.097317][T12906] R13: 00007f6109936038 R14: 00007f6109935fa0 R15: 00007ffcf7859198 [ 232.097452][T12906] [ 232.313351][T12906] Mem-Info: [ 232.313413][T12906] active_anon:46179 inactive_anon:45 isolated_anon:0 [ 232.313413][T12906] active_file:17 inactive_file:29713 isolated_file:0 [ 232.313413][T12906] unevictable:0 dirty:291 writeback:0 [ 232.313413][T12906] slab_reclaimable:3829 slab_unreclaimable:19493 [ 232.313413][T12906] mapped:29434 shmem:37766 pagetables:3871 [ 232.313413][T12906] sec_pagetables:0 bounce:0 [ 232.313413][T12906] kernel_misc_reclaimable:0 [ 232.313413][T12906] free:1819245 free_pcp:13687 free_cma:0 [ 232.313564][T12906] Node 0 active_anon:184716kB inactive_anon:180kB active_file:68kB inactive_file:118852kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117736kB dirty:1164kB writeback:0kB shmem:151064kB kernel_stack:5184kB pagetables:15484kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 232.313659][T12906] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 232.313906][T12906] lowmem_reserve[]: 0 2877 7856 7856 [ 232.314168][T12906] Node 0 DMA32 free:2943396kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2946920kB mlocked:0kB bounce:0kB free_pcp:3524kB local_pcp:0kB free_cma:0kB [ 232.314368][T12906] lowmem_reserve[]: 0 0 4978 4978 [ 232.314580][T12906] Node 0 Normal free:4318224kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0kB free_highatomic:0kB active_anon:184716kB inactive_anon:180kB active_file:68kB inactive_file:118852kB unevictable:0kB writepending:1164kB zspages:0kB present:5242880kB managed:5098228kB mlocked:0kB bounce:0kB free_pcp:51224kB local_pcp:32336kB free_cma:0kB [ 232.403323][T12906] lowmem_reserve[]: 0 0 0 0 [ 232.404235][T12906] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 232.417943][T12906] Node 0 DMA32: 1*4kB (M) 2*8kB (M) 3*16kB (M) 1*32kB (M) 3*64kB (M) 1*128kB (M) 2*256kB (M) 3*512kB (M) 2*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2943396kB [ 232.487886][T12906] Node 0 Normal: 2780*4kB (UME) 998*8kB (UME) 525*16kB (UME) 125*32kB (UME) 141*64kB (UME) 270*128kB (UM) 75*256kB (UME) 50*512kB (UM) 16*1024kB (UM) 2*2048kB (UM) 1020*4096kB (UM) = 4318288kB [ 232.518705][T12906] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 232.518890][T12906] 67498 total pagecache pages [ 232.518935][T12906] 8 pages in swap cache [ 232.519112][T12906] Free swap = 124964kB [ 232.519198][T12906] Total swap = 124996kB [ 232.519275][T12906] 2097051 pages RAM [ 232.519330][T12906] 0 pages HighMem/MovableOnly [ 232.519406][T12906] 81924 pages reserved [ 232.639572][T12920] netlink: 14 bytes leftover after parsing attributes in process `syz.2.2992'. [ 232.657289][T12920] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 232.680226][T12920] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 232.692053][T12920] bond0 (unregistering): Released all slaves [ 232.722328][T12924] FAULT_INJECTION: forcing a failure. [ 232.722328][T12924] name failslab, interval 1, probability 0, space 0, times 0 [ 232.722370][T12924] CPU: 1 UID: 0 PID: 12924 Comm: syz.8.2995 Not tainted syzkaller #0 PREEMPT(lazy) [ 232.722459][T12924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 232.722472][T12924] Call Trace: [ 232.722481][T12924] [ 232.722489][T12924] __dump_stack+0x1d/0x30 [ 232.722529][T12924] dump_stack_lvl+0x95/0xd0 [ 232.722571][T12924] dump_stack+0x15/0x1b [ 232.722592][T12924] should_fail_ex+0x262/0x280 [ 232.722615][T12924] ? __register_sysctl_table+0x52/0xbe0 [ 232.722721][T12924] should_failslab+0x8c/0xb0 [ 232.722837][T12924] __kmalloc_noprof+0xd0/0x4d0 [ 232.722875][T12924] ? __register_sysctl_table+0x52/0xbe0 [ 232.722995][T12924] __register_sysctl_table+0x52/0xbe0 [ 232.723167][T12924] setup_ipc_sysctls+0x894/0x8d0 [ 232.723285][T12924] copy_ipcs+0x297/0x460 [ 232.723359][T12924] create_new_namespaces+0x121/0x420 [ 232.723463][T12924] unshare_nsproxy_namespaces+0x115/0x150 [ 232.723631][T12924] ksys_unshare+0x42b/0x710 [ 232.723760][T12924] __x64_sys_unshare+0x1f/0x30 [ 232.723887][T12924] x64_sys_call+0x1e33/0x2550 [ 232.723975][T12924] do_syscall_64+0x112/0x360 [ 232.724075][T12924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.724164][T12924] RIP: 0033:0x7f61096ae159 [ 232.724218][T12924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 232.724352][T12924] RSP: 002b:00007f6108107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 232.724458][T12924] RAX: ffffffffffffffda RBX: 00007f6109935fa0 RCX: 00007f61096ae159 [ 232.724520][T12924] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 232.724581][T12924] RBP: 00007f6109745024 R08: 0000000000000000 R09: 0000000000000000 [ 232.724627][T12924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.724670][T12924] R13: 00007f6109936038 R14: 00007f6109935fa0 R15: 00007ffcf7859198 [ 232.724804][T12924] [ 232.991221][T12935] loop5: detected capacity change from 0 to 1024 [ 233.004986][T12935] EXT4-fs (loop5): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 233.039954][T12935] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 2: comm syz.5.3006: lblock 2 mapped to illegal pblock 2 (length 1) [ 233.040062][T12935] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 233.055915][T12935] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 48: comm syz.5.3006: lblock 0 mapped to illegal pblock 48 (length 1) [ 233.056113][T12935] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 233.056369][T12935] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.3006: Failed to acquire dquot type 0 [ 233.056452][T12935] loop5: lost filesystem error report for type 5 error -117 [ 233.056769][T12935] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 233.056877][T12935] loop5: lost filesystem error report for type 5 error -117 [ 233.060268][T12935] EXT4-fs error (device loop5): ext4_evict_inode:269: inode #11: comm syz.5.3006: mark_inode_dirty error [ 233.060432][T12935] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 233.061113][T12935] EXT4-fs warning (device loop5): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 233.061219][T12935] EXT4-fs (loop5): 1 orphan inode deleted [ 233.062254][T12935] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.092050][ T404] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 233.092461][ T404] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:6: Failed to release dquot type 0 [ 233.209151][T12506] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 233.216285][ T404] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:6: lblock 1 mapped to illegal pblock 1 (length 1) [ 233.216411][ T404] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 233.216744][ T404] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:6: Failed to release dquot type 0 [ 233.216858][ T404] loop5: lost filesystem error report for type 5 error -117 [ 233.219094][T12506] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 233.219246][T12506] loop5: lost filesystem error report for type 5 error -117 [ 233.219524][T12506] EXT4-fs error (device loop5) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 233.219547][T12506] loop5: lost filesystem error report for type 5 error -117 [ 233.221573][T12506] EXT4-fs error (device loop5): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 233.221660][T12506] loop5: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 233.221987][T12506] EXT4-fs error (device loop5): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 233.222119][T12506] loop5: lost filesystem error report for type 5 error -117 [ 233.381272][T12953] siw: device registration error -23 [ 234.198163][T12974] loop5: detected capacity change from 0 to 512 [ 234.210013][T12973] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3011'. [ 234.224225][T12973] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.241818][T12973] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.251146][T12973] bond0 (unregistering): Released all slaves [ 234.261086][T12974] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.261221][T12974] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 234.302395][T12506] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.409069][T12990] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3012'. [ 234.564996][T12988] loop5: detected capacity change from 0 to 512 [ 234.607723][T12988] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 234.638059][T12988] EXT4-fs (loop5): orphan cleanup on readonly fs [ 234.638453][T12988] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 234.638490][T12988] EXT4-fs (loop5): Cannot turn on quotas: error -22 [ 234.638534][T12988] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.3014: bad orphan inode 768 [ 234.638556][T12988] loop5: lost filesystem error report for type 5 error -117 [ 234.646202][T12988] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 234.679790][T12988] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended [ 234.710363][T12988] EXT4-fs warning (device loop5): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 234.743664][T12506] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 235.112996][T13006] veth0: entered promiscuous mode [ 235.118764][T13004] siw: device registration error -23 [ 235.120266][T13006] veth0_virt_wifi: entered promiscuous mode [ 235.121425][T13005] veth0_virt_wifi: left promiscuous mode [ 235.121637][T13005] veth0: left promiscuous mode [ 235.805788][T13048] netlink: 'syz.1.3039': attribute type 5 has an invalid length. [ 236.656285][T13084] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3049'. [ 236.738260][T13088] netlink: 16 bytes leftover after parsing attributes in process `syz.8.3053'. [ 237.015146][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 237.015212][ T29] audit: type=1400 audit(1788315656.219:2304): avc: denied { remount } for pid=13105 comm="syz.5.3060" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 237.019292][T13107] option changes via remount are deprecated (pid=13105 comm=syz.5.3060) [ 237.019347][T13107] cgroup: option or name mismatch, new: 0x0 "noprefix", old: 0x0 "" [ 237.833610][T13109] 9pnet_fd: p9_fd_create_tcp (13109): problem connecting socket to 127.0.0.1 [ 237.835199][T13125] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3066'. [ 237.954730][T13130] netlink: 'syz.5.3079': attribute type 1 has an invalid length. [ 237.954784][T13130] netlink: 'syz.5.3079': attribute type 2 has an invalid length. [ 237.954807][T13130] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3079'. [ 238.114859][T13137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3082'. [ 238.166292][ T29] audit: type=1326 audit(1788315657.369:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13141 comm="syz.1.3073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61f91e159 code=0x7ffc0000 [ 238.192232][ T29] audit: type=1326 audit(1788315657.369:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13141 comm="syz.1.3073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61f91e159 code=0x7ffc0000 [ 238.192278][ T29] audit: type=1326 audit(1788315657.369:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13141 comm="syz.1.3073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61f91e159 code=0x7ffc0000 [ 238.192384][ T29] audit: type=1326 audit(1788315657.369:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13141 comm="syz.1.3073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fe61f91e159 code=0x7ffc0000 [ 238.192421][ T29] audit: type=1326 audit(1788315657.369:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13141 comm="syz.1.3073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61f91e159 code=0x7ffc0000 [ 238.298116][ T29] audit: type=1326 audit(1788315657.429:2310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13141 comm="syz.1.3073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe61f91e159 code=0x7ffc0000 [ 238.298218][ T29] audit: type=1326 audit(1788315657.429:2311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13141 comm="syz.1.3073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fe61f91dec2 code=0x7ffc0000 [ 238.298264][ T29] audit: type=1326 audit(1788315657.429:2312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13141 comm="syz.1.3073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fe61f91df57 code=0x7ffc0000 [ 238.298304][ T29] audit: type=1326 audit(1788315657.449:2313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13141 comm="syz.1.3073" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fe61f8dae51 code=0x7ffc0000 [ 238.444413][T13145] gretap0 speed is unknown, defaulting to 1000 [ 238.623751][T13150] loop2: detected capacity change from 0 to 512 [ 238.769690][T13150] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 238.825543][T13198] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3085'. [ 238.843517][T13150] EXT4-fs (loop2): orphan cleanup on readonly fs [ 238.844419][T13150] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 238.844942][T13150] EXT4-fs (loop2): Cannot turn on quotas: error -22 [ 238.845351][T13150] EXT4-fs error (device loop2): ext4_orphan_get:1429: comm syz.2.3071: bad orphan inode 768 [ 238.845925][T13150] loop2: lost filesystem error report for type 5 error -117 [ 238.866364][T13150] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 238.934337][T13150] EXT4-fs (loop2): warning: mounting fs with errors, running e2fsck is recommended [ 239.010737][T13209] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3089'. [ 239.012274][T13150] EXT4-fs warning (device loop2): ext4_enable_quotas:7304: Failed to enable quota tracking (type=0, err=-22, ino=3). Please run e2fsck to fix. [ 239.038972][T13209] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3089'. [ 239.181361][T11325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.307981][T13231] loop2: detected capacity change from 0 to 512 [ 239.323821][T13231] EXT4-fs error (device loop2): ext4_iget_extra_inode:5210: inode #15: comm syz.2.3094: corrupted in-inode xattr: invalid ea_ino [ 239.323873][T13231] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 239.325963][T13231] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.3094: couldn't read orphan inode 15 (err -117) [ 239.326233][T13231] loop2: lost filesystem error report for type 5 error -117 [ 239.327644][T13231] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 239.397021][T13228] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3090'. [ 239.494372][T11325] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 239.597627][T13251] grow_buffers: requested out-of-range block 18446744073709551615 for device sda1 [ 239.597660][T13251] EXT4-fs warning (device sda1): ext4_resize_fs:2018: can't read last block, resize aborted [ 239.630673][T13247] loop8: detected capacity change from 0 to 764 [ 240.249255][T13285] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 240.346425][T13296] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3110'. [ 240.505932][T13305] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 240.506914][T13307] netlink: 'syz.8.3116': attribute type 1 has an invalid length. [ 240.525329][T13303] loop2: detected capacity change from 0 to 1024 [ 240.538716][T13307] 8021q: adding VLAN 0 to HW filter on device bond2 [ 240.566859][T13303] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 240.782498][T13307] bond2: (slave veth5): Enslaving as an active interface with a down link [ 240.785961][T13318] netlink: 'syz.3.3120': attribute type 1 has an invalid length. [ 240.793645][T13311] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 240.799170][T13311] bond2: (slave batadv1): making interface the new active one [ 240.802708][T13311] batadv1: entered promiscuous mode [ 240.828683][T13311] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 240.848466][T13318] bond0: entered promiscuous mode [ 240.855437][T13318] 8021q: adding VLAN 0 to HW filter on device bond0 [ 240.893851][T13321] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 240.893890][T13321] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 240.893918][T13321] bond0: (slave ipvlan0): Setting fail_over_mac to active for active-backup mode [ 241.181090][T13348] netlink: 'syz.1.3130': attribute type 1 has an invalid length. [ 241.195396][T13348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.244420][T13348] bond0: (slave geneve3): making interface the new active one [ 241.263657][T13348] bond0: (slave geneve3): Enslaving as an active interface with an up link [ 241.268674][T13349] FAULT_INJECTION: forcing a failure. [ 241.268674][T13349] name failslab, interval 1, probability 0, space 0, times 0 [ 241.268786][T13349] CPU: 1 UID: 0 PID: 13349 Comm: syz.8.3129 Not tainted syzkaller #0 PREEMPT(lazy) [ 241.268926][T13349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 241.268969][T13349] Call Trace: [ 241.269018][T13349] [ 241.269049][T13349] __dump_stack+0x1d/0x30 [ 241.269158][T13349] dump_stack_lvl+0x95/0xd0 [ 241.269234][T13349] dump_stack+0x15/0x1b [ 241.269296][T13349] should_fail_ex+0x262/0x280 [ 241.269444][T13349] ? __register_sysctl_table+0x52/0xbe0 [ 241.269574][T13349] should_failslab+0x8c/0xb0 [ 241.269678][T13349] __kmalloc_noprof+0xd0/0x4d0 [ 241.269830][T13349] ? __register_sysctl_table+0x52/0xbe0 [ 241.269956][T13349] __register_sysctl_table+0x52/0xbe0 [ 241.270025][T13349] setup_mq_sysctls+0x398/0x3e0 [ 241.270135][T13349] copy_ipcs+0x28b/0x460 [ 241.270273][T13349] create_new_namespaces+0x121/0x420 [ 241.270390][T13349] unshare_nsproxy_namespaces+0x115/0x150 [ 241.270535][T13349] ksys_unshare+0x42b/0x710 [ 241.270639][T13349] __x64_sys_unshare+0x1f/0x30 [ 241.270798][T13349] x64_sys_call+0x1e33/0x2550 [ 241.270885][T13349] do_syscall_64+0x112/0x360 [ 241.270983][T13349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.271057][T13349] RIP: 0033:0x7f61096ae159 [ 241.271141][T13349] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 241.271204][T13349] RSP: 002b:00007f6108107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 241.271271][T13349] RAX: ffffffffffffffda RBX: 00007f6109935fa0 RCX: 00007f61096ae159 [ 241.271316][T13349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000004a000200 [ 241.271368][T13349] RBP: 00007f6109745024 R08: 0000000000000000 R09: 0000000000000000 [ 241.271421][T13349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.271465][T13349] R13: 00007f6109936038 R14: 00007f6109935fa0 R15: 00007ffcf7859198 [ 241.271529][T13349] [ 241.287745][ T404] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.288045][ T404] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.288210][ T404] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.288332][ T404] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 241.718322][T13369] io-wq is not configured for unbound workers [ 241.857042][T13387] gretap0 speed is unknown, defaulting to 1000 [ 241.921549][T13393] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 242.077191][T13403] loop5: detected capacity change from 0 to 1024 [ 242.085817][T13403] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 242.142151][ T29] kauditd_printk_skb: 85 callbacks suppressed [ 242.142189][ T29] audit: type=1400 audit(1788315661.339:2399): avc: denied { watch } for pid=13406 comm="syz.8.3153" path="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 242.421760][T13429] tipc: Enabling of bearer rejected, failed to enable media [ 242.493966][T13434] loop2: detected capacity change from 0 to 256 [ 242.856446][T13452] raw_sendmsg: syz.1.3170 forgot to set AF_INET. Fix it! [ 242.956396][T13462] __nla_validate_parse: 2 callbacks suppressed [ 242.956427][T13462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3175'. [ 242.992740][T13465] loop5: detected capacity change from 0 to 512 [ 243.044012][T13468] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3178'. [ 243.382655][T13493] gretap0 speed is unknown, defaulting to 1000 [ 243.472736][T13507] netlink: 'syz.2.3196': attribute type 1 has an invalid length. [ 243.506880][T13507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.909801][T13507] bond0: (slave veth3): Enslaving as an active interface with a down link [ 243.928709][T13509] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 243.940372][T13509] bond0: (slave batadv1): making interface the new active one [ 243.950083][T13509] batadv1: entered promiscuous mode [ 243.950316][T13509] bond0: (slave batadv1): Enslaving as an active interface with an up link [ 244.102209][T13540] netlink: 'syz.2.3203': attribute type 10 has an invalid length. [ 244.517570][T13552] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 244.616473][T13566] loop8: detected capacity change from 0 to 512 [ 244.913834][T13583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3224'. [ 244.913880][T13583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3224'. [ 244.914203][T13583] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3224'. [ 244.914222][T13583] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3224'. [ 244.987390][T13585] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3220'. [ 245.158553][ T29] audit: type=1400 audit(1788315664.359:2400): avc: denied { write } for pid=13593 comm="syz.8.3228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 245.648650][ T29] audit: type=1326 audit(1788315664.849:2401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.8.3238" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61096ae159 code=0x7ffc0000 [ 245.648708][ T29] audit: type=1326 audit(1788315664.849:2402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.8.3238" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61096ae159 code=0x7ffc0000 [ 245.648753][ T29] audit: type=1326 audit(1788315664.849:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.8.3238" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61096ae159 code=0x7ffc0000 [ 245.648867][ T29] audit: type=1326 audit(1788315664.849:2404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.8.3238" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=270 compat=0 ip=0x7f61096ae159 code=0x7ffc0000 [ 245.707888][ T29] audit: type=1326 audit(1788315664.909:2405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.8.3238" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f61096ae159 code=0x7ffc0000 [ 245.708053][ T29] audit: type=1326 audit(1788315664.909:2406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.8.3238" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f61096adec2 code=0x7ffc0000 [ 245.708163][ T29] audit: type=1326 audit(1788315664.909:2407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.8.3238" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f61096adf57 code=0x7ffc0000 [ 245.708256][ T29] audit: type=1326 audit(1788315664.909:2408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13621 comm="syz.8.3238" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f610966ae51 code=0x7ffc0000 [ 245.991108][T13637] netlink: 'syz.1.3245': attribute type 3 has an invalid length. [ 245.991156][T13637] netlink: 'syz.1.3245': attribute type 1 has an invalid length. [ 245.991240][T13637] netlink: 181400 bytes leftover after parsing attributes in process `syz.1.3245'. [ 246.042087][T13639] netlink: 'syz.1.3246': attribute type 1 has an invalid length. [ 246.057210][T13639] 8021q: adding VLAN 0 to HW filter on device bond8 [ 246.119947][T13643] netlink: 'syz.1.3246': attribute type 10 has an invalid length. [ 246.119979][T13643] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3246'. [ 246.167089][T13639] bond8: (slave dummy0): Enslaving as a backup interface with an up link [ 246.167201][T13643] dummy0: entered promiscuous mode [ 246.209792][T13643] bond8: (slave dummy0): Releasing backup interface [ 246.326194][T13641] loop5: detected capacity change from 0 to 1024 [ 246.338444][T13641] EXT4-fs: Ignoring removed mblk_io_submit option [ 246.339161][T13641] EXT4-fs: Ignoring removed oldalloc option [ 246.391695][T13641] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 246.405305][T13641] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 246.457233][T12506] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 246.698428][T13682] xt_hashlimit: size too large, truncated to 1048576 [ 247.253338][T13729] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 247.691708][ T29] kauditd_printk_skb: 356 callbacks suppressed [ 247.691743][ T29] audit: type=1400 audit(1788315666.889:2765): avc: denied { name_bind } for pid=13752 comm="syz.1.3288" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 247.729131][T13757] FAULT_INJECTION: forcing a failure. [ 247.729131][T13757] name failslab, interval 1, probability 0, space 0, times 0 [ 247.729206][T13757] CPU: 1 UID: 0 PID: 13757 Comm: syz.8.3291 Not tainted syzkaller #0 PREEMPT(lazy) [ 247.729263][T13757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 247.729281][T13757] Call Trace: [ 247.729304][T13757] [ 247.729315][T13757] __dump_stack+0x1d/0x30 [ 247.729350][T13757] dump_stack_lvl+0x95/0xd0 [ 247.729378][T13757] dump_stack+0x15/0x1b [ 247.729399][T13757] should_fail_ex+0x262/0x280 [ 247.729467][T13757] ? alloc_tty_struct+0x4b/0x3b0 [ 247.729501][T13757] should_failslab+0x8c/0xb0 [ 247.729580][T13757] __kmalloc_cache_noprof+0x7a/0x400 [ 247.729620][T13757] ? alloc_tty_struct+0x4b/0x3b0 [ 247.729650][T13757] alloc_tty_struct+0x4b/0x3b0 [ 247.729703][T13757] pty_unix98_install+0xf0/0x380 [ 247.729730][T13757] tty_init_dev+0x7c/0x320 [ 247.729764][T13757] ptmx_open+0xda/0x240 [ 247.729789][T13757] chrdev_open+0x2eb/0x3a0 [ 247.730207][T13757] do_dentry_open+0x49f/0xa60 [ 247.730330][T13757] ? __pfx_chrdev_open+0x10/0x10 [ 247.730445][T13757] ? may_open+0x1ee/0x350 [ 247.730531][T13757] vfs_open+0x37/0x1e0 [ 247.730676][T13757] path_openat+0xc01/0x10d0 [ 247.730876][T13757] do_file_open+0x16c/0x290 [ 247.731076][T13757] do_sys_openat2+0xa0/0x130 [ 247.731162][T13757] __x64_sys_openat+0xf2/0x120 [ 247.731247][T13757] x64_sys_call+0x1f72/0x2550 [ 247.731349][T13757] do_syscall_64+0x112/0x360 [ 247.731470][T13757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 247.731556][T13757] RIP: 0033:0x7f61096ae159 [ 247.731686][T13757] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 247.731758][T13757] RSP: 002b:00007f6108107028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 247.731833][T13757] RAX: ffffffffffffffda RBX: 00007f6109935fa0 RCX: 00007f61096ae159 [ 247.731887][T13757] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 247.731959][T13757] RBP: 00007f6109745024 R08: 0000000000000000 R09: 0000000000000000 [ 247.732043][T13757] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 247.732094][T13757] R13: 00007f6109936038 R14: 00007f6109935fa0 R15: 00007ffcf7859198 [ 247.732166][T13757] [ 248.052662][T13769] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3293'. [ 248.320597][T13784] FAULT_INJECTION: forcing a failure. [ 248.320597][T13784] name failslab, interval 1, probability 0, space 0, times 0 [ 248.320682][T13784] CPU: 0 UID: 0 PID: 13784 Comm: syz.2.3300 Not tainted syzkaller #0 PREEMPT(lazy) [ 248.320799][T13784] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 248.320818][T13784] Call Trace: [ 248.320827][T13784] [ 248.320837][T13784] __dump_stack+0x1d/0x30 [ 248.320869][T13784] dump_stack_lvl+0x95/0xd0 [ 248.320906][T13784] dump_stack+0x15/0x1b [ 248.320935][T13784] should_fail_ex+0x262/0x280 [ 248.321040][T13784] ? get_mountpoint+0x17e/0x370 [ 248.321075][T13784] should_failslab+0x8c/0xb0 [ 248.321112][T13784] __kmalloc_cache_noprof+0x7a/0x400 [ 248.321170][T13784] ? get_mountpoint+0x17e/0x370 [ 248.321206][T13784] get_mountpoint+0x17e/0x370 [ 248.321240][T13784] do_lock_mount+0x3f2/0x6b0 [ 248.321270][T13784] do_new_mount+0x375/0x8d0 [ 248.321389][T13784] path_mount+0x4ad/0xb90 [ 248.321428][T13784] __se_sys_mount+0x28c/0x2e0 [ 248.321556][T13784] __x64_sys_mount+0x67/0x80 [ 248.321602][T13784] x64_sys_call+0xc3b/0x2550 [ 248.321640][T13784] do_syscall_64+0x112/0x360 [ 248.321730][T13784] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.321762][T13784] RIP: 0033:0x7fa05566e159 [ 248.321785][T13784] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 248.321811][T13784] RSP: 002b:00007fa0540c7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 248.321840][T13784] RAX: ffffffffffffffda RBX: 00007fa0558f5fa0 RCX: 00007fa05566e159 [ 248.321941][T13784] RDX: 00002000000001c0 RSI: 0000200000000040 RDI: 0000000000000000 [ 248.321960][T13784] RBP: 00007fa055705024 R08: 0000200000000200 R09: 0000000000000000 [ 248.321979][T13784] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.321997][T13784] R13: 00007fa0558f6038 R14: 00007fa0558f5fa0 R15: 00007fff8467fae8 [ 248.322068][T13784] [ 248.709491][T13797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3305'. [ 248.709533][T13797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3305'. [ 248.709621][T13797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3305'. [ 248.709639][T13797] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3305'. [ 249.355630][T13827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3319'. [ 249.355680][T13827] netlink: 'syz.2.3319': attribute type 30 has an invalid length. [ 249.355708][T13827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3319'. [ 249.355888][T13827] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3319'. [ 249.355981][T13827] netlink: 'syz.2.3319': attribute type 30 has an invalid length. [ 249.355999][T13827] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3319'. [ 249.417993][ T29] audit: type=1400 audit(1788315668.629:2766): avc: denied { connect } for pid=13830 comm="syz.5.3321" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 249.503242][ T29] audit: type=1400 audit(1788315668.709:2767): avc: denied { read } for pid=13834 comm="syz.5.3323" path="socket:[40174]" dev="sockfs" ino=40174 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 249.959745][T13844] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3325'. [ 250.841993][ T727] IPVS: starting estimator thread 0... [ 250.877959][T13891] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 250.878057][ C0] IPVS: sh: TCP 127.0.0.1:21 - no destination available [ 250.923709][T13896] IPVS: using max 2160 ests per chain, 108000 per kthread [ 251.041182][ T29] audit: type=1400 audit(1788315670.239:2768): avc: denied { write } for pid=13894 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.161087][ T29] audit: type=1400 audit(1788315670.359:2769): avc: denied { write } for pid=13918 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 251.862443][T13925] batadv_slave_1: entered promiscuous mode [ 251.870674][T13925] batadv_slave_0: entered promiscuous mode [ 251.876978][T13923] batadv_slave_0: left promiscuous mode [ 251.877218][T13923] batadv_slave_1: left promiscuous mode [ 252.108941][T13948] loop2: detected capacity change from 0 to 256 [ 252.125839][T13948] FAT-fs (loop2): error, fat_get_cluster: invalid cluster chain (i_pos 198) [ 252.125891][T13948] FAT-fs (loop2): Filesystem has been set read-only [ 252.126605][T13948] FAT-fs (loop2): error, fat_free_clusters: deleting FAT entry beyond EOF [ 252.146190][ T38] batadv1: left promiscuous mode [ 252.323610][T13960] netlink: 'syz.1.3364': attribute type 1 has an invalid length. [ 252.345619][T13960] bond9: entered promiscuous mode [ 252.345827][T13960] 8021q: adding VLAN 0 to HW filter on device bond9 [ 252.375797][T13960] bond9: (slave veth5): making interface the new active one [ 252.375827][T13960] veth5: entered promiscuous mode [ 252.383773][T13960] bond9: (slave veth5): Enslaving as an active interface with an up link [ 253.237432][ T29] audit: type=1400 audit(1788315672.439:2770): avc: denied { write } for pid=14007 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.329550][ T29] audit: type=1400 audit(1788315672.529:2771): avc: denied { write } for pid=14031 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.496366][T14048] __nla_validate_parse: 4 callbacks suppressed [ 253.496404][T14048] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3393'. [ 253.857333][ T29] audit: type=1400 audit(1788315673.059:2772): avc: denied { write } for pid=14065 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.969628][ T29] audit: type=1400 audit(1788315673.169:2773): avc: denied { write } for pid=14097 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 254.177993][T14009] ================================================================== [ 254.178045][T14009] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 254.178114][T14009] [ 254.178123][T14009] write to 0xffff88811a7702e0 of 8 bytes by task 13999 on cpu 0: [ 254.178145][T14009] shmem_file_splice_read+0x401/0x590 [ 254.178180][T14009] splice_direct_to_actor+0x261/0x680 [ 254.178217][T14009] do_splice_direct+0x119/0x1a0 [ 254.178261][T14009] do_sendfile+0x37d/0x640 [ 254.178280][T14009] __x64_sys_sendfile64+0x105/0x150 [ 254.178312][T14009] x64_sys_call+0x1015/0x2550 [ 254.178346][T14009] do_syscall_64+0x112/0x360 [ 254.178381][T14009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.178404][T14009] [ 254.178409][T14009] write to 0xffff88811a7702e0 of 8 bytes by task 14009 on cpu 1: [ 254.178426][T14009] shmem_file_splice_read+0x401/0x590 [ 254.178469][T14009] splice_direct_to_actor+0x261/0x680 [ 254.178510][T14009] do_splice_direct+0x119/0x1a0 [ 254.178548][T14009] do_sendfile+0x37d/0x640 [ 254.178571][T14009] __x64_sys_sendfile64+0x105/0x150 [ 254.178605][T14009] x64_sys_call+0x1015/0x2550 [ 254.178648][T14009] do_syscall_64+0x112/0x360 [ 254.178682][T14009] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.178714][T14009] [ 254.178720][T14009] value changed: 0x0000000000005fcf -> 0x0000000000005fd2 [ 254.178735][T14009] [ 254.178739][T14009] Reported by Kernel Concurrency Sanitizer on: [ 254.178751][T14009] CPU: 1 UID: 0 PID: 14009 Comm: syz.5.3380 Not tainted syzkaller #0 PREEMPT(lazy) [ 254.178788][T14009] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 254.178802][T14009] ================================================================== [ 254.715924][T14101] bond2: entered allmulticast mode [ 254.753378][T14103] wireguard0: entered promiscuous mode [ 254.753421][T14103] wireguard0: entered allmulticast mode [ 254.766562][T14103] bond2: (slave wireguard0): The slave device specified does not support setting the MAC address [ 254.767359][T14103] bond2: (slave wireguard0): Error -95 calling set_mac_address [ 255.303529][ T404] batadv1: left promiscuous mode