last executing test programs: 4m56.454768114s ago: executing program 3 (id=22): mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mysys/bus/pci/devices/0000:00:01.0/enable\x00', 0x1, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000080)={0x34, 0x17, 0x2, {0x2b, './mysys/bus/pci/devices/0000:00:01.0/enable'}}, 0x34) write$make_it_fail(r0, &(0x7f0000000040)='0\x00', 0x2) 4m55.780956086s ago: executing program 3 (id=32): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x80, &(0x7f0000000340), 0x1, 0x7a2, &(0x7f0000003dc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x98) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv4_newnexthop={0x28, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(0xffffffffffffffff, 0x40485404, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newnexthop={0x24, 0x68, 0x401, 0x0, 0x0, {}, [@NHA_GROUP={0xc, 0x2, [{0x2}]}]}, 0x24}}, 0x0) write$P9_RREADLINK(r0, &(0x7f0000000000)={0xffffffffffffff23, 0x17, 0x2, {0x7, './file0'}}, 0xfffffdab) fadvise64(r0, 0xfe53, 0xfe53, 0x4) 4m55.019351282s ago: executing program 3 (id=38): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setns(0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) memfd_create(0x0, 0x0) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) waitid(0x0, 0x0, 0x0, 0x8, &(0x7f00000001c0)) 4m53.730621783s ago: executing program 4 (id=45): prctl$PR_SET_IO_FLUSHER(0x39, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x2, &(0x7f0000000240)=0x9, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000002c0)=0xffff, 0x4) write(r0, &(0x7f00000002c0)='0', 0x1) openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0xc142, 0x1a2) syz_mount_image$vfat(&(0x7f0000000340), &(0x7f0000000040)='./file0\x00', 0x2000800, &(0x7f0000000080)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES64=0x0], 0x1, 0x29a, &(0x7f0000000380)="$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") 4m53.291297173s ago: executing program 3 (id=46): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x1208002, &(0x7f0000000380)={[{@grpquota}, {@jqfmt_vfsold}, {@resuid}, {@debug}, {@dioread_nolock}, {}, {@acl}, {@noauto_da_alloc}]}, 0x1, 0x5d8, &(0x7f00000005c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$key(0xf, 0x3, 0x2) 4m53.024363756s ago: executing program 3 (id=47): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000090000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000"]}, 0x108) 4m52.639310634s ago: executing program 4 (id=50): r0 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, 0x0, &(0x7f0000000200)) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x101343) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x400454a4, &(0x7f0000000200)) 4m52.605100546s ago: executing program 3 (id=51): r0 = syz_ublk_setup_io_uring(0x277c, &(0x7f0000000000)={0x0, 0xcdcb, 0x5ca8d8e385635c54, 0x0, 0x3cd}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, r0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(r6, &(0x7f0000000100)='map_files\x00') fchdir(r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r8, 0x4, 0x0) getdents64(r8, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4m52.562710188s ago: executing program 32 (id=51): r0 = syz_ublk_setup_io_uring(0x277c, &(0x7f0000000000)={0x0, 0xcdcb, 0x5ca8d8e385635c54, 0x0, 0x3cd}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, r0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000080)={@remote}, 0x14) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r6 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_procfs(r6, &(0x7f0000000100)='map_files\x00') fchdir(r7) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r8, 0x4, 0x0) getdents64(r8, 0x0, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r9, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r9, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 4m52.534314749s ago: executing program 4 (id=54): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r0, &(0x7f0000000e00)={0xfc, {"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", 0x1000}}, 0x1006) 4m52.438957664s ago: executing program 4 (id=57): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) gettid() sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') pread64(r2, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) lsetxattr$security_selinux(0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) socketpair(0x11, 0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, 0x0, 0x100054, 0x0) syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x204001, &(0x7f0000000040), 0x1, 0xbae, &(0x7f00000017c0)="$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") r3 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_register(r3, &(0x7f00000001c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0x1, 0x3a, 'usrjquota=', 0x3a, '\x00\x03!\f\xee\x998r~\b\x13\x89\xae\xf1\x06hz\xcc\xd6\xbb\xb8\x19\x90\x9e\xdb\xa2F\xfa_F(\x05\b\x13\x82\x12\xad\x0f^\xff\a\xb5', 0x3a, './file2', 0x3a, [0x46]}, 0x5c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 4m51.65794217s ago: executing program 4 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='!*:*', 0x4) 4m51.110222956s ago: executing program 4 (id=71): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) close(r0) 4m50.929083265s ago: executing program 33 (id=71): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0) close(r0) 5.74560773s ago: executing program 2 (id=3098): openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) r0 = gettid() r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000400)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1, 0x10}}, 0x12) timer_create(0x1, &(0x7f0000000100)={0x0, 0x1f, 0x1, @tid=r0}, &(0x7f0000000080)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r2, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) setitimer(0x0, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}], 0x1, 0x2890) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r7 = socket$kcm(0x29, 0x2, 0x0) r8 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000180)={r8, r6}) sendmsg$kcm(r7, &(0x7f0000004800)={0x0, 0x0, &(0x7f0000003680)=[{&(0x7f0000002680)='bo', 0x2}], 0x1}, 0x4015) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) 5.127614029s ago: executing program 5 (id=3100): r0 = syz_ublk_setup_io_uring(0x277c, &(0x7f0000000000)={0x0, 0xcdcb, 0x5ca8d8e385635c54, 0x0, 0x3cd}, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f00000001c0)) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, r0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r4) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r5 = syz_clone(0x2008400, 0x0, 0x0, 0x0, 0x0, 0x0) r6 = syz_open_procfs(r5, &(0x7f0000000100)='map_files\x00') fchdir(r6) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85) lseek(r7, 0x4, 0x0) getdents64(r7, 0x0, 0x0) 4.574437544s ago: executing program 1 (id=3103): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a01020000000000000000070000030900010073797a30000000004c000000090a01040000000000000000070000000900020073797a31000000000900010073797a3000000000080005400000001c08000a4000000000080003400000004008000f4000000006201200000c0a01"], 0x12b4}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) 4.524214167s ago: executing program 1 (id=3104): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0xf}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x20040004) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0xfffffffa, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x8001, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x86, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf, 0x8}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x1, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0xfcf6, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x40000000, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x13, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0x0, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x16, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x8}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x80000002}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x4c0c}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x5b984eb6d5c686a1, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r3, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='k', 0x1}], 0x1}, 0x20000885) 4.385306293s ago: executing program 2 (id=3105): r0 = socket(0x840000000002, 0x3, 0xff) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f00000006c0)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000280)=[@ip_retopts={{0x10}}], 0x10}, 0x2400c804) 4.385026954s ago: executing program 2 (id=3106): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x0, 0x5001) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x1e, 0x4, 0x0) 4.309323657s ago: executing program 0 (id=3107): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0104\n', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) write(r2, 0x0, 0x0) write(r0, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6a1c5a3", 0x98) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='HID Gadget\n', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) write(r4, &(0x7f0000000840)='8\n', 0x2) symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000a40)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000b00)={0x0, 0x1dcd6500}, 0x0) 4.180987143s ago: executing program 5 (id=3108): syz_open_dev$usbfs(&(0x7f0000000240), 0x1ff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000cdd000/0x3000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000451000/0x2000)=nil, &(0x7f0000ff6000/0xa000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000dd6000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000f78000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000071a000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24040045) r0 = io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0xc000, 0x3, 0xce}) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) 4.150337254s ago: executing program 2 (id=3109): creat(0x0, 0x108) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) setuid(0xee00) 4.002566531s ago: executing program 5 (id=3111): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xb, &(0x7f0000001580)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x7, 0xff5, &(0x7f00000003c0)=""/4085, 0x40e00}, 0x94) 4.002258051s ago: executing program 1 (id=3112): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa0000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x9, 0x10004, 0x5, 0x84, 0x6, 0x7, 0x83, 0x6f0d}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000b00)=@newqdisc={0x6c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r3, {0x0, 0xc}, {0x1, 0xb}, {0xffff, 0xd}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x40, 0x2, [@TCA_TBF_BURST={0x8, 0x6, 0x4000003}, @TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x0, 0x2, 0x3ff, 0x8, 0x2}, {0x7, 0x2, 0x5ec, 0x1, 0xad, 0x200}, 0x8, 0x8000, 0xb9f}}, @TCA_TBF_PRATE64={0xc, 0x5, 0x9e53194a6724d2b5}]}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x240448a4}, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r4, &(0x7f0000000180)={&(0x7f0000000300)=@xdp={0x2c, 0x2, r3, 0x3e}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000700)="e28ee7ec44819a102e09c23856ec", 0xe}], 0x1}, 0x0) 3.884333487s ago: executing program 5 (id=3113): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='0fc5:1227:', 0xa) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x4, 0x401d031, r0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x4) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x40800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file2\x00', 0x42, 0x0) pwrite64(r3, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) 3.777337572s ago: executing program 1 (id=3114): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee3, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f0000000380)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r3, &(0x7f0000001c80)=[{&(0x7f0000001bc0)=""/156, 0x9c}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x20001c34}], 0x1, 0x0) 3.308656634s ago: executing program 0 (id=3115): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000a40000000020900020073797a3100000000080003400000001408000540000000190c000b4000df"], 0xbc}, 0x1, 0x0, 0x0, 0x20008040}, 0x8c30) 3.306071774s ago: executing program 5 (id=3116): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x1, 0x1, 0x81, 0x8, r2}, 0x10) 3.133161393s ago: executing program 5 (id=3118): socket$inet6(0xa, 0x4, 0x8000000003c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) setpriority(0x0, r0, 0x0) 2.529880201s ago: executing program 1 (id=3119): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x8, &(0x7f0000000080)=0x7) getresuid(&(0x7f0000002380), &(0x7f00000023c0), &(0x7f0000002400)) 2.364518178s ago: executing program 0 (id=3121): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000200)='source\x00', &(0x7f0000000300)='127.0.0.1:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='addr\x00', &(0x7f0000000500)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000800)='vers\x00', &(0x7f0000000540)='4\x00\b\f\x8b\xcb\x8d\x03\xe0o&NU_\x8bH\xca=\xf3s\xd3g\xb8Nw\xfc\xe7(\x9eA\xe8\x922\xb1\f#_ey\x9d\f\x8dN\xe3\xde\xa5\\-\x80\xa1\x91k\x11\xa3}\xe4\xff\nX\x1a\xb4\xfd!\xc3\xf2j\xef\xc1\xfd\xadik\xee39\"N\x81\xd9P\x83\xb7\bBh6\xbe\xb9\xaej\xa9\xb0#\x03\x06\xfcF\x13\x9ba\xc35\x99T\x93C\x94\xe5MD\x197\\3\xf1\x1b\xcc\x90!)\b)\xa2\x06\bb\xd3\xbb\xa3p\x97\xba\x81 \x8a\xaa\xcfI\xde\xcd', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000a00)='xprtsec\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 2.166871938s ago: executing program 0 (id=3122): inotify_init1(0x800) pipe(&(0x7f00000001c0)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:00.0/remove\x00', 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, 0x0) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./sys\x00', 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r4, &(0x7f00000005c0)='0fc5:1227:', 0xa) write(r0, &(0x7f0000000300)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='1', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) 1.450867241s ago: executing program 6 (id=3123): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.293356068s ago: executing program 6 (id=3124): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_open_dev$evdev(0x0, 0x800000000000072, 0x101202) ioctl$EVIOCGRAB(r1, 0x40044590, &(0x7f0000000100)=0x2) close_range(r0, 0xffffffffffffffff, 0x0) 1.2714939s ago: executing program 0 (id=3125): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000140), 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0x0104\n', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/bcdUSB\x00', 0x1, 0x0) write(r2, 0x0, 0x0) write(r0, &(0x7f0000000b40)="a75f3e8763810fb65db27b093ce625d61034fd6f81992cbace7584a0463a17a53bd51219be4c462a52591512f0901461910a999bff9cac267b67b04c786921a9b7730ccc20ca181bdcfd994246f794823814ba667bdd9f2fd0f25ee2666f23ac4e5454b442a9d4ac98b19053005c375df3e5aaee734d72533756fe9aa2654015347d708963edfaf489e94ee74a52aa645a73118eb6a1c5a3", 0x98) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='HID Gadget\n', 0xb) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x1, 0x0) write(r4, &(0x7f0000000840)='8\n', 0x2) symlinkat(&(0x7f0000000900)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000980)='./config/usb_gadget/g1/configs/c.1/hid.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000a40)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000b00)={0x0, 0x1dcd6500}, 0x0) 1.244358581s ago: executing program 6 (id=3126): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r1, 0x0, 0x20040004) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r4) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r8, {0x1, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x9, 0x20000000, 0x6}, 0x1, 0xfb}, [{0x2, 0xfffffffa, 0x9, 0x5, 0x2, 0x7}, {0x0, 0x6, 0x4, 0x10000, 0xfffffffd, 0x81}, {0x1, 0x1, 0x8, 0x101, 0x1}, {0x3, 0x3, 0x0, 0x7, 0x5, 0x4}, {0xf, 0x7, 0x9, 0x51, 0x6}, {0x3, 0x8004, 0xc, 0x101, 0x103, 0x84b5}, {0x9c, 0x4, 0x9, 0x2, 0x487, 0x8}, {0x1, 0x10000, 0x5, 0x4, 0x3, 0x8000}, {0x7, 0x9, 0x1ff, 0x8, 0x2, 0x7fff}, {0x439356e7, 0x609, 0x16, 0xfffffffc, 0x0, 0x6}, {0x5, 0x3, 0x8, 0x3, 0x400000, 0xffffffff}, {0x5, 0xfffffff8, 0x7, 0x7, 0x8, 0x5}, {0x8001, 0x8, 0xfffffffe, 0x5, 0xfffff000, 0x7}, {0x768d, 0xcd, 0x8, 0x7, 0x5, 0x10000}, {0xfffffffe, 0xfffffffb, 0x6, 0x5, 0x7ff, 0x5}, {0x240, 0x6, 0xfffffffe, 0x6, 0x2}, {0xfffff9fd, 0x49, 0xa5f, 0xa, 0x5, 0x2}, {0x6, 0x9, 0x167, 0x2, 0x71, 0xa2}, {0x140, 0x2, 0xc, 0x6, 0x87}, {0x5, 0xa, 0x2, 0x4, 0x3, 0x2000}, {0x32d, 0x2008, 0x7fff, 0x4, 0x8, 0x9}, {0x6, 0x200, 0x58fe, 0x7ff, 0x4, 0x3}, {0x101, 0xd, 0x101, 0x0, 0xde4, 0x2}, {0x0, 0x3, 0x2, 0x1, 0x2, 0x9}, {0xffffffff, 0x1, 0x9, 0x0, 0x1, 0x4}, {0xc, 0xe, 0x0, 0x3, 0x8, 0x81}, {0x3, 0x3, 0x8006, 0xe, 0x0, 0x80}, {0xd, 0x638c, 0x7ff, 0x0, 0x80000000, 0x2}, {0x4, 0xb, 0x6c5f1878, 0x57c4, 0x8, 0x25ff}, {0x4, 0xd, 0x1fadd976, 0x3071, 0x0, 0x1}, {0x5, 0x800, 0x3, 0x3, 0x3, 0x9}, {0x9, 0x1ff, 0x1000, 0x9c, 0x1, 0x5}, {0x9, 0xd76, 0x6, 0xdc2, 0xa16a, 0x2}, {0x1ff, 0x5, 0x7, 0x2, 0x2, 0xffffffff}, {0x1, 0x32158140, 0x0, 0x8, 0x6, 0x7}, {0xe, 0x4, 0x9000, 0x5, 0x2, 0x7}, {0x3, 0x2ec74d53, 0x0, 0x0, 0x8, 0x2}, {0x5, 0xfff, 0xffffff13, 0x6, 0x2, 0x6}, {0x1, 0x6, 0x3, 0x4, 0xffb, 0xc}, {0x86, 0x6, 0x1ff, 0x8, 0x7ff, 0x8001}, {0x4, 0xffffffff, 0x0, 0xfffff740, 0x4, 0x4}, {0xffff, 0x5, 0x7, 0xac, 0xf, 0x8}, {0x5, 0x3, 0x6, 0xfff, 0x4, 0x8001}, {0xd, 0x3, 0x80000000, 0x0, 0xffffff81, 0x7ff}, {0xfffffffb, 0x2, 0x1ff, 0x5d, 0xffff8001, 0x800000}, {0x0, 0x6, 0x7ffc, 0x9, 0x500, 0x7}, {0x1, 0xffffffff, 0x834, 0x7, 0x0, 0x3}, {0x7fff, 0x6, 0x0, 0x2002, 0x1, 0x8}, {0xf61, 0x101, 0x9, 0x2, 0x80000000, 0x7fff}, {0xc7, 0x1, 0x8, 0x2, 0xffff, 0x20000000}, {0x0, 0x5, 0x1, 0xffff, 0x3, 0x3}, {0x9, 0x10001, 0x9f98, 0x1, 0x8, 0x66a}, {0xfff, 0x6, 0x8, 0x80000001, 0x0, 0x7f}, {0xff, 0x6, 0x7f, 0x5, 0x3, 0xb}, {0x4, 0x4b, 0x0, 0x1, 0x7f, 0x7fffffff}, {0xfff, 0x47e4, 0x1, 0xffffffff, 0x80000001, 0x9}, {0x3, 0x4, 0x7, 0x6, 0x8, 0xe5}, {0x9, 0x9, 0x1, 0x9, 0x0, 0x2}, {0x8, 0x80000001, 0x7fff, 0xb2d9, 0xfffffffe, 0x8}, {0x80000001, 0xfcf6, 0x5202, 0x2, 0x53ce, 0x3}, {0x6, 0x4, 0x8, 0x8, 0x7f, 0x80000000}, {0xfffffff9, 0x9, 0x6, 0x6, 0x9, 0x3}, {0xfffffffd, 0x8, 0x6, 0x5, 0x3, 0x8f}, {0x741, 0x0, 0x9, 0x7fffffff, 0x2, 0x200}, {0x401, 0x2, 0x8, 0x4, 0x8000, 0xc6e9}, {0x1, 0x2d73, 0x40000000, 0x5, 0x9f17, 0xffffff7f}, {0x10000, 0x401, 0x2b00, 0xfffff57b, 0xfffffc00, 0xd}, {0x3, 0x4, 0xc52b, 0x9, 0x5, 0xff}, {0x0, 0x4, 0x401, 0x0, 0x1, 0x9}, {0x8, 0x4, 0x1, 0x2, 0x10, 0x1}, {0xff, 0x8, 0x6, 0x5, 0xff, 0x5}, {0x2, 0xb15ce2d, 0x80000001, 0xbeab, 0x4, 0x5}, {0x3, 0x8, 0x3, 0x7, 0x8, 0x4}, {0xfff, 0x9, 0x6, 0x13, 0x100, 0x57}, {0x9, 0x5, 0x8, 0x3, 0xa, 0x2}, {0xb3, 0xe, 0x3, 0x7e8, 0x7, 0x9}, {0x400000ff, 0x7, 0x5, 0x10001, 0x2, 0x6}, {0x1, 0x8f, 0x9, 0xffffff46, 0x4, 0x88000000}, {0x9, 0x2, 0xfffffffc, 0x1, 0xd52, 0x3}, {0xd203, 0x7, 0x1, 0x10000, 0x43, 0x1ff}, {0x1004, 0x3ff, 0xffffffff, 0x1, 0x5, 0x100}, {0x1ff, 0x3, 0x7ff, 0xfffffff8, 0x1ff, 0xfffffffc}, {0x7, 0x9, 0x83ff, 0x1, 0x7, 0x4}, {0x0, 0x6, 0x0, 0x6, 0xffff0001, 0xcca}, {0x7, 0x1, 0xfffffff1, 0x3ff, 0x100, 0x4}, {0x3, 0x9, 0x0, 0xed4, 0x4, 0x9}, {0x9, 0x7, 0x8001, 0x7, 0x2, 0x2}, {0x5, 0x0, 0x9, 0x5, 0xb5, 0x3}, {0x0, 0x1, 0x16, 0x5, 0xffffff01, 0xfff}, {0x7, 0x5, 0x2, 0xa5f, 0x0, 0xfffff9de}, {0x9, 0xffffffff, 0xe6b, 0xb, 0xb, 0x4}, {0x9, 0xffffff11, 0x1, 0x2, 0xff, 0x52e2}, {0x0, 0x1, 0x0, 0x7, 0xdb, 0x6}, {0x7, 0x400, 0x9, 0x8, 0xa, 0x104}, {0x81, 0x8, 0x988, 0x0, 0x0, 0x7}, {0xdc03, 0x7, 0x80, 0x8, 0xfffffff9, 0x8}, {0xa, 0xfffffffe, 0x1, 0x1ff, 0x1ff, 0xc1b7}, {0xa24b, 0x947d, 0x40, 0x4, 0x9, 0x2}, {0x9, 0x401, 0xa89, 0x5ef, 0x9, 0x8}, {0x4, 0x7fff, 0x0, 0x4, 0x7fffffff}, {0x3, 0xb8c, 0x6, 0x21761f6a, 0x1, 0x4}, {0xfff, 0xda, 0x1d, 0x4, 0x8, 0x80000002}, {0x8, 0x10, 0x100, 0x0, 0xfffffff7, 0xc}, {0xfffff000, 0x8, 0xe96, 0x9, 0x9, 0x34b0}, {0x4, 0x8, 0x8, 0x3, 0x6cf4, 0x1}, {0x3, 0x3, 0x7, 0x5, 0xbe, 0x81}, {0x4, 0x800, 0x4000, 0x5, 0x8, 0xfa2f}, {0x3, 0x8d, 0x81, 0x2, 0x8, 0x6}, {0x9, 0x2, 0x6, 0x4, 0xf, 0x5}, {0x100, 0x1, 0x2, 0xffffffff, 0x9, 0x74}, {0x4, 0x4, 0x8, 0x1, 0x0, 0x3}, {0x8002, 0xfffffffb, 0xffffffff, 0x62f, 0x401, 0x30564e0}, {0x9a2f, 0x800, 0x8, 0x1, 0x80000000}, {0x20000009, 0x2, 0x800, 0x200, 0x9, 0x3}, {0x47, 0x6, 0x8936, 0xdcb, 0x7, 0x2}, {0x6, 0x80000000, 0x8, 0xe, 0xfffffffa, 0x8de3}, {0x0, 0x9, 0x8, 0xfff, 0x6, 0x1ff}, {0x8195, 0x2, 0x1000}, {0x1, 0x50, 0xff, 0x9e0f, 0x5, 0x3}, {0x7fff, 0x6, 0x0, 0x5, 0x8000, 0x3}, {0x7ff, 0x9, 0x9, 0x6, 0x7, 0xe77}, {0x1, 0x5e12, 0x3, 0xfffffffa, 0x2, 0x80000001}, {0xffffff8c, 0x9, 0x1, 0x1, 0x10, 0x5}, {0x7, 0x7, 0x104, 0x78d, 0xffffcff7, 0x4c0c}, {0x1, 0xe, 0x7, 0x2, 0x2, 0x207f}, {0xf, 0x5, 0xfffffffa, 0xff, 0x80004, 0xfff}, {0x1, 0x7ff, 0x696e, 0xa, 0x49d, 0xb}, {0x9bf4, 0x0, 0x5, 0x3, 0x3, 0x1000}], [{0x1, 0x1}, {0x2}, {}, {0x2}, {0x2, 0x745e81639ff0f356}, {0x4, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x3}, {0x2}, {0x3}, {}, {}, {0x2}, {0x2}, {}, {0x3}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2}, {0x5}, {0x2, 0x1}, {0x1, 0x1}, {0x1}, {0x1, 0x1}, {0x5}, {0x4}, {0x3, 0x1}, {0x5, 0x1}, {0x36bc5bece03d104f}, {0x4, 0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x1, 0x1}, {}, {0xa}, {0x3}, {0x3, 0x1}, {0x2}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x4}, {0x2}, {0x2, 0x1}, {0x5, 0x3}, {0x4, 0x1}, {0x1}, {0x4}, {0x0, 0x1}, {0x2}, {0x1, 0x1}, {0x3, 0x1}, {0x5}, {0x3, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {}, {0x2, 0x1}, {0x3}, {0x0, 0x1}, {}, {0x3}, {0x6}, {0xa}, {0x5b984eb6d5c686a1, 0x1}, {}, {0x5, 0x1}, {0x1}, {0x4}, {0x5}, {0x2590228f88cc2931}, {0x3, 0x1}, {0x4}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x2}, {0xb82e57098c7a44ef}, {0x3, 0x1}, {0x1}, {0x6, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x5}, {0x0, 0x1}, {0x4}, {0x4}, {0x0, 0x1}, {0x2}, {0x4, 0x1}, {0x1}, {0x1, 0x1}, {}, {0x3}, {0x1, 0x1}, {}, {0x4, 0x1}, {0x3}, {0x3}, {0x1}, {0x5}, {0x3, 0x1}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x4}, {0x4, 0x1}, {0x1}, {0x4, 0x1}, {0x4}, {0x0, 0x1}, {0x3}, {0x1}, {0x0, 0x1}, {0x4}], 0x1}}, @TCA_PEDIT_KEYS_EX={0x18, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}]}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$kcm(r5, &(0x7f0000002900)={&(0x7f0000000340)=@xdp={0x2c, 0x8, r3, 0x109}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)='k', 0x1}], 0x1}, 0x20000885) 1.05806515s ago: executing program 2 (id=3127): socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x20040051) prctl$PR_SET_MM(0x35, 0x2, &(0x7f0000f77000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open_tree(0xffffffffffffffff, 0x0, 0x8c00) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') pread64(r3, &(0x7f00000000c0)=""/169, 0xa9, 0x4fd9) sendmmsg(0xffffffffffffffff, &(0x7f0000001c00), 0x400000000000159, 0x40840) 1.013213912s ago: executing program 6 (id=3128): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x0, 0x5001) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mbind(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4005, &(0x7f0000000040)=0x81, 0x5, 0x0) set_mempolicy_home_node(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0) 977.708154ms ago: executing program 6 (id=3129): timer_create(0x1, &(0x7f0000001180)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, 0x0, 0x129101, 0x95) creat(&(0x7f0000000080)='./file0\x00', 0x2b) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_capability(&(0x7f0000000080)='./cgroup/cgroup.procs\x00', &(0x7f0000000700), &(0x7f00000002c0)=@v2={0x2000000, [{0x2, 0x5}, {0x4, 0x1ff}]}, 0x14, 0x0) gettid() timer_settime(0x0, 0x1, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r4}, 0x10) prctl$PR_SET_FPEMU(0xa, 0x3) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@ipv6_newaddr={0x18, 0x14, 0x0, 0x70bd26, 0x25dfdbfb, {0xa, 0x20, 0x4, 0x0, r4}}, 0x18}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x24040084) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={0x0}, 0x1, 0x0, 0x0, 0x400c9}, 0x0) 294.257135ms ago: executing program 0 (id=3130): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000080)={'dummy0\x00'}) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/class/net/bonding_masters\x00', 0x2, 0x0) write(r1, &(0x7f0000000100)='+bond1', 0x6) close(r1) write(0xffffffffffffffff, &(0x7f0000000180), 0x0) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/class/net/bond1/bonding/slaves\x00', 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'dummy0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000007c0)={'bond_slave_1\x00'}) write(0xffffffffffffffff, &(0x7f0000000480)='-bond_slave_0\n\x00', 0xe) write(0xffffffffffffffff, &(0x7f00000004c0)='-bond_slave_1\n\x00', 0xe) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/net/bond0/bonding/mode\x00', 0x2, 0x0) write(r2, &(0x7f0000000580)='balance-alb\n\x00', 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000640)={'bond0\x00', 0x1}) 101.254335ms ago: executing program 2 (id=3131): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x8) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xf, 0x4, 0x4, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0x6, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r3}, @generic={0xb7, 0x3}, @generic={0xb7, 0x4, 0x0, 0x0, 0x8000000}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)={@map=r3, r4, 0x7, 0x0, 0x0, @void, @value=0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000600)={r3, &(0x7f0000000640), &(0x7f0000000680)=@tcp=r2}, 0x20) sendto(r2, &(0x7f0000000700)='a', 0x1, 0x11, 0x0, 0x0) 39.720447ms ago: executing program 1 (id=3132): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x44, r1, 0x601, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}]}, 0x44}}, 0x0) 0s ago: executing program 6 (id=3133): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="01000000050000000100000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x20075, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): [ 178.928252][ T51] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 178.928287][ T51] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 178.928321][ T51] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 179.117068][ T8199] loop2: detected capacity change from 0 to 128 [ 179.119062][ T8199] EXT4-fs: test_dummy_encryption option not supported [ 179.130117][ T8198] syzkaller0: entered promiscuous mode [ 179.130138][ T8198] syzkaller0: entered allmulticast mode [ 179.136125][ T8198] tipc: Enabled bearer , priority 0 [ 179.211367][ T8197] tipc: Resetting bearer [ 179.211607][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.240079][ T8197] tipc: Disabling bearer [ 180.128629][ T8233] syzkaller0: entered promiscuous mode [ 180.128653][ T8233] syzkaller0: entered allmulticast mode [ 180.317772][ T8242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.317913][ T8242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.319815][ T8242] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 180.319918][ T8242] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 180.322307][ T42] IPVS: starting estimator thread 0... [ 180.413060][ T8243] IPVS: using max 2592 ests per chain, 129600 per kthread [ 181.114836][ T5297] wiimote 0005:057E:0330.0004: item fetching failed at offset 46/47 [ 181.114899][ T5297] wiimote 0005:057E:0330.0004: HID parse failed [ 181.114961][ T5297] wiimote 0005:057E:0330.0004: probe with driver wiimote failed with error -22 [ 181.163072][ T8287] netlink: 'syz.1.1588': attribute type 1 has an invalid length. [ 181.189760][ T8287] bridge1: entered promiscuous mode [ 181.190952][ T8287] bond1: (slave bridge1): making interface the new active one [ 181.191417][ T8287] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 181.523354][ T5308] wiimote 0005:057E:0330.0005: item fetching failed at offset 46/47 [ 181.523545][ T5308] wiimote 0005:057E:0330.0005: HID parse failed [ 181.523599][ T5308] wiimote 0005:057E:0330.0005: probe with driver wiimote failed with error -22 [ 182.747133][ T8350] netlink: 'syz.5.1610': attribute type 16 has an invalid length. [ 182.747153][ T8350] netlink: 'syz.5.1610': attribute type 17 has an invalid length. [ 182.747212][ T8350] lo: left promiscuous mode [ 182.747276][ T8350] tunl0: left promiscuous mode [ 182.747522][ T8350] erspan0: left promiscuous mode [ 182.747653][ T8350] ip_vti0: left promiscuous mode [ 182.747700][ T8350] ip6_vti0: left promiscuous mode [ 182.747778][ T8350] sit0: left promiscuous mode [ 182.747952][ T8350] ip6tnl0: left promiscuous mode [ 182.748056][ T8350] ip6gre0: left promiscuous mode [ 182.748130][ T8350] syz_tun: left promiscuous mode [ 182.748177][ T8350] ip6gretap0: left promiscuous mode [ 182.748256][ T8350] bridge0: left promiscuous mode [ 182.748457][ T8350] vcan0: left promiscuous mode [ 182.748507][ T8350] bond0: left promiscuous mode [ 182.749823][ T8350] team0: left promiscuous mode [ 182.750029][ T8350] dummy0: left promiscuous mode [ 182.750195][ T8350] nlmon0: left promiscuous mode [ 182.750313][ T8350] batadv0: left promiscuous mode [ 182.750434][ T8350] vxcan0: left promiscuous mode [ 182.750532][ T8350] vxcan1: left promiscuous mode [ 182.750658][ T8350] veth0: left promiscuous mode [ 182.750704][ T8350] veth1: left promiscuous mode [ 182.750810][ T8350] wg0: left promiscuous mode [ 182.751071][ T8350] wg1: left promiscuous mode [ 182.751116][ T8350] wg2: left promiscuous mode [ 182.751230][ T8350] veth0_to_bridge: left promiscuous mode [ 182.751342][ T8350] veth1_to_bridge: left promiscuous mode [ 182.751544][ T8350] veth0_to_bond: left promiscuous mode [ 182.751590][ T8350] bond_slave_0: left promiscuous mode [ 182.751716][ T8350] veth1_to_bond: left promiscuous mode [ 182.751790][ T8350] bond_slave_1: left promiscuous mode [ 182.751917][ T8350] veth0_to_team: left promiscuous mode [ 182.751963][ T8350] team_slave_0: left promiscuous mode [ 182.752032][ T8350] veth1_to_team: left promiscuous mode [ 182.752126][ T8350] team_slave_1: left promiscuous mode [ 182.752173][ T8350] veth0_to_batadv: left promiscuous mode [ 182.752267][ T8350] batadv_slave_0: left promiscuous mode [ 182.752315][ T8350] veth1_to_batadv: left promiscuous mode [ 182.752375][ T8350] batadv_slave_1: left promiscuous mode [ 182.752456][ T8350] xfrm0: left promiscuous mode [ 182.752513][ T8350] veth0_to_hsr: left promiscuous mode [ 182.752743][ T8350] veth1_to_hsr: left promiscuous mode [ 182.752839][ T8350] hsr0: left promiscuous mode [ 182.752888][ T8350] veth1_virt_wifi: left promiscuous mode [ 182.759671][ T8350] veth0_virt_wifi: left promiscuous mode [ 182.759910][ T8350] vlan0: left promiscuous mode [ 182.760115][ T8350] vlan1: left promiscuous mode [ 182.760193][ T8350] macvlan0: left promiscuous mode [ 182.760322][ T8350] macvlan1: left promiscuous mode [ 182.760369][ T8350] ipvlan0: left promiscuous mode [ 182.760547][ T8350] ipvlan1: left promiscuous mode [ 182.760684][ T8350] macvtap0: left promiscuous mode [ 182.760736][ T8350] macsec0: left promiscuous mode [ 182.760841][ T8350] geneve0: left promiscuous mode [ 182.760930][ T8350] geneve1: left promiscuous mode [ 182.763585][ T8350] netdevsim netdevsim5 netdevsim0: left promiscuous mode [ 182.763724][ T8350] netdevsim netdevsim5 netdevsim1: left promiscuous mode [ 182.763800][ T8350] netdevsim netdevsim5 netdevsim2: left promiscuous mode [ 182.763898][ T8350] netdevsim netdevsim5 netdevsim3: left promiscuous mode [ 182.859001][ T8358] ./dev/sda1: Can't lookup blockdev [ 183.153120][ T29] audit: type=1326 audit(1790113120.686:548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8361 comm="syz.5.1613" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d1ae6e159 code=0x0 [ 183.725194][ T8372] syzkaller0: entered promiscuous mode [ 183.725215][ T8372] syzkaller0: entered allmulticast mode [ 183.873321][ T8389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1622'. [ 183.889872][ T8390] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1619'. [ 183.889896][ T8390] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1619'. [ 183.916213][ T8390] loop6: detected capacity change from 0 to 512 [ 183.928550][ T29] audit: type=1400 audit(1790113121.496:549): avc: denied { write } for pid=8376 comm="syz.6.1619" name="313" dev="tmpfs" ino=1697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 183.975858][ T8390] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.1619: bg 0: block 184: padding at end of block bitmap is not set [ 183.975928][ T8390] loop6: lost filesystem error report for type 5 error -117 [ 183.976120][ T8390] EXT4-fs (loop6): Remounting filesystem read-only [ 183.976318][ T8390] EXT4-fs (loop6): 1 truncate cleaned up [ 183.976770][ T8390] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 183.976890][ T8390] ext4 filesystem being mounted at /313/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 184.004275][ T12] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 184.004353][ T12] Quota error (device loop6): write_blk: dquota write failed [ 184.004367][ T12] Quota error (device loop6): remove_free_dqentry: Can't write block (5) with free entries [ 184.004384][ T12] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 184.004403][ T12] Quota error (device loop6): write_blk: dquota write failed [ 184.004416][ T12] Quota error (device loop6): free_dqentry: Can't move quota data block (5) to free list [ 184.004435][ T12] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 184.004509][ T12] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 184.004540][ T12] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 184.196570][ T29] audit: type=1400 audit(1790113121.766:550): avc: denied { name_connect } for pid=8404 comm="syz.5.1627" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 184.587236][ T3765] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 184.591071][ T29] audit: type=1400 audit(1790113122.156:551): avc: denied { write } for pid=3765 comm="syz-executor" name="313" dev="tmpfs" ino=1697 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 184.646929][ T8423] syzkaller0: entered promiscuous mode [ 184.646957][ T8423] syzkaller0: entered allmulticast mode [ 185.101038][ T8459] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1645'. [ 185.101066][ T8459] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 185.384047][ T8480] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1654'. [ 185.495756][ T8486] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1657'. [ 185.560534][ T8499] netlink: 'syz.5.1663': attribute type 16 has an invalid length. [ 185.560553][ T8499] netlink: 'syz.5.1663': attribute type 17 has an invalid length. [ 185.560564][ T8499] netlink: 'syz.5.1663': attribute type 27 has an invalid length. [ 185.843964][ T8524] netlink: 'syz.2.1674': attribute type 16 has an invalid length. [ 185.843982][ T8524] netlink: 'syz.2.1674': attribute type 17 has an invalid length. [ 185.844077][ T8524] netlink: 'syz.2.1674': attribute type 27 has an invalid length. [ 185.994309][ T8527] loop2: detected capacity change from 0 to 4096 [ 186.020573][ T8527] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 186.178041][ T8532] syzkaller0: entered promiscuous mode [ 186.178060][ T8532] syzkaller0: entered allmulticast mode [ 186.201849][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 186.386721][ T8552] syz.6.1683 uses obsolete (PF_INET,SOCK_PACKET) [ 186.826206][ T8605] bridge_slave_0: left allmulticast mode [ 186.826230][ T8605] bridge_slave_0: left promiscuous mode [ 186.826384][ T8605] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.831561][ T8605] bridge_slave_1: left allmulticast mode [ 186.831644][ T8605] bridge_slave_1: left promiscuous mode [ 186.849367][ T8605] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.875497][ T8605] bond0: (slave bond_slave_0): Releasing backup interface [ 186.891719][ T8605] bond0: (slave bond_slave_1): Releasing backup interface [ 186.905969][ T8605] team0: Port device team_slave_0 removed [ 186.911615][ T8605] team0: Port device team_slave_1 removed [ 186.913996][ T8605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.914014][ T8605] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.920634][ T8605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.920674][ T8605] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.927808][ T8605] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 187.686480][ T8679] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1698'. [ 187.795980][ T8689] ./dev/sda1: Can't lookup blockdev [ 188.227311][ T8696] netlink: 'syz.0.1704': attribute type 16 has an invalid length. [ 188.227328][ T8696] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1704'. [ 188.402328][ T8708] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1710'. [ 188.498138][ T8713] syzkaller0: entered promiscuous mode [ 188.498157][ T8713] syzkaller0: entered allmulticast mode [ 188.644545][ T8717] xt_CT: No such helper "netbios-ns" [ 188.702415][ T8720] syzkaller0: entered promiscuous mode [ 188.702433][ T8720] syzkaller0: entered allmulticast mode [ 188.959043][ T8736] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1721'. [ 189.075635][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 189.075650][ T29] audit: type=1326 audit(1790113126.646:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8739 comm="syz.1.1723" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf88eae159 code=0x0 [ 189.209553][ T8748] syzkaller0: entered promiscuous mode [ 189.209573][ T8748] syzkaller0: entered allmulticast mode [ 189.280124][ T8751] syzkaller0: entered promiscuous mode [ 189.280144][ T8751] syzkaller0: entered allmulticast mode [ 189.414354][ T8754] loop0: detected capacity change from 0 to 4096 [ 189.433574][ T8754] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 189.642853][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 189.688248][ T8762] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1732'. [ 189.721998][ T8764] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1733'. [ 189.722717][ T8764] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1733'. [ 189.915715][ T5308] wiimote 0005:057E:0330.0006: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 189.915878][ T5308] wiimote 0005:057E:0330.0006: New device registered [ 189.919892][ T8769] wiimote 0005:057E:0330.0006: Device removed [ 190.183682][ T8774] fido_id[8774]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 190.233361][ T8778] netlink: 'syz.0.1737': attribute type 1 has an invalid length. [ 190.233429][ T8778] netlink: 'syz.0.1737': attribute type 2 has an invalid length. [ 190.570377][ T8794] loop1: detected capacity change from 0 to 4096 [ 190.584898][ T8794] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 190.729626][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 190.742767][ T8800] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1745'. [ 190.743141][ T8800] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1745'. [ 190.863063][ T8808] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 190.944467][ T5308] wiimote 0005:057E:0330.0006: detected device: Nintendo Wii Remote Plus (Gen 2) [ 190.963801][ T5308] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0006/input/input10 [ 190.965856][ T5308] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0006/input/input11 [ 190.967010][ T5308] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0006/input/input9 [ 191.592162][ T8828] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1756'. [ 191.605248][ T8828] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1756'. [ 191.684177][ T29] audit: type=1400 audit(1790113129.256:563): avc: denied { create } for pid=8829 comm="syz.2.1757" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 191.684397][ T29] audit: type=1400 audit(1790113129.256:564): avc: denied { ioctl } for pid=8829 comm="syz.2.1757" path="socket:[28652]" dev="sockfs" ino=28652 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 191.763771][ T8832] syzkaller0: entered promiscuous mode [ 191.763788][ T8832] syzkaller0: entered allmulticast mode [ 191.849675][ T8839] syzkaller0: entered promiscuous mode [ 191.849697][ T8839] syzkaller0: entered allmulticast mode [ 191.851676][ T8839] tipc: Enabled bearer , priority 0 [ 191.859542][ T8839] tipc: Resetting bearer [ 191.864869][ T8838] tipc: Resetting bearer [ 191.873938][ T8838] tipc: Disabling bearer [ 192.037026][ T8864] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1771'. [ 192.073994][ T8869] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1773'. [ 192.614677][ T8877] syzkaller0: entered promiscuous mode [ 192.614730][ T8877] syzkaller0: entered allmulticast mode [ 192.717752][ T8888] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 192.765977][ T29] audit: type=1400 audit(1790113130.336:565): avc: denied { create } for pid=8889 comm="syz.6.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 192.766311][ T29] audit: type=1400 audit(1790113130.336:566): avc: denied { setopt } for pid=8889 comm="syz.6.1780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 192.952896][ T8905] No source specified [ 193.283067][ T8913] tc action pedit offset 8 out of bounds [ 193.600341][ T8920] syzkaller0: entered promiscuous mode [ 193.600365][ T8920] syzkaller0: entered allmulticast mode [ 194.551032][ T8943] No source specified [ 195.524796][ T8958] syzkaller0: entered promiscuous mode [ 195.524913][ T8958] syzkaller0: entered allmulticast mode [ 195.682011][ T8963] syzkaller0: entered promiscuous mode [ 195.682031][ T8963] syzkaller0: entered allmulticast mode [ 195.697429][ T8963] tipc: Enabled bearer , priority 0 [ 195.709051][ T8963] tipc: Resetting bearer [ 195.711196][ T8962] tipc: Resetting bearer [ 195.722755][ T8962] tipc: Disabling bearer [ 197.179474][ T9004] __nla_validate_parse: 1 callbacks suppressed [ 197.179511][ T9004] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1819'. [ 197.179530][ T9004] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1819'. [ 197.183379][ T9004] loop0: detected capacity change from 0 to 512 [ 197.213224][ T29] audit: type=1400 audit(1790113134.756:567): avc: denied { write } for pid=8999 comm="syz.0.1819" name="337" dev="tmpfs" ino=1844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 197.214932][ T9004] EXT4-fs error (device loop0): ext4_validate_block_bitmap:445: comm syz.0.1819: bg 0: block 184: padding at end of block bitmap is not set [ 197.214963][ T9004] loop0: lost filesystem error report for type 5 error -117 [ 197.215123][ T9004] EXT4-fs (loop0): Remounting filesystem read-only [ 197.215325][ T9004] EXT4-fs (loop0): 1 truncate cleaned up [ 197.215637][ T9004] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 197.215746][ T9004] ext4 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 197.253936][ T114] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 197.253963][ T114] Quota error (device loop0): write_blk: dquota write failed [ 197.253976][ T114] Quota error (device loop0): remove_free_dqentry: Can't write block (5) with free entries [ 197.253994][ T114] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 197.254043][ T114] Quota error (device loop0): write_blk: dquota write failed [ 197.254056][ T114] Quota error (device loop0): free_dqentry: Can't move quota data block (5) to free list [ 197.254074][ T114] EXT4-fs (loop0): Quota write (off=8, len=24) cancelled because transaction is not started [ 197.254092][ T114] Quota error (device loop0): v2_write_file_info: Can't write info structure [ 197.254122][ T114] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 197.450933][ T9018] batadv_slave_0: entered promiscuous mode [ 197.498024][ T9017] batadv_slave_0: left promiscuous mode [ 197.604158][ T3302] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 197.609634][ T29] audit: type=1400 audit(1790113135.176:568): avc: denied { write } for pid=3302 comm="syz-executor" name="337" dev="tmpfs" ino=1844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 197.609665][ T29] audit: type=1400 audit(1790113135.176:569): avc: denied { write } for pid=3302 comm="syz-executor" name="337" dev="tmpfs" ino=1844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 197.609728][ T29] audit: type=1400 audit(1790113135.176:570): avc: denied { write } for pid=3302 comm="syz-executor" name="337" dev="tmpfs" ino=1844 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 197.674036][ T9025] syzkaller0: entered promiscuous mode [ 197.674111][ T9025] syzkaller0: entered allmulticast mode [ 198.428514][ T9059] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1837'. [ 198.428538][ T9059] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1837'. [ 198.432020][ T9059] loop6: detected capacity change from 0 to 512 [ 198.470057][ T9059] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.1837: bg 0: block 184: padding at end of block bitmap is not set [ 198.470147][ T9059] loop6: lost filesystem error report for type 5 error -117 [ 198.470683][ T9059] EXT4-fs (loop6): Remounting filesystem read-only [ 198.472543][ T9059] EXT4-fs (loop6): 1 truncate cleaned up [ 198.472975][ T9059] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.509267][ T114] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 198.509296][ T114] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 198.509370][ T114] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 198.555452][ T9059] ext4 filesystem being mounted at /355/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 198.584580][ T9056] syzkaller0: entered promiscuous mode [ 198.584600][ T9056] syzkaller0: entered allmulticast mode [ 198.738310][ T9067] tipc: Enabled bearer , priority 0 [ 198.739661][ T9067] tipc: Resetting bearer [ 198.740775][ T9066] tipc: Disabling bearer [ 199.173669][ T3765] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 199.390297][ T3379] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 199.391041][ T3379] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 199.735255][ T9126] tipc: Enabling of bearer rejected, failed to enable media [ 199.735486][ T9126] syzkaller0: entered promiscuous mode [ 199.735504][ T9126] syzkaller0: entered allmulticast mode [ 199.763578][ T9123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1862'. [ 199.763603][ T9123] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1862'. [ 199.766985][ T9123] loop1: detected capacity change from 0 to 512 [ 199.774797][ T9123] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.1862: bg 0: block 184: padding at end of block bitmap is not set [ 199.774831][ T9123] loop1: lost filesystem error report for type 5 error -117 [ 199.774919][ T9123] EXT4-fs (loop1): Remounting filesystem read-only [ 199.775061][ T9123] EXT4-fs (loop1): 1 truncate cleaned up [ 199.775422][ T9123] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.775481][ T9123] ext4 filesystem being mounted at /416/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.798612][ T3867] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 199.798640][ T3867] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 199.798662][ T3867] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 200.330482][ T9146] syzkaller0: entered promiscuous mode [ 200.330504][ T9146] syzkaller0: entered allmulticast mode [ 200.495209][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.624871][ T9177] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1887'. [ 200.662819][ T9184] bond_slave_0: entered promiscuous mode [ 200.662844][ T9184] bond_slave_0: entered allmulticast mode [ 202.098129][ T9219] loop1: detected capacity change from 0 to 128 [ 202.102295][ T9219] EXT4-fs: test_dummy_encryption option not supported [ 202.259540][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 202.259558][ T29] audit: type=1400 audit(1790113139.826:594): avc: denied { map } for pid=9224 comm="syz.6.1904" path="/dev/zero" dev="devtmpfs" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 202.285272][ T9225] syzkaller0: entered promiscuous mode [ 202.285293][ T9225] syzkaller0: entered allmulticast mode [ 204.476688][ T9261] loop6: detected capacity change from 0 to 128 [ 204.491935][ T9261] EXT4-fs: test_dummy_encryption option not supported [ 204.877017][ T9269] tipc: Enabled bearer , priority 0 [ 204.880175][ T29] audit: type=1400 audit(1790113142.446:595): avc: denied { mounton } for pid=9272 comm="syz.0.1920" path="/354/proc/920/task/921/fail-nth" dev="proc" ino=31349 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 204.880239][ T9273] FAULT_INJECTION: forcing a failure. [ 204.880239][ T9273] name failslab, interval 1, probability 0, space 0, times 0 [ 204.881893][ T9273] CPU: 0 UID: 0 PID: 9273 Comm: syz.0.1920 Not tainted syzkaller #0 PREEMPT(lazy) [ 204.881925][ T9273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 204.881941][ T9273] Call Trace: [ 204.881947][ T9273] [ 204.881954][ T9273] __dump_stack+0x1d/0x30 [ 204.882033][ T9273] dump_stack_lvl+0x95/0xd0 [ 204.882056][ T9273] dump_stack+0x15/0x1b [ 204.882076][ T9273] should_fail_ex+0x262/0x280 [ 204.882101][ T9273] ? security_sk_alloc+0x52/0x120 [ 204.882132][ T9273] should_failslab+0x8c/0xb0 [ 204.882231][ T9273] __kmalloc_noprof+0xd0/0x4d0 [ 204.882260][ T9273] ? security_sk_alloc+0x52/0x120 [ 204.882288][ T9273] ? kmem_cache_alloc_noprof+0x1f5/0x3f0 [ 204.882402][ T9273] security_sk_alloc+0x52/0x120 [ 204.882434][ T9273] sk_prot_alloc+0xc2/0x180 [ 204.882541][ T9273] sk_alloc+0x34/0x3e0 [ 204.882632][ T9273] unix_create1+0xa1/0x400 [ 204.882655][ T9273] unix_create+0xf6/0x130 [ 204.882674][ T9273] __sock_create+0x2e5/0x580 [ 204.882713][ T9273] p9_fd_create_unix+0x154/0x300 [ 204.882741][ T9273] p9_client_create+0x22d/0x760 [ 204.882771][ T9273] ? v9fs_get_tree+0x49/0x5e0 [ 204.882798][ T9273] ? should_failslab+0x8c/0xb0 [ 204.882834][ T9273] v9fs_session_init+0x38/0x510 [ 204.882931][ T9273] v9fs_get_tree+0x5c/0x5e0 [ 204.882956][ T9273] vfs_get_tree+0x57/0x1d0 [ 204.883020][ T9273] do_new_mount+0x288/0x8d0 [ 204.883079][ T9273] path_mount+0x4ad/0xb90 [ 204.883175][ T9273] __se_sys_mount+0x28c/0x2e0 [ 204.883198][ T9273] __x64_sys_mount+0x67/0x80 [ 204.883221][ T9273] x64_sys_call+0xc3b/0x2550 [ 204.883291][ T9273] do_syscall_64+0x112/0x360 [ 204.883316][ T9273] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.883338][ T9273] RIP: 0033:0x7f5b2879e159 [ 204.883363][ T9273] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 204.883384][ T9273] RSP: 002b:00007f5b271f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 204.883482][ T9273] RAX: ffffffffffffffda RBX: 00007f5b28a25fa0 RCX: 00007f5b2879e159 [ 204.883499][ T9273] RDX: 0000200000000680 RSI: 0000200000000640 RDI: 0000200000000600 [ 204.883556][ T9273] RBP: 00007f5b2883506b R08: 0000200000000780 R09: 0000000000000000 [ 204.883578][ T9273] R10: 000000000280c012 R11: 0000000000000246 R12: 0000000000000000 [ 204.883661][ T9273] R13: 00007f5b28a26038 R14: 00007f5b28a25fa0 R15: 00007ffc89a34818 [ 204.883683][ T9273] [ 204.916300][ T9271] syzkaller0: entered promiscuous mode [ 204.916321][ T9271] syzkaller0: entered allmulticast mode [ 205.098921][ T9273] 9pnet_fd: p9_fd_create_unix (9273): problem creating socket [ 205.099037][ T9269] tipc: Resetting bearer [ 205.120221][ T9268] tipc: Disabling bearer [ 205.217129][ T29] audit: type=1400 audit(1790113142.786:596): avc: denied { create } for pid=9278 comm="syz.0.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 205.217163][ T29] audit: type=1400 audit(1790113142.786:597): avc: denied { write } for pid=9278 comm="syz.0.1922" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 205.358310][ T9290] ./dev/sda1: Can't lookup blockdev [ 205.773403][ T9300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 205.773573][ T9300] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 207.029319][ T9328] loop6: detected capacity change from 0 to 128 [ 207.031863][ T9328] EXT4-fs: test_dummy_encryption option not supported [ 207.653442][ T9334] ./dev/sda1: Can't lookup blockdev [ 209.363491][ T9365] ./dev/sda1: Can't lookup blockdev [ 209.644228][ T9374] 9pnet_fd: p9_fd_create_unix (9374): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 210.004131][ T5297] wiimote 0005:057E:0330.0008: unbalanced collection at end of report description [ 210.004292][ T5297] wiimote 0005:057E:0330.0008: HID parse failed [ 210.004331][ T5297] wiimote 0005:057E:0330.0008: probe with driver wiimote failed with error -22 [ 210.030513][ T29] audit: type=1326 audit(1790113147.606:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9394 comm="syz.1.1961" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf88eae159 code=0x0 [ 210.097358][ T29] audit: type=1400 audit(1790113147.666:599): avc: denied { connect } for pid=9405 comm="syz.0.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 210.122549][ T29] audit: type=1400 audit(1790113147.676:600): avc: denied { setopt } for pid=9405 comm="syz.0.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 210.122577][ T29] audit: type=1400 audit(1790113147.676:601): avc: denied { bind } for pid=9405 comm="syz.0.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 210.122599][ T29] audit: type=1400 audit(1790113147.676:602): avc: denied { accept } for pid=9405 comm="syz.0.1965" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 210.205226][ T9412] 9pnet_fd: p9_fd_create_unix (9412): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 210.282159][ T9415] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1969'. [ 210.317609][ T9419] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 210.326282][ T9419] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 210.840271][ T3379] wiimote 0005:057E:0330.0009: unbalanced collection at end of report description [ 210.840395][ T3379] wiimote 0005:057E:0330.0009: HID parse failed [ 210.840429][ T3379] wiimote 0005:057E:0330.0009: probe with driver wiimote failed with error -22 [ 210.915324][ T29] audit: type=1400 audit(1790113148.486:603): avc: denied { write } for pid=9436 comm="syz.5.1978" name="usb_gadget" dev="configfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 210.915444][ T29] audit: type=1400 audit(1790113148.486:604): avc: denied { add_name } for pid=9436 comm="syz.5.1978" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 210.915470][ T29] audit: type=1400 audit(1790113148.486:605): avc: denied { create } for pid=9436 comm="syz.5.1978" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 210.918878][ T29] audit: type=1400 audit(1790113148.486:606): avc: denied { write } for pid=9436 comm="syz.5.1978" name="idVendor" dev="configfs" ino=31764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 210.918944][ T29] audit: type=1400 audit(1790113148.486:607): avc: denied { open } for pid=9436 comm="syz.5.1978" path="/362/config/usb_gadget/g1/idVendor" dev="configfs" ino=31764 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 210.922184][ T9437] UDC core: g1: couldn't find an available UDC or it's busy [ 211.229514][ T9443] ref_ctr_offset mismatch. inode: 0x7f9 offset: 0x0 ref_ctr_offset(old): 0x40000057f0006 ref_ctr_offset(new): 0x1000000210800 [ 212.454236][ T9495] syzkaller0: entered promiscuous mode [ 212.454325][ T9495] syzkaller0: entered allmulticast mode [ 212.494521][ T9500] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2001'. [ 213.265989][ T9542] loop2: detected capacity change from 0 to 512 [ 213.346488][ T9542] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.2012: bg 0: block 184: padding at end of block bitmap is not set [ 213.346517][ T9542] loop2: lost filesystem error report for type 5 error -117 [ 213.346886][ T9542] EXT4-fs (loop2): Remounting filesystem read-only [ 213.347338][ T9542] EXT4-fs (loop2): 1 truncate cleaned up [ 213.348093][ T9542] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.348255][ T9542] ext4 filesystem being mounted at /403/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 213.369069][ T8656] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 213.369112][ T8656] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 213.369189][ T8656] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 213.741384][ T9574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 213.741622][ T9574] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 214.236653][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 214.639110][ T9594] tipc: Enabling of bearer rejected, failed to enable media [ 214.762779][ T9605] ./dev/sda1: Can't lookup blockdev [ 215.049546][ T9616] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2042'. [ 215.185700][ T29] kauditd_printk_skb: 26 callbacks suppressed [ 215.185720][ T29] audit: type=1326 audit(1790113152.616:628): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9614 comm="syz.5.2043" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d1ae6e159 code=0x0 [ 215.706790][ T29] audit: type=1400 audit(1790113153.276:629): avc: denied { append } for pid=9627 comm="syz.6.2047" name="uprobe_events" dev="tracefs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 215.706880][ T29] audit: type=1400 audit(1790113153.276:630): avc: denied { open } for pid=9627 comm="syz.6.2047" path="/406/tracing/uprobe_events" dev="tracefs" ino=1062 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 215.706906][ T29] audit: type=1400 audit(1790113153.276:631): avc: denied { write } for pid=9627 comm="syz.6.2047" name="enable" dev="tracefs" ino=19680823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 215.794139][ T29] audit: type=1400 audit(1790113153.366:632): avc: denied { write } for pid=9631 comm="syz.0.2048" name="core" dev="configfs" ino=2061 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 215.795044][ T29] audit: type=1400 audit(1790113153.366:633): avc: denied { write } for pid=9631 comm="syz.0.2048" name="rd_mcp_0" dev="configfs" ino=32853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 215.803221][ T9632] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 215.826137][ T29] audit: type=1400 audit(1790113153.376:634): avc: denied { mounton } for pid=9631 comm="syz.0.2048" path="/381/config" dev="configfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 216.233613][ T9647] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2054'. [ 216.521852][ T9654] tipc: Enabling of bearer rejected, failed to enable media [ 216.967376][ T9683] ./dev/sda1: Can't lookup blockdev [ 217.555361][ T9692] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2065'. [ 218.023097][ T9712] tipc: Enabling of bearer rejected, failed to enable media [ 218.037153][ T9714] syzkaller0: entered promiscuous mode [ 218.037243][ T9714] syzkaller0: entered allmulticast mode [ 218.159768][ T9720] No source specified [ 218.406683][ T29] audit: type=1326 audit(1790113155.976:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9725 comm="syz.5.2076" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d1ae6e159 code=0x0 [ 218.911170][ T29] audit: type=1400 audit(1790113156.466:636): avc: denied { write } for pid=9729 comm="syz.2.2078" path="socket:[32359]" dev="sockfs" ino=32359 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 219.167534][ T9746] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2082'. [ 219.279765][ T29] audit: type=1400 audit(1790113156.846:637): avc: denied { ioctl } for pid=9754 comm="syz.5.2087" path="socket:[32984]" dev="sockfs" ino=32984 ioctlcmd=0x7437 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 219.370203][ T9761] No source specified [ 219.623777][ T9756] Driver unsupported XDP return value 0 on prog (id 19) dev N/A, expect packet loss! [ 220.369675][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 220.369689][ T29] audit: type=1326 audit(1790113157.936:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9785 comm="syz.2.2097" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c03f7e159 code=0x0 [ 220.861043][ T9800] No source specified [ 221.138743][ T9809] tipc: Enabling of bearer rejected, failed to enable media [ 221.541526][ T9833] se_dev->se_dev_ptr already set for storage object [ 221.605129][ T9835] syzkaller0: entered promiscuous mode [ 221.605180][ T9835] syzkaller0: entered allmulticast mode [ 221.666881][ T29] audit: type=1326 audit(1790113159.236:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9843 comm="syz.0.2115" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b2879e159 code=0x0 [ 221.855685][ T9851] syzkaller0: entered promiscuous mode [ 221.855706][ T9851] syzkaller0: entered allmulticast mode [ 222.821938][ T9879] syzkaller0: entered promiscuous mode [ 222.821961][ T9879] syzkaller0: entered allmulticast mode [ 223.246412][ T29] audit: type=1326 audit(1790113160.816:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9891 comm="syz.0.2134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b2879e159 code=0x0 [ 223.359320][ T9896] tipc: Enabled bearer , priority 0 [ 223.363254][ T9896] tipc: Resetting bearer [ 223.377625][ T9895] tipc: Disabling bearer [ 223.542232][ T9902] se_dev->se_dev_ptr already set for storage object [ 223.861538][ T9925] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.861625][ T9925] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 224.629431][ T9954] syzkaller0: entered promiscuous mode [ 224.629453][ T9954] syzkaller0: entered allmulticast mode [ 224.753573][ T29] audit: type=1326 audit(1790113162.326:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9960 comm="syz.2.2162" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c03f7e159 code=0x0 [ 226.238935][ T9996] se_dev->se_dev_ptr already set for storage object [ 227.711682][ T29] audit: type=1326 audit(1790113165.276:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10020 comm="syz.1.2180" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf88eae159 code=0x0 [ 228.223818][T10032] se_dev->se_dev_ptr already set for storage object [ 228.410101][ T29] audit: type=1400 audit(1790113165.946:644): avc: denied { mount } for pid=10035 comm="syz.2.2185" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 228.435426][ T29] audit: type=1400 audit(1790113165.986:645): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 229.415056][T10065] se_dev->se_dev_ptr already set for storage object [ 229.421741][T10063] ./dev/sda1: Can't lookup blockdev [ 229.454513][T10069] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2196'. [ 229.636691][ T29] audit: type=1400 audit(1790113167.206:646): avc: denied { getopt } for pid=10076 comm="syz.1.2199" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 229.824055][T10080] tipc: Enabled bearer , priority 0 [ 229.831631][T10080] syzkaller0: entered promiscuous mode [ 229.831650][T10080] syzkaller0: entered allmulticast mode [ 229.945713][T10080] tipc: Resetting bearer [ 229.952484][T10078] tipc: Resetting bearer [ 229.975925][T10078] tipc: Disabling bearer [ 229.993662][ T29] audit: type=1326 audit(1790113167.566:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10081 comm="syz.1.2201" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fdf88eae159 code=0x0 [ 230.179946][T10096] se_dev->se_dev_ptr already set for storage object [ 230.216610][T10098] ./dev/sda1: Can't lookup blockdev [ 231.283095][T10111] loop2: detected capacity change from 0 to 512 [ 231.283781][ T29] audit: type=1400 audit(1790113168.856:648): avc: denied { write } for pid=10104 comm="syz.2.2210" name="451" dev="tmpfs" ino=2448 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 231.385013][T10111] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.2210: bg 0: block 184: padding at end of block bitmap is not set [ 231.385046][T10111] loop2: lost filesystem error report for type 5 error -117 [ 231.386134][T10111] EXT4-fs (loop2): Remounting filesystem read-only [ 231.386369][T10111] EXT4-fs (loop2): 1 truncate cleaned up [ 231.388255][T10111] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 231.388316][T10111] ext4 filesystem being mounted at /451/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 231.466111][T10120] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2213'. [ 231.483025][T10122] tipc: Enabled bearer , priority 0 [ 231.483346][T10122] syzkaller0: entered promiscuous mode [ 231.483364][T10122] syzkaller0: entered allmulticast mode [ 231.486254][T10122] tipc: Resetting bearer [ 231.489916][T10121] tipc: Resetting bearer [ 231.492468][T10121] tipc: Disabling bearer [ 231.497691][ T71] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 231.497777][ T71] Quota error (device loop2): write_blk: dquota write failed [ 231.497790][ T71] Quota error (device loop2): remove_free_dqentry: Can't write block (5) with free entries [ 231.497808][ T71] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 231.497832][ T71] Quota error (device loop2): write_blk: dquota write failed [ 231.497845][ T71] Quota error (device loop2): free_dqentry: Can't move quota data block (5) to free list [ 231.497935][ T71] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 232.040109][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.066250][T10129] ./dev/sda1: Can't lookup blockdev [ 232.857366][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 232.857412][ T29] audit: type=1326 audit(1790113170.426:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10148 comm="syz.2.2225" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c03f7e159 code=0x0 [ 234.001878][T10162] loop5: detected capacity change from 0 to 512 [ 234.026739][ T29] audit: type=1400 audit(1790113171.566:656): avc: denied { write } for pid=10158 comm="syz.5.2227" name="417" dev="tmpfs" ino=2247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 234.096718][T10162] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.2227: bg 0: block 184: padding at end of block bitmap is not set [ 234.096758][T10162] loop5: lost filesystem error report for type 5 error -117 [ 234.097107][T10162] EXT4-fs (loop5): Remounting filesystem read-only [ 234.097596][T10162] EXT4-fs (loop5): 1 truncate cleaned up [ 234.098795][T10162] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 234.098919][T10162] ext4 filesystem being mounted at /417/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.126121][ T366] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 234.126157][ T366] Quota error (device loop5): write_blk: dquota write failed [ 234.126169][ T366] Quota error (device loop5): remove_free_dqentry: Can't write block (5) with free entries [ 234.139731][ T366] EXT4-fs (loop5): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 234.139755][ T366] Quota error (device loop5): write_blk: dquota write failed [ 234.139767][ T366] Quota error (device loop5): free_dqentry: Can't move quota data block (5) to free list [ 234.139783][ T366] EXT4-fs (loop5): Quota write (off=8, len=24) cancelled because transaction is not started [ 234.139802][ T366] Quota error (device loop5): v2_write_file_info: Can't write info structure [ 234.139842][ T366] Quota error (device loop5): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 234.337354][ T3672] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 234.363012][ T29] audit: type=1400 audit(1790113171.926:657): avc: denied { write } for pid=3672 comm="syz-executor" name="417" dev="tmpfs" ino=2247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 234.363064][ T29] audit: type=1400 audit(1790113171.926:658): avc: denied { write } for pid=3672 comm="syz-executor" name="417" dev="tmpfs" ino=2247 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 234.403838][T10169] tipc: Enabled bearer , priority 0 [ 234.411130][T10169] syzkaller0: entered promiscuous mode [ 234.411170][T10169] syzkaller0: entered allmulticast mode [ 234.421225][T10169] tipc: Resetting bearer [ 234.430407][T10168] tipc: Resetting bearer [ 234.432934][T10168] tipc: Disabling bearer [ 234.521659][T10179] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2235'. [ 235.662259][T10204] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2245'. [ 235.707555][T10207] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2246'. [ 236.818279][T10233] syzkaller0: entered promiscuous mode [ 236.818472][T10233] syzkaller0: entered allmulticast mode [ 236.827461][T10233] tipc: Enabled bearer , priority 0 [ 236.863271][T10233] tipc: Resetting bearer [ 236.867512][T10231] tipc: Resetting bearer [ 236.870414][T10231] tipc: Disabling bearer [ 237.265526][T10240] syzkaller0: entered promiscuous mode [ 237.265567][T10240] syzkaller0: entered allmulticast mode [ 237.591585][T10253] loop6: detected capacity change from 0 to 512 [ 237.696730][T10253] EXT4-fs error (device loop6): ext4_validate_block_bitmap:445: comm syz.6.2259: bg 0: block 184: padding at end of block bitmap is not set [ 237.696760][T10253] loop6: lost filesystem error report for type 5 error -117 [ 237.697091][T10253] EXT4-fs (loop6): Remounting filesystem read-only [ 237.697617][T10253] EXT4-fs (loop6): 1 truncate cleaned up [ 237.698708][T10253] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 237.698838][T10253] ext4 filesystem being mounted at /450/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 237.763717][ T3835] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 237.763739][ T3835] EXT4-fs (loop6): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 237.764271][ T3835] EXT4-fs (loop6): Quota write (off=8, len=24) cancelled because transaction is not started [ 238.161071][T10265] tipc: Enabled bearer , priority 0 [ 238.162021][T10265] syzkaller0: entered promiscuous mode [ 238.162081][T10265] syzkaller0: entered allmulticast mode [ 238.185235][T10265] tipc: Resetting bearer [ 238.200067][T10264] tipc: Resetting bearer [ 238.214850][T10264] tipc: Disabling bearer [ 238.263441][ T3765] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 238.271060][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 238.271075][ T29] audit: type=1400 audit(1790113175.836:668): avc: denied { write } for pid=3765 comm="syz-executor" name="450" dev="tmpfs" ino=2429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 238.271128][ T29] audit: type=1400 audit(1790113175.836:669): avc: denied { write } for pid=3765 comm="syz-executor" name="450" dev="tmpfs" ino=2429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 238.271158][ T29] audit: type=1400 audit(1790113175.836:670): avc: denied { write } for pid=3765 comm="syz-executor" name="450" dev="tmpfs" ino=2429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 238.271187][ T29] audit: type=1400 audit(1790113175.836:671): avc: denied { write } for pid=3765 comm="syz-executor" name="450" dev="tmpfs" ino=2429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 238.271294][ T29] audit: type=1400 audit(1790113175.836:672): avc: denied { write } for pid=3765 comm="syz-executor" name="450" dev="tmpfs" ino=2429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 238.343501][T10271] syzkaller0: entered promiscuous mode [ 238.343520][T10271] syzkaller0: entered allmulticast mode [ 238.352462][T10271] tipc: Enabled bearer , priority 0 [ 238.385586][T10271] tipc: Resetting bearer [ 238.397808][T10270] tipc: Resetting bearer [ 238.430797][T10270] tipc: Disabling bearer [ 238.643299][ T5312] wiimote 0005:057E:0330.000A: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 238.643432][ T5312] wiimote 0005:057E:0330.000A: New device registered [ 238.934295][T10284] wiimote 0005:057E:0330.000A: Device removed [ 239.226927][ T29] audit: type=1326 audit(1790113176.796:673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10304 comm="syz.0.2279" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b2879e159 code=0x0 [ 239.402017][T10308] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2278'. [ 239.402082][T10308] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2278'. [ 239.410097][T10308] loop1: detected capacity change from 0 to 512 [ 239.507527][ T29] audit: type=1400 audit(1790113176.976:674): avc: denied { write } for pid=10302 comm="syz.1.2278" name="489" dev="tmpfs" ino=2634 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 239.606864][T10308] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.2278: bg 0: block 184: padding at end of block bitmap is not set [ 239.606905][T10308] loop1: lost filesystem error report for type 5 error -117 [ 239.607216][T10308] EXT4-fs (loop1): Remounting filesystem read-only [ 239.607479][T10308] EXT4-fs (loop1): 1 truncate cleaned up [ 239.608416][T10308] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 239.608529][T10308] ext4 filesystem being mounted at /489/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 239.627814][ T366] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 239.627845][ T366] Quota error (device loop1): write_blk: dquota write failed [ 239.627906][ T366] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 239.627940][ T366] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 239.627968][ T366] Quota error (device loop1): write_blk: dquota write failed [ 239.628007][ T366] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 239.686926][ T5312] wiimote 0005:057E:0330.000A: detected device: Nintendo Wii Remote Plus (Gen 2) [ 239.754824][ T5312] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.000A/input/input13 [ 239.756803][ T5312] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.000A/input/input14 [ 239.759687][ T5312] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.000A/input/input12 [ 239.825802][T10318] netlink: 'syz.5.2283': attribute type 8 has an invalid length. [ 239.866778][T10324] FAULT_INJECTION: forcing a failure. [ 239.866778][T10324] name failslab, interval 1, probability 0, space 0, times 0 [ 239.866806][T10324] CPU: 1 UID: 0 PID: 10324 Comm: syz.5.2286 Not tainted syzkaller #0 PREEMPT(lazy) [ 239.866829][T10324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 239.866841][T10324] Call Trace: [ 239.866849][T10324] [ 239.866861][T10324] __dump_stack+0x1d/0x30 [ 239.866958][T10324] dump_stack_lvl+0x95/0xd0 [ 239.866984][T10324] dump_stack+0x15/0x1b [ 239.867008][T10324] should_fail_ex+0x262/0x280 [ 239.867090][T10324] ? security_inode_alloc+0x37/0x100 [ 239.867222][T10324] should_failslab+0x8c/0xb0 [ 239.867253][T10324] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 239.867285][T10324] ? security_inode_alloc+0x37/0x100 [ 239.867379][T10324] security_inode_alloc+0x37/0x100 [ 239.867478][T10324] inode_init_always_gfp+0x495/0x4e0 [ 239.867494][T10324] alloc_inode+0x58/0x170 [ 239.867582][T10324] create_pipe_files+0x3e/0x440 [ 239.867602][T10324] __do_pipe_flags+0x44/0x140 [ 239.867621][T10324] do_pipe2+0x61/0x140 [ 239.867714][T10324] ? switch_fpu_return+0xe7/0x1b0 [ 239.867728][T10324] __x64_sys_pipe+0x21/0x30 [ 239.867746][T10324] x64_sys_call+0x24fd/0x2550 [ 239.867785][T10324] do_syscall_64+0x112/0x360 [ 239.867799][T10324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.867850][T10324] RIP: 0033:0x7f3d1ae6e159 [ 239.867861][T10324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 239.867872][T10324] RSP: 002b:00007f3d198c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000016 [ 239.867891][T10324] RAX: ffffffffffffffda RBX: 00007f3d1b0f5fa0 RCX: 00007f3d1ae6e159 [ 239.867975][T10324] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 239.867986][T10324] RBP: 00007f3d1af0506b R08: 0000000000000000 R09: 0000000000000000 [ 239.867994][T10324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.868001][T10324] R13: 00007f3d1b0f6038 R14: 00007f3d1b0f5fa0 R15: 00007fff3af907e8 [ 239.868012][T10324] [ 240.115979][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 240.272847][T10344] tc action pedit 'at' offset 5 out of bounds [ 240.272864][T10344] tc action pedit 'at' offset 5 out of bounds [ 240.272874][T10344] tc action pedit 'at' offset 5 out of bounds [ 240.272883][T10344] tc action pedit 'at' offset 5 out of bounds [ 240.272902][T10344] tc action pedit 'at' offset 5 out of bounds [ 240.272915][T10344] tc action pedit 'at' offset 5 out of bounds [ 240.272926][T10344] tc action pedit 'at' offset 5 out of bounds [ 240.272935][T10344] tc action pedit 'at' offset 5 out of bounds [ 240.272969][T10344] tc action pedit 'at' offset 5 out of bounds [ 240.272978][T10344] tc action pedit 'at' offset 5 out of bounds [ 240.272994][T10344] 0: reclassify loop, rule prio 0, protocol 800 [ 240.349485][T10346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2295'. [ 241.188548][T10371] syzkaller0: entered promiscuous mode [ 241.188598][T10371] syzkaller0: entered allmulticast mode [ 241.198639][T10371] tipc: Enabled bearer , priority 0 [ 241.216972][T10371] tipc: Resetting bearer [ 241.221468][T10369] tipc: Resetting bearer [ 241.349760][T10369] tipc: Disabling bearer [ 244.118418][T10433] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2323'. [ 244.270277][T10437] syzkaller0: entered promiscuous mode [ 244.270301][T10437] syzkaller0: entered allmulticast mode [ 244.273362][T10439] 9pnet_fd: p9_fd_create_unix (10439): problem connecting socket: ./proc/thread-self/fail-nth: -111 [ 244.311660][T10437] tipc: Enabled bearer , priority 0 [ 244.336381][T10437] tipc: Resetting bearer [ 244.350606][T10436] tipc: Resetting bearer [ 244.352522][T10436] tipc: Disabling bearer [ 244.547078][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 244.547093][ T29] audit: type=1326 audit(1790113182.116:684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10449 comm="syz.6.2330" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c342be159 code=0x0 [ 245.438743][T10473] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2337'. [ 245.517689][T10477] syzkaller0: entered promiscuous mode [ 245.517707][T10477] syzkaller0: entered allmulticast mode [ 245.519627][T10477] tipc: Enabled bearer , priority 0 [ 245.526395][T10477] tipc: Resetting bearer [ 245.527920][T10476] tipc: Resetting bearer [ 246.038324][T10476] tipc: Disabling bearer [ 246.458732][ T29] audit: type=1326 audit(1790113184.026:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10497 comm="syz.0.2347" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b2879e159 code=0x0 [ 246.544013][T10505] tipc: Enabled bearer , priority 0 [ 246.544295][T10505] syzkaller0: entered promiscuous mode [ 246.544312][T10505] syzkaller0: entered allmulticast mode [ 246.584380][T10505] tipc: Resetting bearer [ 246.592313][T10504] tipc: Resetting bearer [ 246.605733][T10504] tipc: Disabling bearer [ 247.710227][T10519] tipc: Enabled bearer , priority 0 [ 247.721827][T10519] tipc: Resetting bearer [ 247.860452][T10518] tipc: Disabling bearer [ 249.135642][ T29] audit: type=1326 audit(1790113186.706:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10549 comm="syz.6.2364" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c342be159 code=0x0 [ 249.179677][T10548] tipc: Enabled bearer , priority 0 [ 249.179910][T10548] syzkaller0: entered promiscuous mode [ 249.179929][T10548] syzkaller0: entered allmulticast mode [ 249.188806][T10548] tipc: Resetting bearer [ 249.201369][T10546] tipc: Resetting bearer [ 249.208476][T10546] tipc: Disabling bearer [ 249.223936][ T5309] wiimote 0005:057E:0330.000B: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 249.224006][ T5309] wiimote 0005:057E:0330.000B: New device registered [ 249.225709][T10557] wiimote 0005:057E:0330.000B: Device removed [ 249.381637][ T8338] IPVS: starting estimator thread 0... [ 249.382269][ T8338] IPVS: stopping estimator thread 0... [ 249.466349][T10560] fido_id[10560]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 249.504793][ T8338] IPVS: starting estimator thread 0... [ 250.156094][T10569] IPVS: using max 2448 ests per chain, 122400 per kthread [ 250.213676][T10588] UDC core: g1: couldn't find an available UDC or it's busy [ 250.290724][T10597] tipc: Enabled bearer , priority 0 [ 250.291434][T10597] syzkaller0: entered promiscuous mode [ 250.291449][T10597] syzkaller0: entered allmulticast mode [ 250.315205][T10597] tipc: Resetting bearer [ 250.320415][T10596] tipc: Resetting bearer [ 250.339407][T10596] tipc: Disabling bearer [ 251.170383][ T5309] wiimote 0005:057E:0330.000B: detected device: Nintendo Wii Remote Plus (Gen 2) [ 251.173462][ T5309] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.000B/input/input16 [ 251.187643][ T5309] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.000B/input/input17 [ 251.189625][ T5309] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.000B/input/input15 [ 251.375012][T10631] UDC core: g1: couldn't find an available UDC or it's busy [ 251.896590][T10643] UDC core: g1: couldn't find an available UDC or it's busy [ 252.114316][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2401'. [ 252.392854][T10661] syzkaller0: entered promiscuous mode [ 252.392876][T10661] syzkaller0: entered allmulticast mode [ 252.432619][T10663] tipc: Enabled bearer , priority 0 [ 252.432834][T10663] syzkaller0: entered promiscuous mode [ 252.432852][T10663] syzkaller0: entered allmulticast mode [ 252.442044][T10663] tipc: Resetting bearer [ 252.447636][T10662] tipc: Resetting bearer [ 252.458925][T10662] tipc: Disabling bearer [ 252.548929][T10667] UDC core: g1: couldn't find an available UDC or it's busy [ 253.020894][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2413'. [ 253.020918][T10682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2413'. [ 253.021001][T10682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2413'. [ 253.024803][T10682] loop1: detected capacity change from 0 to 512 [ 253.025457][ T29] audit: type=1400 audit(1790113190.596:687): avc: denied { write } for pid=10677 comm="syz.1.2413" name="525" dev="tmpfs" ino=2823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 253.103899][T10682] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.2413: bg 0: block 184: padding at end of block bitmap is not set [ 253.104005][T10682] loop1: lost filesystem error report for type 5 error -117 [ 253.104562][T10682] EXT4-fs (loop1): Remounting filesystem read-only [ 253.105107][T10682] EXT4-fs (loop1): 1 truncate cleaned up [ 253.105965][T10682] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 253.106134][T10682] ext4 filesystem being mounted at /525/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.339913][ T3867] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 253.340016][ T3867] Quota error (device loop1): write_blk: dquota write failed [ 253.340071][ T3867] Quota error (device loop1): remove_free_dqentry: Can't write block (5) with free entries [ 253.340087][ T3867] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 253.340106][ T3867] Quota error (device loop1): write_blk: dquota write failed [ 253.340120][ T3867] Quota error (device loop1): free_dqentry: Can't move quota data block (5) to free list [ 253.340198][ T3867] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 253.340270][ T3867] Quota error (device loop1): v2_write_file_info: Can't write info structure [ 253.340317][ T3867] Quota error (device loop1): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 253.554358][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 253.617566][ T29] audit: type=1400 audit(1790113191.186:688): avc: denied { write } for pid=3297 comm="syz-executor" name="525" dev="tmpfs" ino=2823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 253.617695][ T29] audit: type=1400 audit(1790113191.186:689): avc: denied { write } for pid=3297 comm="syz-executor" name="525" dev="tmpfs" ino=2823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 253.617851][ T29] audit: type=1400 audit(1790113191.186:690): avc: denied { write } for pid=3297 comm="syz-executor" name="525" dev="tmpfs" ino=2823 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:systemd_logger_exec_t:s0" [ 253.656205][T10703] tipc: Enabled bearer , priority 0 [ 253.656381][T10703] syzkaller0: entered promiscuous mode [ 253.656421][T10703] syzkaller0: entered allmulticast mode [ 253.738214][T10703] tipc: Resetting bearer [ 253.788019][T10702] tipc: Resetting bearer [ 253.830263][T10702] tipc: Disabling bearer [ 254.252744][T10621] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.109818][T10743] bonding: bond1 is being created... [ 255.120569][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2429'. [ 255.120634][T10744] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2429'. [ 255.120721][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2429'. [ 255.128541][T10744] loop1: detected capacity change from 0 to 512 [ 255.228136][T10744] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.2429: bg 0: block 184: padding at end of block bitmap is not set [ 255.228167][T10744] loop1: lost filesystem error report for type 5 error -117 [ 255.228626][T10744] EXT4-fs (loop1): Remounting filesystem read-only [ 255.228916][T10744] EXT4-fs (loop1): 1 truncate cleaned up [ 255.229481][T10744] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 255.229597][T10744] ext4 filesystem being mounted at /530/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.248360][ T8658] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 255.248573][ T8658] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 255.248593][ T8658] EXT4-fs (loop1): Quota write (off=8, len=24) cancelled because transaction is not started [ 255.455790][T10743] bond0: option slaves: invalid value (-bond_slave_0) [ 255.456994][T10743] bond0: option slaves: invalid value (-bond_slave_1) [ 255.501210][T10743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.803803][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 256.640482][T10788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 256.641103][T10788] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 256.790905][T10790] UDC core: g1: couldn't find an available UDC or it's busy [ 256.803134][T10795] se_dev->se_dev_ptr already set for storage object [ 257.310258][T10829] se_dev->se_dev_ptr already set for storage object [ 257.374640][T10831] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2458'. [ 258.386085][T10856] UDC core: g1: couldn't find an available UDC or it's busy [ 258.408878][T10860] se_dev->se_dev_ptr already set for storage object [ 258.427375][T10858] tipc: Enabled bearer , priority 0 [ 258.427592][T10858] syzkaller0: entered promiscuous mode [ 258.427627][T10858] syzkaller0: entered allmulticast mode [ 258.456509][T10858] tipc: Resetting bearer [ 258.466174][T10857] tipc: Resetting bearer [ 258.473516][T10857] tipc: Disabling bearer [ 258.493570][T10865] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2474'. [ 259.621398][ T29] kauditd_printk_skb: 17 callbacks suppressed [ 259.621416][ T29] audit: type=1400 audit(1790113197.186:702): avc: denied { listen } for pid=10900 comm="syz.5.2488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 260.023637][T10926] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2494'. [ 260.525417][T10939] se_dev->se_dev_ptr already set for storage object [ 261.765759][T10996] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2514'. [ 262.130147][T11009] X25: received unknown 00 with LCI 000 [ 262.392250][ T3867] IPVS: starting estimator thread 0... [ 262.603549][T11018] IPVS: using max 2592 ests per chain, 129600 per kthread [ 262.670540][ T29] audit: type=1400 audit(1790113200.236:703): avc: denied { connect } for pid=11025 comm="syz.1.2524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 262.671261][ T29] audit: type=1400 audit(1790113200.236:704): avc: denied { shutdown } for pid=11025 comm="syz.1.2524" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 263.192542][T11039] X25: received unknown 00 with LCI 000 [ 263.416077][T11043] syzkaller0: entered promiscuous mode [ 263.416100][T11043] syzkaller0: entered allmulticast mode [ 263.517512][T11051] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2530'. [ 264.604407][ T29] audit: type=1326 audit(1790113202.176:705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11076 comm="syz.0.2538" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b2879e159 code=0x0 [ 264.666673][T11084] X25: received unknown 00 with LCI 000 [ 265.326487][T11099] syzkaller0: entered promiscuous mode [ 265.326565][T11099] syzkaller0: entered allmulticast mode [ 266.232599][T11120] X25: received unknown 00 with LCI 000 [ 266.272846][T11126] bonding: bond1 is being created... [ 266.292722][T11126] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 266.357550][T11148] bond0: (slave bond_slave_0): Releasing backup interface [ 266.372931][T11148] bond0: (slave bond_slave_1): Releasing backup interface [ 266.441471][T11126] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.504298][T11155] syzkaller0: entered promiscuous mode [ 266.504334][T11155] syzkaller0: entered allmulticast mode [ 267.178012][T11158] se_dev->se_dev_ptr already set for storage object [ 269.239531][T11188] X25: received unknown 00 with LCI 000 [ 269.251790][T11133] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 269.301434][T11193] 9p: Bad value for 'trans' [ 269.323466][T11194] se_dev->se_dev_ptr already set for storage object [ 270.800491][T11230] 9p: Bad value for 'trans' [ 270.814442][T11231] syzkaller0: entered promiscuous mode [ 270.814461][T11231] syzkaller0: entered allmulticast mode [ 270.834569][T11229] X25: received unknown 00 with LCI 000 [ 270.878515][T11241] se_dev->se_dev_ptr already set for storage object [ 270.993603][ T29] audit: type=1400 audit(1790113208.506:706): avc: denied { unmount } for pid=3304 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 271.066407][T11257] bonding: bond1 is being created... [ 271.066638][T11257] bonding: bond1 already exists [ 271.070263][T11257] bond1: (slave dummy0): Enslaving as a backup interface with an up link [ 271.146878][T11260] bond0: option slaves: invalid value (-bond_slave_0) [ 271.146965][T11260] bond0: option slaves: invalid value (-bond_slave_1) [ 271.151137][T11260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 271.551061][T11265] 9p: Bad value for 'trans' [ 272.409591][T11273] se_dev->se_dev_ptr already set for storage object [ 273.090375][T11291] 9p: Could not find request transport: un [ 273.188636][T11296] syzkaller0: entered promiscuous mode [ 273.188654][T11296] syzkaller0: entered allmulticast mode [ 273.377988][ T114] IPVS: stopping estimator thread 0... [ 273.378929][ T114] IPVS: starting estimator thread 0... [ 273.390131][T11299] syzkaller0: entered promiscuous mode [ 273.390153][T11299] syzkaller0: entered allmulticast mode [ 273.405582][T11303] se_dev->se_dev_ptr already set for storage object [ 273.484432][T11306] IPVS: using max 2640 ests per chain, 132000 per kthread [ 273.774655][T11323] syzkaller0: entered promiscuous mode [ 273.774680][T11323] syzkaller0: entered allmulticast mode [ 274.903911][T11338] netlink: 60 bytes leftover after parsing attributes in process `syz.6.2620'. [ 274.905846][ T8656] IPVS: stopping estimator thread 0... [ 274.907581][ T8656] IPVS: starting estimator thread 0... [ 275.014444][T11339] IPVS: using max 2592 ests per chain, 129600 per kthread [ 275.059301][ T29] audit: type=1326 audit(1790113212.626:707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11342 comm="syz.6.2623" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c342be159 code=0x0 [ 275.441672][ T3867] IPVS: stopping estimator thread 0... [ 275.442017][ T3867] IPVS: starting estimator thread 0... [ 275.534474][T11373] IPVS: using max 4368 ests per chain, 218400 per kthread [ 276.929931][T11405] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2644'. [ 277.387542][ T29] audit: type=1326 audit(1790113214.956:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11418 comm="syz.0.2650" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5b2879e159 code=0x0 [ 278.627866][ T29] audit: type=1400 audit(1790113216.196:709): avc: denied { create } for pid=11438 comm="syz.1.2657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 278.636086][ T29] audit: type=1400 audit(1790113216.206:710): avc: denied { bind } for pid=11438 comm="syz.1.2657" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 278.691116][ T29] audit: type=1400 audit(1790113216.256:711): avc: denied { write } for pid=11438 comm="syz.1.2657" path="socket:[37739]" dev="sockfs" ino=37739 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 279.191142][T11447] syzkaller0: entered promiscuous mode [ 279.191166][T11447] syzkaller0: entered allmulticast mode [ 279.552682][T11456] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 279.552815][T11456] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 279.615309][ T8656] IPVS: stopping estimator thread 0... [ 279.616650][ T8656] IPVS: starting estimator thread 0... [ 279.662891][ T29] audit: type=1326 audit(1790113217.226:712): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11462 comm="syz.6.2666" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c342be159 code=0x0 [ 279.743425][T11460] IPVS: using max 2640 ests per chain, 132000 per kthread [ 279.844475][T11472] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2668'. [ 282.082985][ T29] audit: type=1326 audit(1790113219.646:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11518 comm="syz.5.2685" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d1ae6e159 code=0x0 [ 283.132229][T11544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.132298][T11544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 283.245994][T11553] syzkaller0: entered promiscuous mode [ 283.246015][T11553] syzkaller0: entered allmulticast mode [ 283.798905][ T29] audit: type=1326 audit(1790113221.366:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11575 comm="syz.2.2705" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c03f7e159 code=0x0 [ 284.980051][T11613] syzkaller0: entered promiscuous mode [ 284.980074][T11613] syzkaller0: entered allmulticast mode [ 285.728624][ T29] audit: type=1326 audit(1790113223.296:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11626 comm="syz.2.2723" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c03f7e159 code=0x0 [ 286.046205][T11649] X25: received unknown 00 with LCI 000 [ 286.657080][T11680] X25: received unknown 00 with LCI 000 [ 286.802599][ T29] audit: type=1400 audit(1790113224.366:716): avc: denied { unmount } for pid=3765 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 286.866043][T11692] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.866178][T11692] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.909882][T11692] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.913705][T11692] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.983052][ T8656] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.983166][ T8656] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.983277][ T8656] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.983329][ T8656] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.072174][ T29] audit: type=1326 audit(1790113224.636:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11698 comm="syz.5.2751" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d1ae6e159 code=0x0 [ 287.167175][ T29] audit: type=1400 audit(1790113224.736:718): avc: denied { connect } for pid=11696 comm="syz.6.2750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 287.168235][ T29] audit: type=1400 audit(1790113224.736:719): avc: denied { read } for pid=11696 comm="syz.6.2750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 287.409394][T11712] X25: received unknown 00 with LCI 000 [ 287.422575][T11710] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2753'. [ 287.620633][ T29] audit: type=1326 audit(1790113225.186:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11719 comm="syz.2.2758" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c03f7e159 code=0x0 [ 288.245437][T11707] syz_tun (unregistering): left allmulticast mode [ 288.810594][T11759] X25: received unknown 00 with LCI 000 [ 288.936014][T11764] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 288.998134][T11738] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.998169][T11738] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.998293][T11738] bridge_slave_0: entered allmulticast mode [ 289.000169][T11738] bridge_slave_0: entered promiscuous mode [ 289.001829][T11738] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.003129][T11738] bridge0: port 2(bridge_slave_1) entered disabled state [ 289.003364][T11738] bridge_slave_1: entered allmulticast mode [ 289.003752][T11738] bridge_slave_1: entered promiscuous mode [ 289.025313][T11738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.027609][T11738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.047825][T11738] team0: Port device team_slave_0 added [ 289.048579][T11738] team0: Port device team_slave_1 added [ 289.074315][T11738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.074329][T11738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.074366][T11738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.075558][T11738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.075570][T11738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.075599][T11738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.178862][T11738] hsr_slave_0: entered promiscuous mode [ 289.180471][T11738] hsr_slave_1: entered promiscuous mode [ 289.180795][T11738] debugfs: 'hsr0' already exists in 'hsr' [ 289.180809][T11738] Cannot create hsr debugfs directory [ 289.245576][T11776] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 289.245806][ T29] audit: type=1326 audit(1790113226.816:721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11773 comm="syz.2.2770" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c03f7e159 code=0x0 [ 289.309936][T11738] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.380589][T11738] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.460162][T11738] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.498863][ T29] audit: type=1400 audit(1790113227.066:722): avc: denied { read } for pid=3022 comm="dhcpcd" name="n46" dev="tmpfs" ino=12351 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 289.498920][ T29] audit: type=1400 audit(1790113227.066:723): avc: denied { open } for pid=3022 comm="dhcpcd" path="/run/udev/data/n46" dev="tmpfs" ino=12351 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 289.498979][ T29] audit: type=1400 audit(1790113227.066:724): avc: denied { getattr } for pid=3022 comm="dhcpcd" path="/run/udev/data/n46" dev="tmpfs" ino=12351 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 289.508315][T11790] X25: received unknown 00 with LCI 000 [ 289.591316][T11738] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 289.810779][ T29] audit: type=1400 audit(1790113227.376:725): avc: denied { mount } for pid=11809 comm="syz.5.2781" name="/" dev="autofs" ino=39353 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 289.812533][T11738] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 289.812725][ T29] audit: type=1400 audit(1790113227.376:726): avc: denied { write } for pid=11794 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.812751][ T29] audit: type=1400 audit(1790113227.376:727): avc: denied { create } for pid=11794 comm="dhcpcd-run-hook" name="resolv.conf.syzkaller0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 289.812846][ T29] audit: type=1400 audit(1790113227.376:728): avc: denied { write } for pid=11794 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.syzkaller0.link" dev="tmpfs" ino=12362 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 289.812973][ T29] audit: type=1400 audit(1790113227.376:729): avc: denied { append } for pid=11794 comm="dhcpcd-run-hook" name="resolv.conf.syzkaller0.link" dev="tmpfs" ino=12362 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 289.816605][T11738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 289.817180][T11738] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 290.175212][T11738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 290.182130][T11738] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 290.205391][T11738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 290.214227][T11738] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 290.326605][T11738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 290.332764][ T29] audit: type=1400 audit(1790113227.896:730): avc: denied { write } for pid=11816 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.828258][T11738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.832151][T11738] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.847457][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.847501][ T366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.850769][ T8338] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.850802][ T8338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.086334][T11738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.155954][T11869] X25: received unknown 00 with LCI 000 [ 291.175094][ T5306] wiimote 0005:057E:0330.000C: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 291.175181][ T5306] wiimote 0005:057E:0330.000C: New device registered [ 291.189734][T11871] wiimote 0005:057E:0330.000C: Device removed [ 291.190247][ T5306] wiimote 0005:057E:0330.000C: detected device: Nintendo Wii Remote Plus (Gen 2) [ 291.197998][ T5306] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.000C/input/input19 [ 291.198876][ T5306] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.000C/input/input20 [ 291.202737][ T5306] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.000C/input/input18 [ 291.217747][T11875] fido_id[11875]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 291.310911][T11738] veth0_vlan: entered promiscuous mode [ 291.316800][T11738] veth1_vlan: entered promiscuous mode [ 291.351784][T11738] veth0_macvtap: entered promiscuous mode [ 291.357335][T11738] veth1_macvtap: entered promiscuous mode [ 291.369535][T11738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.376105][T11738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.404367][ T8656] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.404517][ T8656] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.404569][ T8656] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.404671][ T8656] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.335967][T11950] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 293.173283][T11971] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2802'. [ 293.173306][T11971] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2802'. [ 293.177142][T11971] loop2: detected capacity change from 0 to 512 [ 293.256694][T11971] EXT4-fs error (device loop2): ext4_validate_block_bitmap:445: comm syz.2.2802: bg 0: block 184: padding at end of block bitmap is not set [ 293.256725][T11971] loop2: lost filesystem error report for type 5 error -117 [ 293.256882][T11971] EXT4-fs (loop2): Remounting filesystem read-only [ 293.257465][T11971] EXT4-fs (loop2): 1 truncate cleaned up [ 293.258260][T11971] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 293.258413][T11971] ext4 filesystem being mounted at /565/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 293.549947][ T42] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 293.549975][ T42] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 293.550058][ T42] EXT4-fs (loop2): Quota write (off=8, len=24) cancelled because transaction is not started [ 293.808531][ T3304] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 294.761786][T12012] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 295.251928][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 295.251944][ T29] audit: type=1326 audit(1790113232.816:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12032 comm="syz.2.2824" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c03f7e159 code=0x0 [ 295.707536][ T366] IPVS: stopping estimator thread 0... [ 295.707713][ T366] IPVS: starting estimator thread 0... [ 295.707790][ T366] IPVS: stopping estimator thread 0... [ 295.707966][ T366] IPVS: starting estimator thread 0... [ 295.790512][T12052] netlink: 'syz.1.2832': attribute type 11 has an invalid length. [ 295.793079][T12043] IPVS: using max 2592 ests per chain, 129600 per kthread [ 295.824867][T12056] syzkaller0: entered promiscuous mode [ 295.824884][T12056] syzkaller0: entered allmulticast mode [ 296.402418][T12071] se_dev->se_dev_ptr already set for storage object [ 296.424709][ T8656] IPVS: stopping estimator thread 0... [ 296.442910][ T8656] IPVS: starting estimator thread 0... [ 296.442925][ T8656] IPVS: stopping estimator thread 0... [ 296.453165][ T8656] IPVS: starting estimator thread 0... [ 296.623310][T12075] IPVS: using max 2544 ests per chain, 127200 per kthread [ 297.103214][T12093] ./dev/sda1: Can't lookup blockdev [ 297.160812][ T29] audit: type=1326 audit(1790113234.726:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12098 comm="syz.2.2849" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c03f7e159 code=0x0 [ 297.461816][T12110] se_dev->se_dev_ptr already set for storage object [ 297.656789][T12120] syzkaller0: entered promiscuous mode [ 297.656817][T12120] syzkaller0: entered allmulticast mode [ 297.824350][T12126] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2860'. [ 297.824373][T12126] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2860'. [ 297.825457][T12125] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 298.222861][T12144] bonding: bond1 is being created... [ 298.228422][T12144] bonding: bond1 already exists [ 298.271725][T12144] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 298.350396][T12146] bond0: option mode: unable to set because the bond device is up [ 298.490263][T12151] syzkaller0: entered promiscuous mode [ 298.490284][T12151] syzkaller0: entered allmulticast mode [ 298.655278][T12158] FAULT_INJECTION: forcing a failure. [ 298.655278][T12158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 298.655401][T12158] CPU: 0 UID: 0 PID: 12158 Comm: syz.2.2871 Not tainted syzkaller #0 PREEMPT(lazy) [ 298.655430][T12158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 298.655445][T12158] Call Trace: [ 298.655453][T12158] [ 298.655462][T12158] __dump_stack+0x1d/0x30 [ 298.655511][T12158] dump_stack_lvl+0x95/0xd0 [ 298.655538][T12158] dump_stack+0x15/0x1b [ 298.655562][T12158] should_fail_ex+0x262/0x280 [ 298.655604][T12158] should_fail+0xb/0x20 [ 298.655628][T12158] should_fail_usercopy+0x1a/0x20 [ 298.655703][T12158] _copy_to_user+0x20/0xa0 [ 298.655735][T12158] bpf_verifier_vlog+0x36e/0x5a0 [ 298.655760][T12158] diag_write+0xb1/0xe0 [ 298.655823][T12158] ? strnlen+0x28/0x50 [ 298.655847][T12158] diag_print_insn_context+0x598/0x7d0 [ 298.655885][T12158] ? __pfx_disasm_print+0x10/0x10 [ 298.655916][T12158] ? __pfx_disasm_kfunc_name+0x10/0x10 [ 298.656101][T12158] bpf_diag_source+0x4f0/0x1130 [ 298.656133][T12158] ? should_fail_ex+0xdb/0x280 [ 298.656163][T12158] ? bpf_verifier_vlog+0x40d/0x5a0 [ 298.656189][T12158] bpf_diag_program_structure+0x272/0x2b0 [ 298.656245][T12158] ? verbose+0xb6/0xf0 [ 298.656337][T12158] check_subprogs+0x444/0x4c0 [ 298.656464][T12158] bpf_check+0x120e/0x1d00 [ 298.656494][T12158] bpf_prog_load+0xefb/0x1060 [ 298.656523][T12158] ? avc_has_perm_noaudit+0xac/0x160 [ 298.656560][T12158] __sys_bpf+0xbae/0xc30 [ 298.656600][T12158] ? do_futex+0x300/0x460 [ 298.656639][T12158] __x64_sys_bpf+0x69/0x80 [ 298.656664][T12158] x64_sys_call+0xf26/0x2550 [ 298.656720][T12158] do_syscall_64+0x112/0x360 [ 298.656744][T12158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.656770][T12158] RIP: 0033:0x7f1c03f7e159 [ 298.656788][T12158] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.656808][T12158] RSP: 002b:00007f1c029d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 298.656856][T12158] RAX: ffffffffffffffda RBX: 00007f1c04205fa0 RCX: 00007f1c03f7e159 [ 298.656873][T12158] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 298.656888][T12158] RBP: 00007f1c0401506b R08: 0000000000000000 R09: 0000000000000000 [ 298.656902][T12158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.656917][T12158] R13: 00007f1c04206038 R14: 00007f1c04205fa0 R15: 00007fff901003d8 [ 298.656938][T12158] [ 298.791254][T12162] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 298.841884][T12164] No source specified [ 298.984975][ T29] audit: type=1326 audit(1790113236.556:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12166 comm="syz.2.2875" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c03f7e159 code=0x0 [ 299.109179][ T29] audit: type=1400 audit(1790113236.676:755): avc: denied { create } for pid=12172 comm="syz.5.2878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 299.109208][ T29] audit: type=1400 audit(1790113236.676:756): avc: denied { setopt } for pid=12172 comm="syz.5.2878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 299.109229][ T29] audit: type=1400 audit(1790113236.676:757): avc: denied { connect } for pid=12172 comm="syz.5.2878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 299.224311][T12184] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 299.754100][T12204] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2891'. [ 299.798770][T12209] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 299.869847][ T29] audit: type=1400 audit(1790113237.436:758): avc: denied { write } for pid=12215 comm="syz.2.2896" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 299.878555][T12216] tipc: New replicast peer: 255.255.255.255 [ 299.878728][T12216] tipc: Enabled bearer , priority 10 [ 299.943566][T12219] tipc: Enabled bearer , priority 0 [ 299.943928][T12219] syzkaller0: entered promiscuous mode [ 299.943946][T12219] syzkaller0: entered allmulticast mode [ 299.949980][T12219] tipc: Resetting bearer [ 299.959902][T12218] tipc: Resetting bearer [ 299.971542][T12218] tipc: Disabling bearer [ 301.024062][ T5306] tipc: Node number set to 3042485748 [ 301.063665][ T29] audit: type=1400 audit(1790113238.636:759): avc: denied { ioctl } for pid=12233 comm="syz.0.2901" path="socket:[40682]" dev="sockfs" ino=40682 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 301.747679][ T29] audit: type=1326 audit(1790113239.316:760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12248 comm="syz.1.2906" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe51201e159 code=0x0 [ 302.667856][T12265] blktrace: Concurrent blktraces are not allowed on sg0 [ 303.454923][T12298] netlink: 14 bytes leftover after parsing attributes in process `syz.0.2921'. [ 303.455226][ T29] audit: type=1400 audit(1790113241.016:761): avc: denied { accept } for pid=12293 comm="syz.0.2921" lport=37247 faddr=10.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 303.465158][T12298] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 303.467543][T12298] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.469185][T12298] bond0 (unregistering): Released all slaves [ 304.088028][T12317] syzkaller0: entered promiscuous mode [ 304.088050][T12317] syzkaller0: entered allmulticast mode [ 305.977619][T12372] syzkaller0: entered promiscuous mode [ 305.977639][T12372] syzkaller0: entered allmulticast mode [ 306.012729][T12379] syzkaller0: entered promiscuous mode [ 306.012750][T12379] syzkaller0: entered allmulticast mode [ 306.016563][T12379] tipc: Enabling of bearer rejected, failed to enable media [ 306.451863][T12417] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 306.463089][ T29] audit: type=1326 audit(1790113244.006:762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12410 comm="syz.5.2957" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d1ae6e159 code=0x0 [ 306.463228][ T29] audit: type=1400 audit(1790113244.016:763): avc: denied { mounton } for pid=12395 comm="syz.2.2954" path="/598/sys" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 306.709338][T12392] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.709371][T12392] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.709918][T12392] bridge_slave_0: entered allmulticast mode [ 306.712826][T12392] bridge_slave_0: entered promiscuous mode [ 306.746254][T12392] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.746284][T12392] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.747599][T12392] bridge_slave_1: entered allmulticast mode [ 306.749540][T12392] bridge_slave_1: entered promiscuous mode [ 306.807919][T12392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.811261][T12392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.843483][T12392] team0: Port device team_slave_0 added [ 306.844342][T12392] team0: Port device team_slave_1 added [ 306.868227][T12392] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.868240][T12392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.868265][T12392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.868769][T12392] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.868781][T12392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 306.868876][T12392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.965214][T12392] hsr_slave_0: entered promiscuous mode [ 306.966978][T12392] hsr_slave_1: entered promiscuous mode [ 306.967352][T12392] debugfs: 'hsr0' already exists in 'hsr' [ 306.967364][T12392] Cannot create hsr debugfs directory [ 307.028869][T12427] syzkaller0: entered promiscuous mode [ 307.028890][T12427] syzkaller0: entered allmulticast mode [ 307.168350][T12434] bonding: bond1 is being created... [ 307.168523][T12434] bonding: bond1 already exists [ 307.185718][T12434] bond1: (slave dummy0): Error: Device is in use and cannot be enslaved [ 307.185740][T12434] bond1: option slaves: unable to set because the bond device is up [ 307.216084][T12434] bond0: option mode: unable to set because the bond device is up [ 307.507933][ T29] audit: type=1400 audit(1790113245.076:764): avc: denied { write } for pid=12436 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 307.531779][T12392] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 307.538979][T12392] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 307.540432][T12392] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 307.731922][T12392] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 307.746434][T12392] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 307.765387][T12392] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 307.768823][T12392] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 307.793537][T12392] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 307.876155][ T29] audit: type=1400 audit(1790113245.446:765): avc: denied { getopt } for pid=12464 comm="syz.2.2969" lport=47293 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 307.879792][ T29] audit: type=1400 audit(1790113245.446:766): avc: denied { setopt } for pid=12464 comm="syz.2.2969" lport=47293 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 307.882209][ T29] audit: type=1400 audit(1790113245.446:767): avc: denied { write } for pid=12464 comm="syz.2.2969" lport=47293 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 307.979205][ T29] audit: type=1400 audit(1790113245.546:768): avc: denied { write } for pid=12462 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.020275][T12392] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.036829][T12392] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.041762][ T8656] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.041799][ T8656] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.069258][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.069305][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.438053][ T29] audit: type=1400 audit(1790113246.006:769): avc: denied { write } for pid=12476 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.504818][ T29] audit: type=1400 audit(1790113246.076:770): avc: denied { write } for pid=12489 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 308.664359][T12498] bonding: bond1 is being created... [ 308.679442][T12498] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 308.682513][T12498] bond0: option mode: unable to set because the bond device has slaves [ 308.700877][T12498] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.829570][ T29] audit: type=1326 audit(1790113246.396:771): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12508 comm="syz.5.2975" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3d1ae6e159 code=0x0 [ 309.051291][T12392] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.317525][T12392] veth0_vlan: entered promiscuous mode [ 309.334473][T12392] veth1_vlan: entered promiscuous mode [ 309.381649][T12392] veth0_macvtap: entered promiscuous mode [ 309.392192][T12392] veth1_macvtap: entered promiscuous mode [ 309.406474][T12392] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.411604][T12392] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.463006][ T8656] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.463073][ T8656] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.463107][ T8656] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.463204][ T8656] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 310.162554][T11673] syz_tun (unregistering): left allmulticast mode [ 310.367171][ T8654] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.479512][ T8654] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.583324][ T8654] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.257321][ T8654] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.703012][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 311.703052][ T29] audit: type=1326 audit(1790113249.246:778): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12630 comm="syz.1.2991" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe51201e159 code=0x0 [ 311.703103][ T29] audit: type=1400 audit(1790113249.256:779): avc: denied { name_bind } for pid=12637 comm="syz.5.2993" src=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 311.968629][ T8654] bond0 (unregistering): Released all slaves [ 311.971266][ T8654] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 311.972032][ T8654] bond1 (unregistering): Released all slaves [ 312.193057][ T29] audit: type=1400 audit(1790113249.706:780): avc: denied { write } for pid=12610 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.193091][ T29] audit: type=1400 audit(1790113249.726:781): avc: denied { write } for pid=12667 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 312.413156][ T8654] tipc: Disabling bearer [ 312.413180][ T8654] tipc: Left network mode [ 312.485487][ T8654] hsr_slave_0: left promiscuous mode [ 312.486437][ T8654] hsr_slave_1: left promiscuous mode [ 312.522054][ T8654] veth1_macvtap: left promiscuous mode [ 312.522080][ T8654] veth0_macvtap: left promiscuous mode [ 312.522126][ T8654] veth1_vlan: left promiscuous mode [ 312.522424][ T8654] veth0_vlan: left promiscuous mode [ 312.961815][T12599] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.961912][T12599] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.962003][T12599] bridge_slave_0: entered allmulticast mode [ 312.962705][T12599] bridge_slave_0: entered promiscuous mode [ 312.963708][T12599] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.963774][T12599] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.963820][T12599] bridge_slave_1: entered allmulticast mode [ 312.964460][T12599] bridge_slave_1: entered promiscuous mode [ 313.000929][T12599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 313.002842][T12599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 313.026049][T12599] team0: Port device team_slave_0 added [ 313.027036][T12599] team0: Port device team_slave_1 added [ 313.056332][ T29] audit: type=1400 audit(1790113250.486:782): avc: denied { write } for pid=12675 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.056362][ T29] audit: type=1400 audit(1790113250.516:783): avc: denied { write } for pid=12694 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.459622][T12599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.459636][T12599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.459685][T12599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.460370][T12599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.460383][T12599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 313.460411][T12599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.508943][T12599] hsr_slave_0: entered promiscuous mode [ 313.509309][T12599] hsr_slave_1: entered promiscuous mode [ 313.509584][T12599] debugfs: 'hsr0' already exists in 'hsr' [ 313.509596][T12599] Cannot create hsr debugfs directory [ 313.533125][ T29] audit: type=1400 audit(1790113251.076:784): avc: denied { write } for pid=12698 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.549580][ T29] audit: type=1400 audit(1790113251.116:785): avc: denied { write } for pid=12715 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.798338][ T29] audit: type=1400 audit(1790113251.346:786): avc: denied { write } for pid=12717 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 313.850200][ T8654] IPVS: stop unused estimator thread 0... [ 313.944498][ T29] audit: type=1400 audit(1790113251.516:787): avc: denied { write } for pid=12742 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 314.543343][T12599] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 314.555829][T12599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 314.559272][T12599] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 314.570956][T12599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 314.571518][T12599] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 314.577815][T12599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 314.583364][T12599] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 314.597136][T12599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 314.672603][T12599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.686933][T12599] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.701693][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.701751][ T366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.709069][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.709103][ T366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.931536][T12599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.963682][T12784] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.33554432.133495060), cmd(2) [ 315.295763][T12814] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 315.297084][T12814] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 315.335349][T12599] veth0_vlan: entered promiscuous mode [ 315.353950][T12599] veth1_vlan: entered promiscuous mode [ 315.374424][T12599] veth0_macvtap: entered promiscuous mode [ 315.376022][T12599] veth1_macvtap: entered promiscuous mode [ 315.381270][T12599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.404535][T12599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.614984][ T42] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.615023][ T42] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.615473][ T42] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.616906][ T42] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.392388][T12861] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.408440][T12861] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 317.572008][T12889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3041'. [ 319.568256][T12929] netlink: 92 bytes leftover after parsing attributes in process `syz.1.3056'. [ 319.628057][T12936] netlink: 4620 bytes leftover after parsing attributes in process `syz.0.3059'. [ 320.264980][T12955] FAULT_INJECTION: forcing a failure. [ 320.264980][T12955] name failslab, interval 1, probability 0, space 0, times 0 [ 320.265013][T12955] CPU: 0 UID: 0 PID: 12955 Comm: syz.5.3064 Not tainted syzkaller #0 PREEMPT(lazy) [ 320.265038][T12955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 320.265053][T12955] Call Trace: [ 320.265061][T12955] [ 320.265069][T12955] __dump_stack+0x1d/0x30 [ 320.265099][T12955] dump_stack_lvl+0x95/0xd0 [ 320.265240][T12955] dump_stack+0x15/0x1b [ 320.265263][T12955] should_fail_ex+0x262/0x280 [ 320.265286][T12955] ? posix_clock_open+0x7f/0x150 [ 320.265360][T12955] should_failslab+0x8c/0xb0 [ 320.265396][T12955] __kmalloc_cache_noprof+0x7a/0x400 [ 320.265484][T12955] ? avc_has_perm+0x101/0x190 [ 320.265512][T12955] ? posix_clock_open+0x7f/0x150 [ 320.265597][T12955] posix_clock_open+0x7f/0x150 [ 320.265628][T12955] chrdev_open+0x2eb/0x3a0 [ 320.265669][T12955] do_dentry_open+0x49f/0xa60 [ 320.265759][T12955] ? __pfx_chrdev_open+0x10/0x10 [ 320.265800][T12955] vfs_open+0x37/0x1e0 [ 320.265824][T12955] path_openat+0xc01/0x10d0 [ 320.265860][T12955] do_file_open+0x16c/0x290 [ 320.265942][T12955] do_sys_openat2+0xa0/0x130 [ 320.265964][T12955] __x64_sys_openat+0xf2/0x120 [ 320.265987][T12955] x64_sys_call+0x1f72/0x2550 [ 320.266012][T12955] do_syscall_64+0x112/0x360 [ 320.266095][T12955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.266128][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 320.266126][T12955] RIP: 0033:0x7f3d1ae6e159 [ 320.266145][T12955] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.266164][T12955] RSP: 002b:00007f3d198c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 320.266142][ T29] audit: type=1400 audit(1790113257.836:794): avc: denied { write } for pid=12954 comm="syz.5.3064" name="ptp0" dev="devtmpfs" ino=245 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 320.266183][T12955] RAX: ffffffffffffffda RBX: 00007f3d1b0f5fa0 RCX: 00007f3d1ae6e159 [ 320.266261][T12955] RDX: 0000000000082001 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 320.266275][T12955] RBP: 00007f3d1af0506b R08: 0000000000000000 R09: 0000000000000000 [ 320.266291][T12955] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.266306][T12955] R13: 00007f3d1b0f6038 R14: 00007f3d1b0f5fa0 R15: 00007fff3af907e8 [ 320.266385][T12955] [ 321.332724][T12982] netlink: 60 bytes leftover after parsing attributes in process `syz.1.3073'. [ 322.760833][T13009] netlink: 60 bytes leftover after parsing attributes in process `syz.6.3078'. [ 324.188316][T13039] FAULT_INJECTION: forcing a failure. [ 324.188316][T13039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 324.188345][T13039] CPU: 1 UID: 0 PID: 13039 Comm: syz.0.3090 Not tainted syzkaller #0 PREEMPT(lazy) [ 324.188369][T13039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 324.188402][T13039] Call Trace: [ 324.188411][T13039] [ 324.188423][T13039] __dump_stack+0x1d/0x30 [ 324.188453][T13039] dump_stack_lvl+0x95/0xd0 [ 324.188478][T13039] dump_stack+0x15/0x1b [ 324.188501][T13039] should_fail_ex+0x262/0x280 [ 324.188549][T13039] should_fail+0xb/0x20 [ 324.188573][T13039] should_fail_usercopy+0x1a/0x20 [ 324.188684][T13039] _copy_from_user+0x1c/0xb0 [ 324.188836][T13039] __sys_bpf+0x1e2/0xc30 [ 324.188872][T13039] ? do_futex+0x300/0x460 [ 324.188908][T13039] __x64_sys_bpf+0x69/0x80 [ 324.188929][T13039] x64_sys_call+0xf26/0x2550 [ 324.188958][T13039] do_syscall_64+0x112/0x360 [ 324.189054][T13039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.189081][T13039] RIP: 0033:0x7f5b2879e159 [ 324.189170][T13039] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.189191][T13039] RSP: 002b:00007f5b271f7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 324.189213][T13039] RAX: ffffffffffffffda RBX: 00007f5b28a25fa0 RCX: 00007f5b2879e159 [ 324.189234][T13039] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 324.189250][T13039] RBP: 00007f5b2883506b R08: 0000000000000000 R09: 0000000000000000 [ 324.189265][T13039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 324.189279][T13039] R13: 00007f5b28a26038 R14: 00007f5b28a25fa0 R15: 00007ffc89a34818 [ 324.189300][T13039] [ 325.455914][ T29] audit: type=1400 audit(1790113263.026:795): avc: denied { create } for pid=13059 comm="syz.2.3098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 325.457548][ T29] audit: type=1400 audit(1790113263.026:796): avc: denied { bind } for pid=13059 comm="syz.2.3098" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 325.459342][T13061] syz.2.3098 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 325.774376][ T29] audit: type=1400 audit(1790113263.346:797): avc: denied { ioctl } for pid=13059 comm="syz.2.3098" path="socket:[43561]" dev="sockfs" ino=43561 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 326.235545][ T366] bridge_slave_1: left allmulticast mode [ 326.235575][ T366] bridge_slave_1: left promiscuous mode [ 326.235660][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.237545][ T366] bridge_slave_0: left allmulticast mode [ 326.237561][ T366] bridge_slave_0: left promiscuous mode [ 326.237856][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.264460][ T366] bond0 (unregistering): Released all slaves [ 326.325027][ T366] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 326.403978][ T366] bond1 (unregistering): Released all slaves [ 326.470159][ T366] tipc: Left network mode [ 326.698329][T13081] bonding: bond1 is being created... [ 326.777452][ T366] hsr_slave_0: left promiscuous mode [ 326.779329][ T366] hsr_slave_1: left promiscuous mode [ 326.779945][ T366] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 326.780657][ T366] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 326.860537][ T366] team0 (unregistering): Port device team_slave_1 removed [ 326.864369][ T366] team0 (unregistering): Port device team_slave_0 removed [ 326.903379][T13098] bond0: option mode: unable to set because the bond device has slaves [ 327.164265][T13109] FAULT_INJECTION: forcing a failure. [ 327.164265][T13109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 327.164298][T13109] CPU: 0 UID: 0 PID: 13109 Comm: syz.5.3111 Not tainted syzkaller #0 PREEMPT(lazy) [ 327.164321][T13109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 327.164333][T13109] Call Trace: [ 327.164340][T13109] [ 327.164349][T13109] __dump_stack+0x1d/0x30 [ 327.164374][T13109] dump_stack_lvl+0x95/0xd0 [ 327.164450][T13109] dump_stack+0x15/0x1b [ 327.164475][T13109] should_fail_ex+0x262/0x280 [ 327.164503][T13109] should_fail+0xb/0x20 [ 327.164523][T13109] should_fail_usercopy+0x1a/0x20 [ 327.164599][T13109] _copy_from_user+0x1c/0xb0 [ 327.164625][T13109] __sys_bpf+0x1e2/0xc30 [ 327.164652][T13109] ? do_futex+0x300/0x460 [ 327.164737][T13109] __x64_sys_bpf+0x69/0x80 [ 327.164758][T13109] x64_sys_call+0xf26/0x2550 [ 327.164784][T13109] do_syscall_64+0x112/0x360 [ 327.164805][T13109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.164876][T13109] RIP: 0033:0x7f3d1ae6e159 [ 327.164894][T13109] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 327.164915][T13109] RSP: 002b:00007f3d198c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 327.164938][T13109] RAX: ffffffffffffffda RBX: 00007f3d1b0f5fa0 RCX: 00007f3d1ae6e159 [ 327.164956][T13109] RDX: 0000000000000094 RSI: 00002000000001c0 RDI: 0000000000000005 [ 327.164972][T13109] RBP: 00007f3d1af0506b R08: 0000000000000000 R09: 0000000000000000 [ 327.165028][T13109] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.165040][T13109] R13: 00007f3d1b0f6038 R14: 00007f3d1b0f5fa0 R15: 00007fff3af907e8 [ 327.165069][T13109] [ 327.330817][ T366] IPVS: stop unused estimator thread 0... [ 328.693020][T13139] se_dev->se_dev_ptr already set for storage object [ 328.996167][T12510] syz_tun (unregistering): left allmulticast mode [ 329.515654][T13148] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 conventional PCI endpoint [ 329.815578][ T114] bridge_slave_1: left allmulticast mode [ 329.815598][ T114] bridge_slave_1: left promiscuous mode [ 329.815809][ T114] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.817175][ T114] bridge_slave_0: left allmulticast mode [ 329.817189][ T114] bridge_slave_0: left promiscuous mode [ 329.817357][ T114] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.994312][ T29] audit: type=1400 audit(1790113267.566:798): avc: denied { write } for pid=13156 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.031961][ T114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.043207][ T29] audit: type=1400 audit(1790113267.606:799): avc: denied { write } for pid=13174 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.043616][ T114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.043895][ T114] bond0 (unregistering): Released all slaves [ 330.045762][ T114] bond1 (unregistering): (slave dummy0): Releasing backup interface [ 330.046592][ T114] bond1 (unregistering): Released all slaves [ 330.104966][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 330.126447][ T114] tipc: Left network mode [ 330.142670][ T114] hsr_slave_0: left promiscuous mode [ 330.142877][ T114] hsr_slave_1: left promiscuous mode [ 330.808660][ T114] team0 (unregistering): Port device team_slave_1 removed [ 330.844542][ T114] team0 (unregistering): Port device team_slave_0 removed [ 330.942998][ T29] audit: type=1400 audit(1790113268.496:800): avc: denied { write } for pid=13186 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 330.980890][T13212] bonding: bond1 is being created... [ 331.092705][ T29] audit: type=1400 audit(1790113268.656:801): avc: denied { write } for pid=13214 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.188942][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10 [ 331.220828][ T2983] ================================================================== [ 331.220865][ T2983] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 331.220900][ T2983] [ 331.220905][ T2983] write to 0xffff88810626be70 of 8 bytes by task 6440 on cpu 1: [ 331.220928][ T2983] dentry_unlink_inode+0x65/0x260 [ 331.220955][ T2983] d_delete+0x164/0x180 [ 331.220982][ T2983] d_delete_notify+0x32/0x100 [ 331.221013][ T2983] vfs_unlink+0x287/0x490 [ 331.221045][ T2983] filename_unlinkat+0x1dc/0x410 [ 331.221079][ T2983] __se_sys_unlink+0x2b/0xe0 [ 331.221108][ T2983] __x64_sys_unlink+0x1f/0x30 [ 331.221136][ T2983] x64_sys_call+0x18ee/0x2550 [ 331.221161][ T2983] do_syscall_64+0x112/0x360 [ 331.221183][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.221203][ T2983] [ 331.221208][ T2983] read to 0xffff88810626be70 of 8 bytes by task 2983 on cpu 0: [ 331.221222][ T2983] step_into_slowpath+0x12c/0x4c0 [ 331.221244][ T2983] path_lookupat+0x2eb/0x4c0 [ 331.221266][ T2983] filename_lookup+0x18f/0x390 [ 331.221289][ T2983] do_readlinkat+0x74/0x2f0 [ 331.221312][ T2983] __x64_sys_readlink+0x47/0x60 [ 331.221333][ T2983] x64_sys_call+0x1d41/0x2550 [ 331.221356][ T2983] do_syscall_64+0x112/0x360 [ 331.221371][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.221390][ T2983] [ 331.221393][ T2983] value changed: 0xffff88811b700338 -> 0x0000000000000000 [ 331.221406][ T2983] [ 331.221410][ T2983] Reported by Kernel Concurrency Sanitizer on: [ 331.221422][ T2983] CPU: 0 UID: 0 PID: 2983 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 331.221449][ T2983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 331.221463][ T2983] ================================================================== [ 331.641004][T11640] syz_tun (unregistering): left allmulticast mode [ 331.670860][ T29] audit: type=1400 audit(1790113269.236:802): avc: denied { write } for pid=13232 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.696345][ T29] audit: type=1400 audit(1790113269.246:803): avc: denied { write } for pid=13243 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.701384][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11 [ 331.836128][ T29] audit: type=1400 audit(1790113269.406:804): avc: denied { write } for pid=13246 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.866088][ T29] audit: type=1400 audit(1790113269.416:805): avc: denied { write } for pid=13257 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 331.878864][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12 [ 332.026624][ T114] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.056000][ T114] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.106422][ T114] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.136482][ T114] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.195164][ T114] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.236565][ T114] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.267761][ T29] audit: type=1400 audit(1790113269.836:806): avc: denied { write } for pid=13264 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.300113][ T114] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.314025][ T29] audit: type=1400 audit(1790113269.876:807): avc: denied { write } for pid=13275 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.317525][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13 [ 332.385548][ T29] audit: type=1400 audit(1790113269.956:808): avc: denied { write } for pid=13278 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.387066][ T114] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.450264][ T29] audit: type=1400 audit(1790113270.016:809): avc: denied { write } for pid=13289 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 332.482419][ T3022] 8021q: adding VLAN 0 to HW filter on device eth14 [ 332.500080][ T114] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.546923][ T114] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.578891][ T3022] 8021q: adding VLAN 0 to HW filter on device eth15 [ 332.592202][ T114] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.655767][ T114] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.700627][ T3022] 8021q: adding VLAN 0 to HW filter on device eth16 [ 332.709891][ T114] bridge_slave_1: left allmulticast mode [ 332.709906][ T114] bridge_slave_1: left promiscuous mode [ 332.710069][ T114] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.710549][ T114] bridge_slave_0: left allmulticast mode [ 332.710561][ T114] bridge_slave_0: left promiscuous mode [ 332.710632][ T114] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.711413][ T114] pim6reg: left allmulticast mode [ 332.712466][ T114] bridge_slave_1: left allmulticast mode [ 332.712527][ T114] bridge_slave_1: left promiscuous mode [ 332.712574][ T114] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.719002][ T114] bridge_slave_0: left allmulticast mode [ 332.719021][ T114] bridge_slave_0: left promiscuous mode [ 332.719113][ T114] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.750497][ T114] bridge_slave_1: left allmulticast mode [ 332.750592][ T114] bridge_slave_1: left promiscuous mode [ 332.750679][ T114] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.761332][ T114] bridge_slave_0: left allmulticast mode [ 332.761361][ T114] bridge_slave_0: left promiscuous mode [ 332.761578][ T114] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.860735][ T114] bond1 (unregistering): Released all slaves [ 332.881816][ T114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.883334][ T114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.900829][ T114] bond0 (unregistering): Released all slaves [ 332.918227][ T114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.919356][ T114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.920008][ T114] bond0 (unregistering): Released all slaves [ 332.958940][ T114] tipc: Left network mode [ 332.962901][ T114] hsr_slave_0: left promiscuous mode [ 332.967443][ T114] hsr_slave_1: left promiscuous mode [ 332.967893][ T114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 332.967908][ T114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 332.973309][ T114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 332.973325][ T114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 332.993074][ T114] hsr_slave_0: left promiscuous mode [ 333.000470][ T114] hsr_slave_1: left promiscuous mode [ 333.000995][ T114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.001010][ T114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.007926][ T114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.007942][ T114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.027798][ T114] hsr_slave_0: left promiscuous mode [ 333.033103][ T114] hsr_slave_1: left promiscuous mode [ 333.033649][ T114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.033664][ T114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.042698][ T114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.042811][ T114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.066795][ T114] veth1_macvtap: left promiscuous mode [ 333.066823][ T114] veth0_macvtap: left promiscuous mode [ 333.066988][ T114] veth1_vlan: left promiscuous mode [ 333.067022][ T114] veth0_vlan: left promiscuous mode [ 333.093341][ T114] veth1_macvtap: left promiscuous mode [ 333.093369][ T114] veth0_macvtap: left promiscuous mode [ 333.093468][ T114] veth1_vlan: left promiscuous mode [ 333.093502][ T114] veth0_vlan: left promiscuous mode [ 333.114585][ T114] veth1_macvtap: left promiscuous mode [ 333.114674][ T114] veth0_macvtap: left promiscuous mode [ 333.114714][ T114] veth1_vlan: left promiscuous mode [ 333.114760][ T114] veth0_vlan: left promiscuous mode [ 333.231679][ T114] team0 (unregistering): Port device team_slave_1 removed [ 333.240428][ T114] team0 (unregistering): Port device team_slave_0 removed [ 333.284025][ T114] team0 (unregistering): Port device team_slave_1 removed [ 333.286205][ T114] team0 (unregistering): Port device team_slave_0 removed [ 333.332503][ T114] team0 (unregistering): Port device team_slave_1 removed [ 333.340688][ T114] team0 (unregistering): Port device team_slave_0 removed [ 333.365643][ T3022] 8021q: adding VLAN 0 to HW filter on device eth17 [ 333.462537][ T3022] 8021q: adding VLAN 0 to HW filter on device eth18 [ 333.551640][ T3022] 8021q: adding VLAN 0 to HW filter on device eth19 [ 333.635181][ T3022] 8021q: adding VLAN 0 to HW filter on device eth20 [ 333.718973][ T3022] 8021q: adding VLAN 0 to HW filter on device eth21 [ 333.813151][ T3022] 8021q: adding VLAN 0 to HW filter on device eth22 [ 333.871901][ T114] IPVS: stop unused estimator thread 0... [ 333.909530][ T3022] 8021q: adding VLAN 0 to HW filter on device eth23 [ 333.922134][ T114] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.976709][ T114] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.002732][ T3022] 8021q: adding VLAN 0 to HW filter on device eth24 [ 334.017020][ T114] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.056039][ T114] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.127933][ T114] bridge_slave_1: left allmulticast mode [ 334.127976][ T114] bridge_slave_1: left promiscuous mode [ 334.128056][ T114] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.128788][ T114] bridge_slave_0: left allmulticast mode [ 334.128804][ T114] bridge_slave_0: left promiscuous mode [ 334.128930][ T114] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.184690][ T114] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.185798][ T114] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.186086][ T114] bond0 (unregistering): Released all slaves [ 334.187163][ T114] bond1 (unregistering): Released all slaves [ 334.238672][ T114] hsr_slave_0: left promiscuous mode [ 334.238912][ T114] hsr_slave_1: left promiscuous mode [ 334.239369][ T114] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.239385][ T114] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.239701][ T114] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.239714][ T114] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.241894][ T114] veth1_macvtap: left promiscuous mode [ 334.242010][ T114] veth0_macvtap: left promiscuous mode [ 334.242113][ T114] veth1_vlan: left promiscuous mode [ 334.242177][ T114] veth0_vlan: left promiscuous mode [ 334.353281][ T114] team0 (unregistering): Port device team_slave_1 removed [ 334.356108][ T114] team0 (unregistering): Port device team_slave_0 removed [ 334.380581][ T3022] 8021q: adding VLAN 0 to HW filter on device eth25 [ 334.465347][ T3022] 8021q: adding VLAN 0 to HW filter on device eth26 [ 334.553546][ T3022] 8021q: adding VLAN 0 to HW filter on device eth27 [ 334.646846][ T3022] 8021q: adding VLAN 0 to HW filter on device eth28