last executing test programs: 57.55897879s ago: executing program 1 (id=23): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 57.434077752s ago: executing program 1 (id=25): r0 = fsopen(&(0x7f0000000640)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x90) open(&(0x7f00000000c0)='./file1\x00', 0x66842, 0x21) rename(&(0x7f0000000580)='./file1\x00', &(0x7f0000000200)='./file0\x00') r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90) getdents64(r2, &(0x7f0000000f80)=""/4096, 0x1000) 57.299230377s ago: executing program 1 (id=30): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x13, 0x2, 0x0, 0x0, 0x0, 0x0, 0x802c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xad, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x4, 0x1, 0x4, 0x5, 0x9, 0x0, 0x0, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000000000008500000059"], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x28}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000007008500000004"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 55.768736826s ago: executing program 1 (id=37): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff0000/0xd000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x8c0) r0 = io_uring_setup(0x3eb3, &(0x7f0000000040)={0x0, 0xe955, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 55.767828956s ago: executing program 1 (id=40): r0 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) writev(r1, &(0x7f0000002a40)=[{&(0x7f0000001440)="0ef04e98723305c72aa99f999475e2b67b76ea", 0x13}], 0x1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f00000004c0)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r3, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10) write$9p(r3, &(0x7f0000000100)="d5c0", 0x2) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r3, 0x0) 55.596977117s ago: executing program 1 (id=45): socket$netlink(0x10, 0x3, 0x0) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) keyctl$KEYCTL_CAPABILITIES(0x15, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x4) 55.557403465s ago: executing program 32 (id=45): socket$netlink(0x10, 0x3, 0x0) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) keyctl$KEYCTL_CAPABILITIES(0x15, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket(0x10, 0x803, 0x4) 47.977857014s ago: executing program 5 (id=87): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ed08, 0x1224, 0x0, 0x5, 0x4, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f00000006c0)={0x0, {'syz0\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000280)=""/8, 0x8, 0x0, 0x0, 0x1, 0x10}}, 0x120) write$UHID_DESTROY(r0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_delroute={0x44, 0x19, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0x0, 0x2, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x3e}}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x3, 0x8, 0x1, 0x8, 0x2}}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x4}]}, 0x44}}, 0x0) 47.667594531s ago: executing program 5 (id=100): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r0, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000040000000c"], 0x50) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8800, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x4) setsockopt$RDS_CONG_MONITOR(0xffffffffffffffff, 0x114, 0x6, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e21, @empty}}, [0x8, 0xfffffffffffffffe, 0x0, 0x92f7, 0x1, 0x2, 0x36, 0xfffffffffffffff0, 0xa, 0x3ff, 0x7f, 0x3, 0x88, 0xfffffffffffffea4, 0x9]}, &(0x7f0000000440)=0x100) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d000000040000000400000007"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000700), &(0x7f0000000880), 0xde9, r1}, 0x38) 47.540407734s ago: executing program 5 (id=102): r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) r1 = open(&(0x7f0000000280)='.\x00', 0x10000, 0x0) fcntl$lock(r1, 0x410, &(0x7f0000000200)={0x1, 0x3, 0x1000000000000001, 0x9b}) futimesat(r0, 0x0, 0x0) 46.546421135s ago: executing program 5 (id=112): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200000, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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") openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) fallocate(r1, 0x0, 0x0, 0x8fffb) 46.412673389s ago: executing program 5 (id=113): bind$packet(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x280c000, &(0x7f0000000600)={[{@noinit_itable}, {@test_dummy_encryption_v1}, {@noload}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@noblock_validity}, {@journal_checksum}, {@grpid}, {@journal_ioprio}, {@inlinecrypt}]}, 0x1, 0xbc1, &(0x7f00000043c0)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x5005}) r2 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) write$tun(r1, &(0x7f0000000280)={@void, @val={0x3, 0x3, 0x8, 0x3, 0x16, 0xc}, @ipv4=@generic={{0x5, 0x4, 0x1, 0xb, 0x24, 0x65, 0x0, 0x9, 0x11, 0x0, @private=0xa010101, @local}, "c7050804000880000200000001001504"}}, 0x2e) 45.431671678s ago: executing program 5 (id=120): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xb, 0xffffff95, 0xfffffffd, 0xe9ae, 0x3, 0x3, 0x6, 0x8}}}}]}, 0x58}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 45.429471838s ago: executing program 33 (id=120): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x4, 0xb, 0xffffff95, 0xfffffffd, 0xe9ae, 0x3, 0x3, 0x6, 0x8}}}}]}, 0x58}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 25.013449215s ago: executing program 6 (id=372): r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x9, 0xf40d9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x2, @perf_bp={0x0}, 0x204, 0x8, 0x43a1bd76, 0x3, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x10040) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000001140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x10, 0x0, 0x0, 0x4}}}}}}, 0x0) 24.948884357s ago: executing program 6 (id=373): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x18a42000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x2400c0c1}, 0x8000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) 24.44288287s ago: executing program 6 (id=376): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x129942, 0x18) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$setlease(r0, 0x400, 0x1) perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x4}, 0x100982, 0x2, 0x0, 0x0, 0x712c, 0xd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x20040, 0x1ff) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) 23.322090563s ago: executing program 6 (id=391): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'bridge0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000140)={'bridge_slave_0\x00', 0x1}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r2}]}, 0x28}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="3800000054000104000000000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r3, @ANYBLOB="01000000ef01010100000000000000000000000008000000"], 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@setlink={0x28, 0x13, 0x5, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8}]}, 0x28}}, 0x0) 23.262175494s ago: executing program 6 (id=393): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x1, 0x5}, 0x94) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x84) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 22.377448145s ago: executing program 6 (id=411): syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x1eb081) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_clone3(0x0, 0x0) io_setup(0x30, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0}]) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) syz_usb_connect(0x0, 0x36, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) 7.167924005s ago: executing program 34 (id=411): syz_open_dev$usbmon(&(0x7f0000000000), 0x1, 0x1eb081) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') syz_clone3(0x0, 0x0) io_setup(0x30, &(0x7f0000000400)=0x0) io_submit(r1, 0x1, &(0x7f0000000100)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0xfffe, r0, 0x0}]) syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) syz_usb_connect(0x0, 0x36, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./tracing/dynamic_events\x00', 0x1, 0x0) 4.795677877s ago: executing program 4 (id=464): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff30}, 0x68) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$KDGKBDIACR(r0, 0x4b4a, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) syz_emit_ethernet(0x66, &(0x7f0000000000)={@broadcast, @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x30, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "640080", 0x0, 0x2b, 0x0, @private0, @private0={0xfc, 0x0, '\x00', 0x1}}}}}}}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[], 0x0, 0x1b, 0x0, 0x0, 0x0, 0x6f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 4.534955584s ago: executing program 4 (id=465): unshare(0x2a020480) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x7}, 0x4) syz_emit_ethernet(0x4a, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 4.385850441s ago: executing program 4 (id=466): pipe(&(0x7f0000000040)) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_ports\x00', 0x2, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000000)='./file0\x00', 0x180c8, &(0x7f0000000800)=ANY=[@ANYBLOB="6e66732c646f74732c636865636b3d7374726963742c646f74732c6572726f72733d72656d6f756e742d726f2c00f8403bb14281bbfb9b8213bd6284536d64789a24dd73b98b3e33cb47fed8a7364664b62e9e891aa832722dfc28bfa4489b3a127a503e72326b737d0f67c97be6f37ef46154dec39ef8718946ffc8cd4d735a0b101c1722477bbe2f923577ea51f7116f17c3ddf5c497fba2d0bb3272d123b31e9461d4e2d65a42e1174fa269de92e463fc1cde2367bdb50cc5b2b462e1d45fc3265f1a88561ab6afb1b73a3b36991cfa985453287d4c9d2d6e21adddc57a607369c682e821b20dc0efd51d12f386f3f8e53c05e696e50c7c3f79b1b0bd7e5cfaf3f63d8949c8dd2fd94aa0f259a4cb9412c30c45f9d4d63d267d2a43f03a47fa56b3000000f9ffffffffffffff000000", @ANYRES16, @ANYRESDEC=r0], 0x1, 0x250, &(0x7f0000000300)="$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") socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f00000000c0)={0x8, 0xffe, 0x1ff, 0x42000}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200010004000000000000001c0000001400", @ANYRES16=r1], 0x28}}, 0x0) 3.963376198s ago: executing program 4 (id=468): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000002000000000000000000000300000000020000000200000000000000000000000000000105000000080000020000000002000005000000000000000001000000000000000000000001"], 0x0, 0x66, 0x0, 0x2}, 0x28) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) listen(r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000000100)={0x1ff, 0x8000000000001, 0xfffffffffffffffd, 0x0, 0x800, 0x201000000000000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) 2.190088471s ago: executing program 7 (id=490): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0xd, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0, 0x2, 0x0, 0x0, 0x41000}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x16, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x6}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3, 0x0, 0x0, @void, @value=0xff070000, @void, @value=0xff070000}, 0x48) 1.722400866s ago: executing program 3 (id=495): perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = fsopen(&(0x7f00000000c0)='rootfs\x00', 0x1) fsconfig$FSCONFIG_SET_PATH_EMPTY(r0, 0x4, 0x0, 0x0, 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x0, 0x0, 0x10}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000010900010073797a310000000054000000030a01040000000000000000010000000900030073030000000000000900010073797a3100000000280004800800014000000005080002401b2fd2c5140003006970366772653000000000000000000028000000000a05000000000000000000010000080900010073797a310000"], 0xc4}, 0x1, 0x0, 0x0, 0x20004000}, 0x4000) 1.613042706s ago: executing program 3 (id=497): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x800005}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f00000002c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2c}}, 0x10) sendmsg$inet(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="91cfdfefdb", 0x1a000}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f0000000cc0)={&(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10, 0x0}, 0x0) 1.596373539s ago: executing program 7 (id=498): accept$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) mmap(&(0x7f0000459000/0x3000)=nil, 0x3000, 0x200000b, 0x28011, 0xffffffffffffffff, 0xd1455000) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r1 = socket$kcm(0x2, 0x5, 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='memory.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r1, 0x84, 0x78, &(0x7f0000000040)=r2, 0x4) 1.474225321s ago: executing program 2 (id=500): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000040)={0x41}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x0, 0x1}, 0x10) sendmsg$tipc(r3, &(0x7f0000000180)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10, 0x0}, 0x0) 1.387817257s ago: executing program 2 (id=501): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x9362, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) 1.351996894s ago: executing program 2 (id=502): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f00000000c0)=0x33, 0x8) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f0000000200)=""/68, 0x44, 0x10120, 0x0, 0x0) 1.141238462s ago: executing program 0 (id=504): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x200}, 0x1c) r1 = socket$inet_tcp(0x2, 0x1, 0x0) io_setup(0x9, 0x0) fcntl$dupfd(r0, 0x0, r0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000500)=0x100000001, 0x4) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.068773235s ago: executing program 0 (id=505): timer_create(0x7, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$BTRFS_IOC_LOGICAL_INO(0xffffffffffffffff, 0xc0389424, &(0x7f0000000200)={0xc65, 0x0, '\x00', 0x0, &(0x7f00000001c0)}) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fcntl$notify(r0, 0x402, 0xfb0fca2daa2f4273) getdents(r0, &(0x7f00000005c0)=""/180, 0xb4) 927.508831ms ago: executing program 0 (id=506): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c000000020303000000000000000000022000000800010001"], 0x1c}}, 0x40000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="2000000002038306000000000000000000000000090002000001002102"], 0x20}, 0x1, 0x0, 0x0, 0x40684b5}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0xe, 0x4, 0x298, 0xffffffff, 0x0, 0xd0, 0x168, 0xffffffff, 0xffffffff, 0xd0, 0x168, 0x200, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@time={{0x38}, {0x0, 0x7fffffff, 0x0, 0x1517f, 0xffffffff, 0xfe}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffc}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x0, 0xffffffff}}}}, 0x1000) syz_emit_ethernet(0x32, &(0x7f0000000100)={@link_local, @random="4bb7e00d2cac", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x100, 0x0, 0x9, 0x11, 0x0, @empty, @multicast1}, {0x100, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x2, 0xfa, 0x0, @val=0x80}}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000082}, 0x0) 927.240131ms ago: executing program 4 (id=507): socket$inet_icmp(0x2, 0x2, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c1e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257", 0x2, 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x5, 0x4) 766.71027ms ago: executing program 4 (id=508): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000001}, @multicast2, @private=0xa010101, 0xff000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}}, 0x0) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20) 706.915901ms ago: executing program 7 (id=509): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7a, 0x0, 0x3, 0x800000, 0x43, 0x9, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setns(0xc9, 0x0) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) r1 = fsopen(&(0x7f0000000300)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000580)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xeaEb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) 639.560613ms ago: executing program 3 (id=510): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x40}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x41009432, 0x0) 615.891577ms ago: executing program 7 (id=511): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000100)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) futex_waitv(&(0x7f0000000180)=[{0x0, &(0x7f0000000000), 0x2}], 0x1, 0x0, 0x0, 0x0) futex(&(0x7f0000000140)=0x2, 0x5, 0x0, 0x0, &(0x7f0000000000), 0x0) 535.637472ms ago: executing program 3 (id=512): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000b80)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be6890ee50e997fc26e0000ea4feb931647fc5393de25000000000000000000f4922da20bf1f802970c30f03cc271337e892c99bda9475d51361f8b78938a6a68ba85987219000000eb52c9ff439180b413ec4d4fe130b41d113ce7efb5e9838379c5a554eb896f7808d5904cd8da06fd5159085c9275f49e775e92fb106c2f10442d500891e58a3f851ff5c85244beacba25d854577d68ca555e88fc249340ab9bdd8680abbbde02b0307ef45cb7bebc905a984c7bbb7bb3c6", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000e40)="31fdffffffffffffff74098b2e5e55a1828636f60fbfcfdac56c75f1687f0c562874230300d69f117e766bdbad0c2171ad6227e1173afcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbb9de494c9721d9bf80f2f75c3b4bea78e385ea382294882839a22674037b89108a1420e33eb9be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d889c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a48793d7368b992a889f51854c7b63c180", 0xdb}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000640)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d6c918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac76a818f64d28731", 0x5b}], 0x1}}], 0x3, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdf8, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 481.215622ms ago: executing program 2 (id=513): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x552, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3efd7ab4c41335d9, @perf_bp={0x0, 0x7}, 0x12804, 0x0, 0x2, 0x6, 0x400, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3ffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000000)="04000000000000000000000038010000380100000000000000000000000000000000000000000000000000000000000074") setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0) ioctl(r0, 0xc138fd09, &(0x7f0000000000)) add_key(&(0x7f0000000180)='syzkaller\x00', &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) 456.216527ms ago: executing program 3 (id=514): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0xc040480) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x2, 0x3, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000500)=ANY=[], 0x8) getsockopt$inet6_opts(r1, 0x29, 0x36, 0xffffffffffffffff, &(0x7f0000000100)) 434.026081ms ago: executing program 7 (id=515): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x58080, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x9}, 0x0, 0x3, 0x3, 0x4, 0x806, 0x8001, 0x7ffc}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, @perf_config_ext={0x4, 0xa}, 0x0, 0x1, 0xfffffffe, 0x2, 0x3fe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000500)) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688884787", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 412.359164ms ago: executing program 2 (id=516): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x2a040, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x4, 0x7}, 0x0, 0x8e, 0x0, 0x1, 0x0, 0x8, 0xfffc, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffbfffffffffffff, 0xffffffffffffffff, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009"], 0x7c}, 0x1, 0x0, 0x0, 0x20000040}, 0x10) r0 = socket$kcm(0x10, 0x2, 0x4) close(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r1, &(0x7f0000000540)={&(0x7f00000005c0)={0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x26}, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x25}, 0x8000) sendmsg$inet(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000180)="001c", 0x480}], 0x1}, 0x4000841) 326.96406ms ago: executing program 3 (id=517): perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = semget$private(0x0, 0x6, 0x0) semtimedop(r0, &(0x7f00000003c0)=[{0x2, 0x4, 0x800}], 0x1, 0x0) semop(r0, &(0x7f00000000c0), 0x0) semop(r0, &(0x7f0000001240), 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext2\x00', &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000000)={[{@errors_remount}, {@i_version}, {@barrier_val={'barrier', 0x3d, 0x9}}, {@quota}, {@jqfmt_vfsv0}]}, 0x80, 0x640, &(0x7f00000004c0)="$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") socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4008000) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24008041) 216.37305ms ago: executing program 0 (id=518): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x2}, 0x0, 0x80000000, 0x0, 0x0, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt(0xffffffffffffffff, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(0xffffffffffffffff, 0x84, 0x16, 0x0, 0x0) setns(0xc9, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000340)={0x2, {0x2, 0xa00, 0xfdfd, 0x101, 0x100}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="01032757c38d085641a726"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) 98.422152ms ago: executing program 0 (id=519): socket$inet_icmp(0x2, 0x2, 0x1) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c1e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) sendto$packet(0xffffffffffffffff, &(0x7f0000000100)="f257", 0x2, 0x0, 0x0, 0x0) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x5, 0x4) 98.117432ms ago: executing program 2 (id=520): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f00000000c0)='./file0\x00', 0x10840, &(0x7f0000000200)=ANY=[], 0x3, 0x274, &(0x7f0000000840)="$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") prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff6000/0x4000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000fef000/0x11000)=nil, &(0x7f0000ff8000/0x4000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89e, 0xc000, 0xb, 0x10b}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x29, 0x0, 0x7fff0000}]}) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 45.947112ms ago: executing program 0 (id=521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) 0s ago: executing program 7 (id=522): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0xfffffffd, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x21, &(0x7f00000001c0), 0x4) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x3}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.621070][ T150] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.621328][ T150] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.621382][ T150] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.621667][ T150] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.626311][ T3297] veth0_macvtap: entered promiscuous mode [ 32.633729][ T3297] veth1_macvtap: entered promiscuous mode [ 32.639744][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.647034][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.652875][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 32.685804][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 32.721296][ T792] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.721406][ T792] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.721501][ T792] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.721549][ T792] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.721579][ T792] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.721609][ T792] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.721712][ T792] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.721746][ T792] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 32.794217][ T3504] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 32.797492][ T3504] 8021q: VLANs not supported on tunl0 [ 33.284433][ T3528] loop4: detected capacity change from 0 to 256 [ 33.286834][ T3528] ======================================================= [ 33.286834][ T3528] WARNING: The mand mount option has been deprecated and [ 33.286834][ T3528] and is ignored by this kernel. Remove the mand [ 33.286834][ T3528] option from the mount to silence this warning. [ 33.286834][ T3528] ======================================================= [ 33.286976][ T3528] vfat: Unknown parameter '' [ 33.366527][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.366640][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.366703][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.366839][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.366970][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.367017][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.367132][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.367247][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.367347][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.367495][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.367560][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.367677][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.374220][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.374332][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.374401][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.374495][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.374546][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.374596][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.374742][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.374793][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.374842][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.374939][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.374990][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.375135][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.375286][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.375434][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.377399][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.377466][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.377561][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.377746][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.377878][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.377928][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.377977][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.378108][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.378171][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.378256][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.378321][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.378385][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.378451][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.378598][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.378648][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.378862][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.378914][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.379039][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.379109][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.379173][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.379291][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.379374][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.379434][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.379598][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.379666][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.379716][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.379879][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.379929][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.380076][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.380145][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.380326][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.380409][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.380520][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.380603][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.380654][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.380704][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.380847][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.380931][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.380981][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.381094][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.381159][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.381243][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.381341][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.381390][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.381492][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.381553][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.381635][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.385414][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.385496][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.385562][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.385660][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.385743][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.385793][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.385909][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.386006][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.386057][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.386172][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.386238][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.386287][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.386370][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.386448][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.386583][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.386731][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.386921][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.386990][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.387070][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.387140][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.387203][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.387259][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.387350][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.387449][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.387531][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.387633][ T3528] ieee802154 phy1 wpan1: encryption failed: -22 [ 33.582487][ T3535] loop1: detected capacity change from 0 to 512 [ 33.603702][ T3535] EXT4-fs: Ignoring removed nobh option [ 33.615378][ T3536] FAULT_INJECTION: forcing a failure. [ 33.615378][ T3536] name failslab, interval 1, probability 0, space 0, times 1 [ 33.615427][ T3536] CPU: 0 UID: 0 PID: 3536 Comm: syz.4.14 Not tainted syzkaller #0 PREEMPT(lazy) [ 33.615475][ T3536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 33.615514][ T3536] Call Trace: [ 33.615521][ T3536] [ 33.615528][ T3536] __dump_stack+0x1d/0x30 [ 33.615555][ T3536] dump_stack_lvl+0x95/0xd0 [ 33.615660][ T3536] dump_stack+0x15/0x1b [ 33.615683][ T3536] should_fail_ex+0x262/0x280 [ 33.615773][ T3536] ? sk_prot_alloc+0xa8/0x180 [ 33.615796][ T3536] should_failslab+0x8c/0xb0 [ 33.615827][ T3536] __kmalloc_noprof+0xd0/0x4d0 [ 33.615919][ T3536] ? sk_prot_alloc+0xa8/0x180 [ 33.615944][ T3536] sk_prot_alloc+0xa8/0x180 [ 33.616010][ T3536] sk_alloc+0x34/0x3e0 [ 33.616032][ T3536] __netlink_kernel_create+0xe9/0x550 [ 33.616068][ T3536] ? ops_init+0x4b/0x2e0 [ 33.616132][ T3536] nfnetlink_net_init+0x8d/0xd0 [ 33.616165][ T3536] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 33.616215][ T3536] ? __pfx_nfnetlink_bind+0x10/0x10 [ 33.616247][ T3536] ? __pfx_nfnetlink_unbind+0x10/0x10 [ 33.616288][ T3536] ops_init+0x22a/0x2e0 [ 33.616323][ T3536] setup_net+0x9f/0x230 [ 33.616375][ T3536] copy_net_ns+0x333/0x490 [ 33.616485][ T3536] create_new_namespaces+0x1f6/0x420 [ 33.616524][ T3536] unshare_nsproxy_namespaces+0x115/0x150 [ 33.616562][ T3536] ksys_unshare+0x42b/0x710 [ 33.616592][ T3536] __x64_sys_unshare+0x1f/0x30 [ 33.616749][ T3536] x64_sys_call+0x1e33/0x2550 [ 33.616782][ T3536] do_syscall_64+0x112/0x360 [ 33.616844][ T3536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 33.616869][ T3536] RIP: 0033:0x7f1bc6fde159 [ 33.616892][ T3536] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 33.616912][ T3536] RSP: 002b:00007f1bc5a37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 33.616935][ T3536] RAX: ffffffffffffffda RBX: 00007f1bc7265fa0 RCX: 00007f1bc6fde159 [ 33.617017][ T3536] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 33.617109][ T3536] RBP: 00007f1bc707506b R08: 0000000000000000 R09: 0000000000000000 [ 33.617124][ T3536] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 33.617137][ T3536] R13: 00007f1bc7266038 R14: 00007f1bc7265fa0 R15: 00007ffc0c888e68 [ 33.617157][ T3536] [ 33.618505][ T3535] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2 [ 33.624861][ T3535] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #13: comm syz.1.15: inode has both inline data and extents flags [ 33.624891][ T3535] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 33.631231][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 33.631256][ C1] EXT4-fs (loop1): initial error at time 1790706044: ext4_orphan_get:1403: inode 13 [ 33.631296][ C1] EXT4-fs (loop1): last error at time 1790706044: ext4_orphan_get:1403: inode 13 [ 33.631445][ T3535] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.15: couldn't read orphan inode 13 (err -117) [ 33.631473][ T3535] loop1: lost filesystem error report for type 5 error -117 [ 33.632025][ T3535] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 33.632756][ T29] kauditd_printk_skb: 224 callbacks suppressed [ 33.632768][ T29] audit: type=1400 audit(1790706044.054:351): avc: denied { mount } for pid=3534 comm="syz.1.15" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 33.633671][ T3535] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 33.816928][ T3296] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 33.875189][ T29] audit: type=1400 audit(1790706044.294:352): avc: denied { create } for pid=3541 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.946797][ T29] audit: type=1400 audit(1790706044.364:353): avc: denied { unmount } for pid=3297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 34.431086][ T3554] ip_tables: iptables: counters copy to user failed while replacing table [ 34.433386][ T29] audit: type=1400 audit(1790706044.844:354): avc: denied { write } for pid=3553 comm="syz.4.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 34.524996][ T3554] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.525255][ T3554] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.646048][ T3554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 34.672341][ T3554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 34.810390][ T365] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.810433][ T365] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.810468][ T365] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.810503][ T365] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 34.913656][ T29] audit: type=1400 audit(1790706045.334:355): avc: denied { mount } for pid=3559 comm="syz.1.25" name="/" dev="hugetlbfs" ino=1797 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 34.914021][ T3558] TC_ACT_REPEAT abuse ? [ 35.001601][ T3568] loop0: detected capacity change from 0 to 512 [ 35.058845][ T29] audit: type=1400 audit(1790706045.474:356): avc: denied { cpu } for pid=3571 comm="syz.1.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 35.087542][ T29] audit: type=1400 audit(1790706045.504:357): avc: denied { mount } for pid=3567 comm="syz.0.28" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 35.087896][ T29] audit: type=1400 audit(1790706045.504:358): avc: denied { search } for pid=3567 comm="syz.0.28" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 35.087946][ T29] audit: type=1400 audit(1790706045.504:359): avc: denied { search } for pid=3567 comm="syz.0.28" name="events" dev="tracefs" ino=1130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 35.088194][ T29] audit: type=1400 audit(1790706045.504:360): avc: denied { search } for pid=3567 comm="syz.0.28" name="sched" dev="tracefs" ino=5191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 35.851026][ T3510] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 35.851058][ T3510] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 35.851082][ T3510] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 35.851109][ T3510] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 35.851185][ T3510] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 35.851209][ T3510] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 35.851230][ T3510] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 35.851256][ T3510] hid-generic 0000:0000:0001.0001: unknown main item tag 0x0 [ 35.875221][ T3510] hid-generic 0000:0000:0001.0001: hidraw0: HID v0.10 Device [syz0] on syz1 [ 36.045105][ T3581] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33'. [ 36.075595][ T3583] syz.3.34 uses obsolete (PF_INET,SOCK_PACKET) [ 36.735566][ T365] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.824282][ T365] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.871057][ T365] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 36.924973][ T365] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.017730][ T365] bridge_slave_1: left allmulticast mode [ 37.017753][ T365] bridge_slave_1: left promiscuous mode [ 37.017884][ T365] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.020557][ T365] bridge_slave_0: left allmulticast mode [ 37.020575][ T365] bridge_slave_0: left promiscuous mode [ 37.020718][ T365] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.099980][ T365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 37.109294][ T365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 37.111408][ T365] bond0 (unregistering): Released all slaves [ 37.165954][ T365] hsr_slave_0: left promiscuous mode [ 37.166386][ T365] hsr_slave_1: left promiscuous mode [ 37.166936][ T365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 37.166952][ T365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 37.167364][ T365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 37.167380][ T365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 37.176667][ T365] veth1_macvtap: left promiscuous mode [ 37.176824][ T365] veth0_macvtap: left promiscuous mode [ 37.176867][ T365] veth1_vlan: left promiscuous mode [ 37.176899][ T365] veth0_vlan: left promiscuous mode [ 37.301897][ T365] team0 (unregistering): Port device team_slave_1 removed [ 37.304918][ T365] team0 (unregistering): Port device team_slave_0 removed [ 37.339826][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 37.508138][ T3498] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 37.508238][ T3498] hid-generic 0000:0000:0001.0002: unknown main item tag 0x0 [ 37.534134][ T3498] hid-generic 0000:0000:0001.0002: hidraw0: HID v0.10 Device [syz0] on syz1 [ 37.579143][ T3678] fido_id[3678]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 37.580237][ T3614] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.580272][ T3614] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.596389][ T3614] bridge_slave_0: entered allmulticast mode [ 37.596772][ T3614] bridge_slave_0: entered promiscuous mode [ 37.597838][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 37.606600][ T3614] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.606665][ T3614] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.606807][ T3614] bridge_slave_1: entered allmulticast mode [ 37.608359][ T3614] bridge_slave_1: entered promiscuous mode [ 37.646086][ T3614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.649007][ T3614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.678731][ T3614] team0: Port device team_slave_0 added [ 37.679584][ T3614] team0: Port device team_slave_1 added [ 37.707386][ T3614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.708026][ T3614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.708055][ T3614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.708797][ T3614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.708810][ T3614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 37.708910][ T3614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.767786][ T3614] hsr_slave_0: entered promiscuous mode [ 37.768230][ T3614] hsr_slave_1: entered promiscuous mode [ 37.842883][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 39.193443][ T3710] netlink: 8 bytes leftover after parsing attributes in process `syz.0.58'. [ 39.193476][ T3710] netlink: 20 bytes leftover after parsing attributes in process `syz.0.58'. [ 39.212858][ T3710] FAULT_INJECTION: forcing a failure. [ 39.212858][ T3710] name fail_futex, interval 1, probability 0, space 0, times 1 [ 39.212888][ T3710] CPU: 0 UID: 0 PID: 3710 Comm: syz.0.58 Not tainted syzkaller #0 PREEMPT(lazy) [ 39.212935][ T3710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.212949][ T3710] Call Trace: [ 39.212956][ T3710] [ 39.212964][ T3710] __dump_stack+0x1d/0x30 [ 39.213054][ T3710] dump_stack_lvl+0x95/0xd0 [ 39.213076][ T3710] dump_stack+0x15/0x1b [ 39.213138][ T3710] should_fail_ex+0x262/0x280 [ 39.213168][ T3710] should_fail+0xb/0x20 [ 39.213195][ T3710] get_futex_key+0x12d/0xb10 [ 39.213290][ T3710] futex_wait_setup+0x49/0x3e0 [ 39.213312][ T3710] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 39.213375][ T3710] ? hrtimer_active+0xe4/0x110 [ 39.213402][ T3710] __futex_wait+0xa9/0x260 [ 39.213507][ T3710] ? __pfx_futex_wake_mark+0x10/0x10 [ 39.213582][ T3710] futex_wait+0x98/0x1c0 [ 39.213606][ T3710] do_futex+0x391/0x460 [ 39.213641][ T3710] __se_sys_futex+0x2f6/0x370 [ 39.213727][ T3710] __x64_sys_futex+0x78/0x90 [ 39.213832][ T3710] x64_sys_call+0x22e2/0x2550 [ 39.213864][ T3710] do_syscall_64+0x112/0x360 [ 39.213952][ T3710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 39.214046][ T3710] RIP: 0033:0x7f22bcc2e159 [ 39.214124][ T3710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.214146][ T3710] RSP: 002b:00007f22bb6870e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 39.214170][ T3710] RAX: ffffffffffffffda RBX: 00007f22bceb5fa8 RCX: 00007f22bcc2e159 [ 39.214187][ T3710] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f22bceb5fa8 [ 39.214203][ T3710] RBP: 00007f22bceb5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 39.214219][ T3710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.214233][ T3710] R13: 00007f22bceb6038 R14: 00007ffe10b66f70 R15: 00007ffe10b67058 [ 39.214270][ T3710] [ 39.267029][ T29] kauditd_printk_skb: 169 callbacks suppressed [ 39.267044][ T29] audit: type=1400 audit(1790706049.684:530): avc: denied { execute } for pid=3712 comm="syz.4.61" path="/13/file0" dev="tmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 39.284032][ T3614] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 39.304888][ T3614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 39.307093][ T3614] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 39.319449][ T3614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 39.324714][ T3614] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 39.339337][ T29] audit: type=1400 audit(1790706049.754:531): avc: denied { setopt } for pid=3718 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.345024][ T3614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 39.346059][ T3614] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 39.353428][ T29] audit: type=1400 audit(1790706049.774:532): avc: denied { create } for pid=3718 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.381880][ T3614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 39.429485][ T29] audit: type=1400 audit(1790706049.844:533): avc: denied { write } for pid=3711 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.503138][ T29] audit: type=1400 audit(1790706049.924:534): avc: denied { write } for pid=3736 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.556597][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4 [ 39.603238][ T29] audit: type=1400 audit(1790706050.024:535): avc: denied { create } for pid=3738 comm="syz.3.65" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 39.627553][ T3614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 39.643239][ T29] audit: type=1326 audit(1790706050.064:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.0.66" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bcc2e159 code=0x7ffc0000 [ 39.643591][ T29] audit: type=1326 audit(1790706050.064:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.0.66" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bcc2e159 code=0x7ffc0000 [ 39.644317][ T29] audit: type=1326 audit(1790706050.064:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.0.66" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bcc2e159 code=0x7ffc0000 [ 39.644438][ T29] audit: type=1326 audit(1790706050.064:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3746 comm="syz.0.66" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bcc2e159 code=0x7ffc0000 [ 39.653055][ T3614] 8021q: adding VLAN 0 to HW filter on device team0 [ 39.660514][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.660548][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.663512][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.663545][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.922584][ T3614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.198984][ T3391] hid-generic 0000:0000:0001.0003: hidraw0: HID v0.10 Device [syz0] on syz1 [ 40.322247][ T3791] fido_id[3791]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 40.331190][ T3614] veth0_vlan: entered promiscuous mode [ 40.337367][ T3614] veth1_vlan: entered promiscuous mode [ 40.352568][ T3614] veth0_macvtap: entered promiscuous mode [ 40.354364][ T3614] veth1_macvtap: entered promiscuous mode [ 40.359523][ T3614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.365573][ T3614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.369880][ T150] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.369973][ T150] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.370013][ T150] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.720523][ T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.791848][ T3802] loop4: detected capacity change from 0 to 512 [ 41.811551][ T3802] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -13 [ 41.811812][ T3802] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.74: inode #15: comm syz.4.74: iget: illegal inode # [ 41.812142][ T3802] loop4: lost filesystem error report for type 5 error -117 [ 41.813288][ T3802] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.74: couldn't read orphan inode 15 (err -117) [ 41.813407][ T3802] loop4: lost filesystem error report for type 5 error -117 [ 41.862514][ T3802] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.915078][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 41.946586][ T3817] loop0: detected capacity change from 0 to 1024 [ 41.958586][ T3817] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 41.961347][ T3817] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e055c01c, mo2=0002] [ 41.961439][ T3817] System zones: 0-1, 3-36 [ 41.962481][ T3817] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 41.982047][ T3816] loop3: detected capacity change from 0 to 2048 [ 42.012975][ T3816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 42.013036][ T3816] ext4 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 42.055970][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.087705][ T3823] FAULT_INJECTION: forcing a failure. [ 42.087705][ T3823] name failslab, interval 1, probability 0, space 0, times 0 [ 42.087738][ T3823] CPU: 0 UID: 0 PID: 3823 Comm: syz.3.82 Not tainted syzkaller #0 PREEMPT(lazy) [ 42.087773][ T3823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 42.087794][ T3823] Call Trace: [ 42.087802][ T3823] [ 42.087809][ T3823] __dump_stack+0x1d/0x30 [ 42.087885][ T3823] dump_stack_lvl+0x95/0xd0 [ 42.087914][ T3823] dump_stack+0x15/0x1b [ 42.087939][ T3823] should_fail_ex+0x262/0x280 [ 42.087970][ T3823] ? prepare_creds+0x38/0x550 [ 42.088138][ T3823] should_failslab+0x8c/0xb0 [ 42.088248][ T3823] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 42.088279][ T3823] ? irqentry_exit_to_kernel_mode_preempt+0x2b/0x40 [ 42.088378][ T3823] ? prepare_creds+0x38/0x550 [ 42.088405][ T3823] prepare_creds+0x38/0x550 [ 42.088431][ T3823] lookup_user_key+0x204/0xd60 [ 42.088472][ T3823] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 42.088510][ T3823] __se_sys_request_key+0x17e/0x2a0 [ 42.088568][ T3823] __x64_sys_request_key+0x55/0x70 [ 42.088592][ T3823] x64_sys_call+0x1741/0x2550 [ 42.088702][ T3823] do_syscall_64+0x112/0x360 [ 42.088726][ T3823] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 42.088751][ T3823] RIP: 0033:0x7fad9d52e159 [ 42.088776][ T3823] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.088813][ T3823] RSP: 002b:00007fad9bf87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 42.088882][ T3823] RAX: ffffffffffffffda RBX: 00007fad9d7b5fa0 RCX: 00007fad9d52e159 [ 42.088899][ T3823] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 42.088915][ T3823] RBP: 00007fad9d5c506b R08: 0000000000000000 R09: 0000000000000000 [ 42.088978][ T3823] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 42.088994][ T3823] R13: 00007fad9d7b6038 R14: 00007fad9d7b5fa0 R15: 00007fffb44296d8 [ 42.089057][ T3823] [ 42.169698][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 42.866958][ T3836] tipc: Started in network mode [ 42.866991][ T3836] tipc: Node identity 6ac05b80dbf9, cluster identity 4711 [ 42.867044][ T3836] tipc: Enabled bearer , priority 0 [ 42.919455][ T3836] syzkaller0: entered promiscuous mode [ 42.919487][ T3836] syzkaller0: entered allmulticast mode [ 42.933594][ T3836] tipc: Resetting bearer [ 44.333913][ T3833] tipc: Resetting bearer [ 44.359676][ T3833] tipc: Disabling bearer [ 44.371248][ T3846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.88'. [ 44.371278][ T3846] netlink: 'syz.2.88': attribute type 11 has an invalid length. [ 44.373001][ T3510] tipc: Node number set to 2973326208 [ 44.375746][ T3510] hid_parser_main: 14 callbacks suppressed [ 44.375780][ T3510] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 44.375808][ T3510] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 44.375857][ T3510] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 44.375878][ T3510] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 44.375899][ T3510] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 44.375921][ T3510] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 44.376022][ T3510] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 44.376051][ T3510] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 44.378361][ T3510] hid-generic 0000:0000:0001.0004: hidraw0: HID v0.10 Device [syz0] on syz1 [ 44.380151][ T29] kauditd_printk_skb: 831 callbacks suppressed [ 44.380198][ T29] audit: type=1400 audit(1790706054.794:1371): avc: denied { write } for pid=3845 comm="syz.3.89" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 44.384642][ T29] audit: type=1400 audit(1790706054.804:1372): avc: denied { watch } for pid=3850 comm="syz.4.91" path="/21" dev="tmpfs" ino=127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 44.386512][ T3851] process 'syz.4.91' launched './file0' with NULL argv: empty string added [ 44.386821][ T29] audit: type=1400 audit(1790706054.804:1373): avc: denied { execute_no_trans } for pid=3850 comm="syz.4.91" path="/21/file0" dev="tmpfs" ino=132 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 44.399005][ T3846] netlink: 12 bytes leftover after parsing attributes in process `syz.2.88'. [ 44.399051][ T3846] netlink: 'syz.2.88': attribute type 11 has an invalid length. [ 44.399150][ T3846] Zero length message leads to an empty skb [ 44.401127][ T3847] netlink: 28 bytes leftover after parsing attributes in process `syz.3.89'. [ 44.401262][ T3847] netlink: 28 bytes leftover after parsing attributes in process `syz.3.89'. [ 44.410335][ T31] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.410375][ T31] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.410436][ T31] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.410477][ T31] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 44.562049][ T29] audit: type=1326 audit(1790706054.984:1374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.2.95" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ca0ce159 code=0x7ffc0000 [ 44.562156][ T29] audit: type=1326 audit(1790706054.984:1375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.2.95" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ca0ce159 code=0x7ffc0000 [ 44.562853][ T29] audit: type=1326 audit(1790706054.984:1376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.2.95" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ca0ce159 code=0x7ffc0000 [ 44.562943][ T29] audit: type=1326 audit(1790706054.984:1377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.2.95" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ca0ce159 code=0x7ffc0000 [ 44.563663][ T29] audit: type=1326 audit(1790706054.984:1378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.2.95" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=98 compat=0 ip=0x7fc6ca0ce159 code=0x7ffc0000 [ 44.563691][ T29] audit: type=1326 audit(1790706054.984:1379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.2.95" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ca0ce159 code=0x7ffc0000 [ 44.563717][ T29] audit: type=1326 audit(1790706054.984:1380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3856 comm="syz.2.95" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ca0ce159 code=0x7ffc0000 [ 44.857446][ T3875] FAULT_INJECTION: forcing a failure. [ 44.857446][ T3875] name failslab, interval 1, probability 0, space 0, times 0 [ 44.857556][ T3875] CPU: 1 UID: 0 PID: 3875 Comm: syz.0.104 Not tainted syzkaller #0 PREEMPT(lazy) [ 44.857584][ T3875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.857625][ T3875] Call Trace: [ 44.857632][ T3875] [ 44.857641][ T3875] __dump_stack+0x1d/0x30 [ 44.857670][ T3875] dump_stack_lvl+0x95/0xd0 [ 44.857702][ T3875] dump_stack+0x15/0x1b [ 44.857798][ T3875] should_fail_ex+0x262/0x280 [ 44.857825][ T3875] ? assoc_array_insert+0x75/0x19a0 [ 44.857899][ T3875] should_failslab+0x8c/0xb0 [ 44.857972][ T3875] __kmalloc_cache_noprof+0x7a/0x400 [ 44.858045][ T3875] ? assoc_array_insert+0x75/0x19a0 [ 44.858084][ T3875] assoc_array_insert+0x75/0x19a0 [ 44.858204][ T3875] ? __pfx_key_default_cmp+0x10/0x10 [ 44.858307][ T3875] ? __pfx_keyring_search_iterator+0x10/0x10 [ 44.858358][ T3875] __key_link_begin+0x84/0x130 [ 44.858461][ T3875] request_key_and_link+0x5fa/0xe20 [ 44.858492][ T3875] ? __pfx_asymmetric_key_cmp_partial+0x10/0x10 [ 44.858529][ T3875] ? __pfx_keyring_search_iterator+0x10/0x10 [ 44.858622][ T3875] __se_sys_request_key+0x1e9/0x2a0 [ 44.858648][ T3875] __x64_sys_request_key+0x55/0x70 [ 44.858671][ T3875] x64_sys_call+0x1741/0x2550 [ 44.858737][ T3875] do_syscall_64+0x112/0x360 [ 44.858761][ T3875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 44.858786][ T3875] RIP: 0033:0x7f22bcc2e159 [ 44.858803][ T3875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 44.858841][ T3875] RSP: 002b:00007f22bb687028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f9 [ 44.858868][ T3875] RAX: ffffffffffffffda RBX: 00007f22bceb5fa0 RCX: 00007f22bcc2e159 [ 44.858884][ T3875] RDX: 0000200000001fee RSI: 0000200000001ffb RDI: 0000200000000040 [ 44.858900][ T3875] RBP: 00007f22bccc506b R08: 0000000000000000 R09: 0000000000000000 [ 44.858915][ T3875] R10: fffffffffffffffe R11: 0000000000000246 R12: 0000000000000000 [ 44.858931][ T3875] R13: 00007f22bceb6038 R14: 00007f22bceb5fa0 R15: 00007ffe10b67058 [ 44.859018][ T3875] [ 45.141456][ T3881] sctp: [Deprecated]: syz.2.107 (pid 3881) Use of struct sctp_assoc_value in delayed_ack socket option. [ 45.141456][ T3881] Use struct sctp_sack_info instead [ 45.290446][ T3498] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 45.290479][ T3498] hid-generic 0000:0000:0001.0005: unknown main item tag 0x0 [ 45.324158][ T3498] hid-generic 0000:0000:0001.0005: hidraw0: HID v0.10 Device [syz0] on syz1 [ 45.344430][ T3887] fido_id[3887]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 45.739645][ T3889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.111'. [ 45.739701][ T3889] netlink: 15 bytes leftover after parsing attributes in process `syz.4.111'. [ 45.739955][ T3889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.111'. [ 45.739978][ T3889] netlink: 15 bytes leftover after parsing attributes in process `syz.4.111'. [ 45.834307][ T3891] loop5: detected capacity change from 0 to 512 [ 45.880511][ T3891] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 548) [ 45.880543][ T3891] FAT-fs (loop5): Filesystem has been set read-only [ 45.914036][ T3614] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 45.914158][ T3614] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 46.792698][ T3895] syz.0.108 (3895) used greatest stack depth: 10248 bytes left [ 46.822947][ T3909] Illegal XDP return value 4291440640 on prog (id 16) dev syz_tun, expect packet loss! [ 46.872400][ T12] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.892161][ T150] IPVS: starting estimator thread 0... [ 46.939803][ T3915] netlink: 'syz.3.121': attribute type 1 has an invalid length. [ 46.949247][ T12] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.968958][ T3915] 8021q: VLANs not supported on ipvlan1 [ 46.991591][ T3913] IPVS: using max 2544 ests per chain, 127200 per kthread [ 46.993734][ T12] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.043585][ T12] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.057314][ T3926] FAULT_INJECTION: forcing a failure. [ 47.057314][ T3926] name failslab, interval 1, probability 0, space 0, times 0 [ 47.057343][ T3926] CPU: 0 UID: 0 PID: 3926 Comm: syz.3.124 Not tainted syzkaller #0 PREEMPT(lazy) [ 47.057370][ T3926] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.057385][ T3926] Call Trace: [ 47.057392][ T3926] [ 47.057399][ T3926] __dump_stack+0x1d/0x30 [ 47.057466][ T3926] dump_stack_lvl+0x95/0xd0 [ 47.057491][ T3926] dump_stack+0x15/0x1b [ 47.057515][ T3926] should_fail_ex+0x262/0x280 [ 47.057545][ T3926] should_failslab+0x8c/0xb0 [ 47.057604][ T3926] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 47.057715][ T3926] ? sidtab_sid2str_get+0xa0/0x130 [ 47.057740][ T3926] ? sidtab_sid2str_get+0xa0/0x130 [ 47.057766][ T3926] kmemdup_noprof+0x2b/0x70 [ 47.057870][ T3926] sidtab_sid2str_get+0xa0/0x130 [ 47.057911][ T3926] security_sid_to_context_core+0x179/0x2d0 [ 47.057937][ T3926] security_sid_to_context+0x27/0x40 [ 47.057982][ T3926] avc_audit_post_callback+0x9d/0x520 [ 47.058022][ T3926] ? audit_log_lsm_data+0x78c/0xbb0 [ 47.058043][ T3926] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 47.058075][ T3926] common_lsm_audit+0x1ba/0x230 [ 47.058103][ T3926] ? __pfx_avc_audit_post_callback+0x10/0x10 [ 47.058132][ T3926] ? avc_denied+0xe4/0x100 [ 47.058159][ T3926] slow_avc_audit+0x14c/0x190 [ 47.058251][ T3926] cred_has_capability+0x1c1/0x2a0 [ 47.058283][ T3926] selinux_capable+0x31/0x40 [ 47.058324][ T3926] security_capable+0x7b/0x90 [ 47.058351][ T3926] capable+0x4d/0xb0 [ 47.058455][ T3926] do_epoll_ctl_file+0xd7/0x700 [ 47.058490][ T3926] __se_sys_epoll_ctl+0xf1/0x190 [ 47.058528][ T3926] __x64_sys_epoll_ctl+0x55/0x70 [ 47.058633][ T3926] x64_sys_call+0x6a5/0x2550 [ 47.058661][ T3926] do_syscall_64+0x112/0x360 [ 47.058687][ T3926] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.058712][ T3926] RIP: 0033:0x7fad9d52e159 [ 47.058804][ T3926] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.058857][ T3926] RSP: 002b:00007fad9bf87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 47.058879][ T3926] RAX: ffffffffffffffda RBX: 00007fad9d7b5fa0 RCX: 00007fad9d52e159 [ 47.058896][ T3926] RDX: 0000000000000006 RSI: 0000000000000001 RDI: 0000000000000005 [ 47.058949][ T3926] RBP: 00007fad9d5c506b R08: 0000000000000000 R09: 0000000000000000 [ 47.058964][ T3926] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000000 [ 47.058979][ T3926] R13: 00007fad9d7b6038 R14: 00007fad9d7b5fa0 R15: 00007fffb44296d8 [ 47.058999][ T3926] [ 47.222001][ T12] bridge_slave_1: left allmulticast mode [ 47.222022][ T12] bridge_slave_1: left promiscuous mode [ 47.222148][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.232674][ T12] bridge_slave_0: left allmulticast mode [ 47.232695][ T12] bridge_slave_0: left promiscuous mode [ 47.232846][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.369407][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 47.383594][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.385795][ T12] bond0 (unregistering): Released all slaves [ 47.426905][ T12] hsr_slave_0: left promiscuous mode [ 47.428023][ T12] hsr_slave_1: left promiscuous mode [ 47.428486][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.428501][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.428880][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.428892][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.435836][ T12] veth1_macvtap: left promiscuous mode [ 47.435861][ T12] veth0_macvtap: left promiscuous mode [ 47.435929][ T12] veth1_vlan: left promiscuous mode [ 47.436029][ T12] veth0_vlan: left promiscuous mode [ 47.531262][ T12] team0 (unregistering): Port device team_slave_1 removed [ 47.534074][ T12] team0 (unregistering): Port device team_slave_0 removed [ 47.715436][ T3920] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.715467][ T3920] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.715513][ T3920] bridge_slave_0: entered allmulticast mode [ 47.716041][ T3920] bridge_slave_0: entered promiscuous mode [ 47.742840][ T3920] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.742874][ T3920] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.743004][ T3920] bridge_slave_1: entered allmulticast mode [ 47.743522][ T3920] bridge_slave_1: entered promiscuous mode [ 47.744076][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 47.788888][ T3920] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 47.789880][ T3920] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 47.818216][ T3920] team0: Port device team_slave_0 added [ 47.818979][ T3920] team0: Port device team_slave_1 added [ 47.840399][ T3920] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 47.840414][ T3920] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.840443][ T3920] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 47.841119][ T3920] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 47.841130][ T3920] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 47.841161][ T3920] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 47.947265][ T3920] hsr_slave_0: entered promiscuous mode [ 47.947789][ T3920] hsr_slave_1: entered promiscuous mode [ 47.949500][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 48.049328][ T3920] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 48.053594][ T3920] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 48.055604][ T3920] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 48.065056][ T3920] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 48.065686][ T3920] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 48.074044][ T3920] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 48.074596][ T3920] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 48.079409][ T3920] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 48.118156][ T3920] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.118200][ T3920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.118345][ T3920] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.118390][ T3920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.161170][ T3920] 8021q: adding VLAN 0 to HW filter on device bond0 [ 48.169207][ T365] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.170016][ T365] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.195082][ T3920] 8021q: adding VLAN 0 to HW filter on device team0 [ 48.199210][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.199246][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.206340][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.206368][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.265787][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 48.379046][ T3920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.477520][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 48.576292][ T3920] veth0_vlan: entered promiscuous mode [ 48.578910][ T3920] veth1_vlan: entered promiscuous mode [ 48.589574][ T3920] veth0_macvtap: entered promiscuous mode [ 48.591362][ T3920] veth1_macvtap: entered promiscuous mode [ 48.597136][ T3920] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.615007][ T3920] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.630355][ T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.630557][ T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.630600][ T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.630630][ T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.949048][ T29] kauditd_printk_skb: 306 callbacks suppressed [ 49.949063][ T29] audit: type=1400 audit(1790706060.364:1687): avc: denied { write } for pid=4063 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.052954][ T29] audit: type=1400 audit(1790706060.474:1688): avc: denied { write } for pid=4074 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.153422][ T29] audit: type=1400 audit(1790706060.574:1689): avc: denied { create } for pid=4087 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.164733][ T3378] hid_parser_main: 6 callbacks suppressed [ 50.164806][ T3378] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0 [ 50.164843][ T3378] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0 [ 50.164868][ T3378] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0 [ 50.164892][ T3378] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0 [ 50.164917][ T3378] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0 [ 50.164942][ T3378] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0 [ 50.165035][ T3378] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0 [ 50.165060][ T3378] hid-generic 0000:0000:0001.0006: unknown main item tag 0x0 [ 50.165490][ T3378] hid-generic 0000:0000:0001.0006: hidraw0: HID v0.10 Device [syz0] on syz1 [ 50.172147][ T29] audit: type=1400 audit(1790706060.574:1690): avc: denied { connect } for pid=4087 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.197273][ T29] audit: type=1400 audit(1790706060.614:1691): avc: denied { write } for pid=4087 comm="syz.4.131" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 50.226404][ T4091] fido_id[4091]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 50.324243][ T4096] loop0: detected capacity change from 0 to 512 [ 50.343451][ T4096] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 50.343537][ T4096] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 50.394443][ T29] audit: type=1400 audit(1790706060.814:1692): avc: denied { setattr } for pid=4095 comm="syz.0.147" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 50.394737][ T4096] Quota error (device loop0): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 50.394780][ T4096] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 50.394809][ T4096] EXT4-fs error (device loop0): ext4_acquire_dquot:7069: comm syz.0.147: Failed to acquire dquot type 0 [ 50.456419][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 50.477266][ T29] audit: type=1326 audit(1790706060.894:1693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.6.134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab220e159 code=0x7ffc0000 [ 50.477780][ T29] audit: type=1326 audit(1790706060.894:1694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4107 comm="syz.6.134" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3ab220e159 code=0x7ffc0000 [ 50.661377][ T4123] device-mapper: ioctl: Invalid ioctl structure: name t, dev fc00 [ 50.735028][ T4135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'. [ 50.735120][ T4135] netlink: 8 bytes leftover after parsing attributes in process `syz.0.146'. [ 50.784261][ T4141] netlink: 'syz.0.150': attribute type 1 has an invalid length. [ 50.784294][ T4141] netlink: 64823 bytes leftover after parsing attributes in process `syz.0.150'. [ 52.719399][ T4168] FAULT_INJECTION: forcing a failure. [ 52.719399][ T4168] name failslab, interval 1, probability 0, space 0, times 0 [ 52.719447][ T4168] CPU: 0 UID: 0 PID: 4168 Comm: syz.6.155 Not tainted syzkaller #0 PREEMPT(lazy) [ 52.719476][ T4168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.719488][ T4168] Call Trace: [ 52.719494][ T4168] [ 52.719560][ T4168] __dump_stack+0x1d/0x30 [ 52.719590][ T4168] dump_stack_lvl+0x95/0xd0 [ 52.719618][ T4168] dump_stack+0x15/0x1b [ 52.719714][ T4168] should_fail_ex+0x262/0x280 [ 52.719745][ T4168] should_failslab+0x8c/0xb0 [ 52.719784][ T4168] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 52.719830][ T4168] ? __d_alloc+0x34/0x320 [ 52.719857][ T4168] ? __d_alloc+0x34/0x320 [ 52.719938][ T4168] __d_alloc+0x34/0x320 [ 52.719968][ T4168] ? d_alloc_pseudo+0x13/0x80 [ 52.719999][ T4168] d_alloc_pseudo+0x1e/0x80 [ 52.720062][ T4168] alloc_path_pseudo+0xa4/0x140 [ 52.720090][ T4168] alloc_file_pseudo+0x55/0x120 [ 52.720120][ T4168] anon_inode_getfile+0xa0/0x120 [ 52.720159][ T4168] __se_sys_perf_event_open+0xbfa/0x1280 [ 52.720216][ T4168] __x64_sys_perf_event_open+0x67/0x80 [ 52.720265][ T4168] x64_sys_call+0x1f25/0x2550 [ 52.720299][ T4168] do_syscall_64+0x112/0x360 [ 52.720322][ T4168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 52.720419][ T4168] RIP: 0033:0x7f3ab220e159 [ 52.720438][ T4168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 52.720458][ T4168] RSP: 002b:00007f3ab0c67028 EFLAGS: 00000246 ORIG_RAX: 000000000000012a [ 52.720533][ T4168] RAX: ffffffffffffffda RBX: 00007f3ab2495fa0 RCX: 00007f3ab220e159 [ 52.720550][ T4168] RDX: 0000004000000000 RSI: 0000000000000000 RDI: 00002000000005c0 [ 52.720566][ T4168] RBP: 00007f3ab22a506b R08: 0000000000000003 R09: 0000000000000000 [ 52.720586][ T4168] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 52.720602][ T4168] R13: 00007f3ab2496038 R14: 00007f3ab2495fa0 R15: 00007ffd938da908 [ 52.720754][ T4168] [ 52.742668][ T4176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.158'. [ 52.758141][ T4176] 8021q: adding VLAN 0 to HW filter on device bond1 [ 52.769046][ T4174] loop0: detected capacity change from 0 to 1024 [ 52.781560][ T4174] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.873075][ T4176] macvlan2: entered promiscuous mode [ 52.873095][ T4176] macvlan2: entered allmulticast mode [ 52.882677][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.164633][ T4203] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 53.868529][ T4230] sctp: [Deprecated]: syz.3.171 (pid 4230) Use of int in max_burst socket option. [ 53.868529][ T4230] Use struct sctp_assoc_value instead [ 55.449241][ T4251] FAULT_INJECTION: forcing a failure. [ 55.449241][ T4251] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 55.449344][ T4251] CPU: 0 UID: 0 PID: 4251 Comm: syz.3.174 Not tainted syzkaller #0 PREEMPT(lazy) [ 55.449374][ T4251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.449387][ T4251] Call Trace: [ 55.449393][ T4251] [ 55.449399][ T4251] __dump_stack+0x1d/0x30 [ 55.449424][ T4251] dump_stack_lvl+0x95/0xd0 [ 55.449471][ T4251] dump_stack+0x15/0x1b [ 55.449529][ T4251] should_fail_ex+0x262/0x280 [ 55.449558][ T4251] should_fail_alloc_page+0xf2/0x100 [ 55.449661][ T4251] __alloc_frozen_pages_noprof+0x157/0x400 [ 55.449697][ T4251] alloc_pages_mpol+0xaf/0x1d0 [ 55.449725][ T4251] alloc_pages_noprof+0x94/0x140 [ 55.449755][ T4251] __pud_alloc+0x47/0x460 [ 55.449850][ T4251] handle_mm_fault+0x2b12/0x3bb0 [ 55.449884][ T4251] ? vma_is_secretmem+0x16/0x30 [ 55.449962][ T4251] ? check_vma_flags+0x272/0x3a0 [ 55.449987][ T4251] __get_user_pages+0x12e9/0x1eb0 [ 55.450017][ T4251] get_user_pages_remote+0x1d5/0x6b0 [ 55.450121][ T4251] ? down_read+0x77/0xb0 [ 55.450215][ T4251] copy_string_kernel+0x1c6/0x460 [ 55.450248][ T4251] do_execveat_common+0x650/0x8a0 [ 55.450284][ T4251] __x64_sys_execveat+0x76/0xa0 [ 55.450375][ T4251] x64_sys_call+0x21ae/0x2550 [ 55.450461][ T4251] do_syscall_64+0x112/0x360 [ 55.450489][ T4251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.450515][ T4251] RIP: 0033:0x7fad9d52e159 [ 55.450535][ T4251] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.450557][ T4251] RSP: 002b:00007fad9bf87028 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 55.450581][ T4251] RAX: ffffffffffffffda RBX: 00007fad9d7b5fa0 RCX: 00007fad9d52e159 [ 55.450651][ T4251] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000006 [ 55.450669][ T4251] RBP: 00007fad9d5c506b R08: 0000000000001000 R09: 0000000000000000 [ 55.450752][ T4251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.450769][ T4251] R13: 00007fad9d7b6038 R14: 00007fad9d7b5fa0 R15: 00007fffb44296d8 [ 55.450794][ T4251] [ 55.654760][ T4272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.179'. [ 55.657268][ T29] kauditd_printk_skb: 470 callbacks suppressed [ 55.657282][ T29] audit: type=1400 audit(1790706066.074:2165): avc: denied { write } for pid=4264 comm="syz.3.177" name="ip6_tables_names" dev="proc" ino=4026532957 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 55.751019][ T29] audit: type=1400 audit(1790706066.174:2166): avc: denied { name_bind } for pid=4282 comm="syz.4.181" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 55.763368][ T29] audit: type=1400 audit(1790706066.184:2167): avc: denied { create } for pid=4283 comm="syz.6.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 55.786506][ T29] audit: type=1400 audit(1790706066.204:2168): avc: denied { ioctl } for pid=4283 comm="syz.6.182" path="socket:[8777]" dev="sockfs" ino=8777 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 55.801746][ T29] audit: type=1400 audit(1790706066.204:2169): avc: denied { write } for pid=4283 comm="syz.6.182" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 56.038244][ T4289] loop3: detected capacity change from 0 to 8192 [ 56.076171][ T4289] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 56.271262][ T29] audit: type=1400 audit(1790706066.694:2170): avc: denied { setopt } for pid=4349 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.361171][ T29] audit: type=1400 audit(1790706066.784:2171): avc: denied { bind } for pid=4349 comm="syz.0.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 56.370668][ T29] audit: type=1400 audit(1790706066.794:2172): avc: denied { create } for pid=4354 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 56.385441][ T29] audit: type=1400 audit(1790706066.794:2173): avc: denied { ioctl } for pid=4354 comm="syz.2.192" path="socket:[8838]" dev="sockfs" ino=8838 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 56.388888][ T29] audit: type=1400 audit(1790706066.794:2174): avc: denied { getopt } for pid=4354 comm="syz.2.192" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 57.040765][ T4378] loop0: detected capacity change from 0 to 128 [ 57.041932][ T4375] netlink: 4 bytes leftover after parsing attributes in process `syz.6.197'. [ 57.076312][ T4378] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 57.079620][ T4378] ext4 filesystem being mounted at /42/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.186874][ T4390] loop4: detected capacity change from 0 to 1024 [ 57.203830][ T4390] EXT4-fs: Ignoring removed nomblk_io_submit option [ 57.224145][ T4390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.253799][ T4395] FAULT_INJECTION: forcing a failure. [ 57.253799][ T4395] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 57.253872][ T4395] CPU: 1 UID: 0 PID: 4395 Comm: syz.6.201 Not tainted syzkaller #0 PREEMPT(lazy) [ 57.253902][ T4395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.253915][ T4395] Call Trace: [ 57.253922][ T4395] [ 57.253928][ T4395] __dump_stack+0x1d/0x30 [ 57.253952][ T4395] dump_stack_lvl+0x95/0xd0 [ 57.254016][ T4395] dump_stack+0x15/0x1b [ 57.254078][ T4395] should_fail_ex+0x262/0x280 [ 57.254109][ T4395] should_fail+0xb/0x20 [ 57.254136][ T4395] should_fail_usercopy+0x1a/0x20 [ 57.254250][ T4395] _copy_from_user+0x1c/0xb0 [ 57.254280][ T4395] sk_getsockopt+0xcf/0x1a30 [ 57.254364][ T4395] ? rep_movs_alternative+0x1e/0xa0 [ 57.254412][ T4395] do_sock_getsockopt+0x179/0x570 [ 57.254438][ T4395] __x64_sys_getsockopt+0x11d/0x1a0 [ 57.254467][ T4395] x64_sys_call+0x1032/0x2550 [ 57.254539][ T4395] do_syscall_64+0x112/0x360 [ 57.254563][ T4395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.254590][ T4395] RIP: 0033:0x7f3ab220e159 [ 57.254609][ T4395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.254631][ T4395] RSP: 002b:00007f3ab0c67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 57.254726][ T4395] RAX: ffffffffffffffda RBX: 00007f3ab2495fa0 RCX: 00007f3ab220e159 [ 57.254739][ T4395] RDX: 0000000000000039 RSI: 0000000000000001 RDI: 0000000000000005 [ 57.254753][ T4395] RBP: 00007f3ab22a506b R08: 0000000000000000 R09: 0000000000000000 [ 57.254766][ T4395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.254778][ T4395] R13: 00007f3ab2496038 R14: 00007f3ab2495fa0 R15: 00007ffd938da908 [ 57.254854][ T4395] [ 57.454412][ T3301] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.513133][ T4405] netlink: 'syz.6.206': attribute type 1 has an invalid length. [ 57.643275][ T4414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 57.643294][ T4414] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 57.808850][ T4425] netlink: 36 bytes leftover after parsing attributes in process `syz.3.215'. [ 57.866626][ T4425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.215'. [ 58.000062][ T4427] loop6: detected capacity change from 0 to 512 [ 58.018845][ T4437] netlink: 'syz.0.220': attribute type 1 has an invalid length. [ 58.041717][ T4437] bond1: entered promiscuous mode [ 58.042621][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.042883][ T4427] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 58.042993][ T4427] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 58.043252][ T4437] 8021q: adding VLAN 0 to HW filter on device bond1 [ 58.102114][ T4437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.220'. [ 58.102154][ T4437] netlink: 12 bytes leftover after parsing attributes in process `syz.0.220'. [ 58.107868][ T4427] EXT4-fs error (device loop6): ext4_orphan_get:1429: comm syz.6.216: bad orphan inode 131083 [ 58.107908][ T4427] loop6: lost filesystem error report for type 5 error -117 [ 58.115095][ T4427] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 58.191749][ T4446] bond1: (slave bridge1): making interface the new active one [ 58.191773][ T4446] bridge1: entered promiscuous mode [ 58.202910][ T4446] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 58.356913][ T3920] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.367141][ T4456] tipc: Enabled bearer , priority 0 [ 58.529345][ T4456] syzkaller0: entered promiscuous mode [ 58.529371][ T4456] syzkaller0: entered allmulticast mode [ 58.530000][ T4456] tipc: Resetting bearer [ 58.573993][ T4455] tipc: Resetting bearer [ 58.621835][ T4455] tipc: Disabling bearer [ 58.667204][ T4459] loop4: detected capacity change from 0 to 1024 [ 58.678280][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b302600: rx timeout, send abort [ 58.693070][ T4459] EXT4-fs: Ignoring removed i_version option [ 58.712706][ T4459] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 58.712967][ T4459] EXT4-fs (loop4): couldn't mount as ext2 due to feature incompatibilities [ 59.178270][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b333a00: rx timeout, send abort [ 59.178303][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b302600: abort rx timeout. Force session deactivation [ 59.278119][ T4517] FAULT_INJECTION: forcing a failure. [ 59.278119][ T4517] name failslab, interval 1, probability 0, space 0, times 0 [ 59.278153][ T4517] CPU: 0 UID: 0 PID: 4517 Comm: syz.6.244 Not tainted syzkaller #0 PREEMPT(lazy) [ 59.278182][ T4517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.278266][ T4517] Call Trace: [ 59.278273][ T4517] [ 59.278280][ T4517] __dump_stack+0x1d/0x30 [ 59.278328][ T4517] dump_stack_lvl+0x95/0xd0 [ 59.278357][ T4517] dump_stack+0x15/0x1b [ 59.278379][ T4517] should_fail_ex+0x262/0x280 [ 59.278410][ T4517] ? nft_obj_init+0x3c/0x220 [ 59.278507][ T4517] should_failslab+0x8c/0xb0 [ 59.278606][ T4517] __kmalloc_noprof+0xd0/0x4d0 [ 59.278649][ T4517] ? nft_obj_init+0x3c/0x220 [ 59.278709][ T4517] nft_obj_init+0x3c/0x220 [ 59.278756][ T4517] nf_tables_newobj+0x76b/0x1160 [ 59.278803][ T4517] nfnetlink_rcv+0xbf7/0x1740 [ 59.278853][ T4517] netlink_unicast+0x5a9/0x680 [ 59.278956][ T4517] netlink_sendmsg+0x5be/0x6f0 [ 59.278980][ T4517] ? __pfx_netlink_sendmsg+0x10/0x10 [ 59.279001][ T4517] ____sys_sendmsg+0x532/0x580 [ 59.279103][ T4517] ___sys_sendmsg+0x195/0x1e0 [ 59.279138][ T4517] __x64_sys_sendmsg+0xd4/0x160 [ 59.279169][ T4517] x64_sys_call+0x22ab/0x2550 [ 59.279277][ T4517] do_syscall_64+0x112/0x360 [ 59.279306][ T4517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.279333][ T4517] RIP: 0033:0x7f3ab220e159 [ 59.279361][ T4517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.279385][ T4517] RSP: 002b:00007f3ab0c67028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 59.279409][ T4517] RAX: ffffffffffffffda RBX: 00007f3ab2495fa0 RCX: 00007f3ab220e159 [ 59.279434][ T4517] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000004 [ 59.279447][ T4517] RBP: 00007f3ab22a506b R08: 0000000000000000 R09: 0000000000000000 [ 59.279460][ T4517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 59.279471][ T4517] R13: 00007f3ab2496038 R14: 00007f3ab2495fa0 R15: 00007ffd938da908 [ 59.279491][ T4517] [ 59.678251][ C0] vcan0: j1939_tp_rxtimer: 0xffff88811b333a00: abort rx timeout. Force session deactivation [ 59.975857][ T4586] loop3: detected capacity change from 0 to 128 [ 60.012490][ T4586] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 60.013375][ T4586] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 60.052866][ T4595] loop6: detected capacity change from 0 to 1024 [ 60.124950][ T4595] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 60.147694][ T4345] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 60.215210][ T4591] syzkaller0: entered promiscuous mode [ 60.215275][ T4591] syzkaller0: entered allmulticast mode [ 60.277482][ T3920] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.289899][ T4613] netlink: 'syz.2.266': attribute type 15 has an invalid length. [ 60.289946][ T4613] netlink: 11870 bytes leftover after parsing attributes in process `syz.2.266'. [ 60.296792][ T4613] netlink: 'syz.2.266': attribute type 6 has an invalid length. [ 60.296838][ T4613] netlink: 'syz.2.266': attribute type 7 has an invalid length. [ 60.296864][ T4613] netlink: 'syz.2.266': attribute type 11 has an invalid length. [ 60.296889][ T4613] netlink: 'syz.2.266': attribute type 15 has an invalid length. [ 60.296987][ T4613] netlink: 'syz.2.266': attribute type 16 has an invalid length. [ 60.297013][ T4613] netlink: 'syz.2.266': attribute type 21 has an invalid length. [ 60.297103][ T4613] netlink: 'syz.2.266': attribute type 25 has an invalid length. [ 60.532814][ T4616] FAULT_INJECTION: forcing a failure. [ 60.532814][ T4616] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 60.532891][ T4616] CPU: 0 UID: 0 PID: 4616 Comm: syz.3.267 Not tainted syzkaller #0 PREEMPT(lazy) [ 60.532918][ T4616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.532933][ T4616] Call Trace: [ 60.532941][ T4616] [ 60.532950][ T4616] __dump_stack+0x1d/0x30 [ 60.532980][ T4616] dump_stack_lvl+0x95/0xd0 [ 60.533054][ T4616] dump_stack+0x15/0x1b [ 60.533074][ T4616] should_fail_ex+0x262/0x280 [ 60.533105][ T4616] should_fail+0xb/0x20 [ 60.533132][ T4616] should_fail_usercopy+0x1a/0x20 [ 60.533237][ T4616] copy_fpstate_to_sigframe+0x61c/0x7b0 [ 60.533268][ T4616] ? copy_fpstate_to_sigframe+0xe5/0x7b0 [ 60.533302][ T4616] ? x86_task_fpu+0x36/0x60 [ 60.533323][ T4616] get_sigframe+0x34f/0x470 [ 60.533397][ T4616] ? _raw_spin_unlock_irq+0x9/0x30 [ 60.533428][ T4616] x64_setup_rt_frame+0xa7/0x4e0 [ 60.533459][ T4616] arch_do_signal_or_restart+0x27c/0x480 [ 60.533549][ T4616] exit_to_user_mode_loop+0x15d/0x8c0 [ 60.533588][ T4616] ? __se_sys_clock_nanosleep+0x223/0x260 [ 60.533618][ T4616] do_syscall_64+0x212/0x360 [ 60.533646][ T4616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.533694][ T4616] RIP: 0033:0x7fad9d52e159 [ 60.533711][ T4616] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.533733][ T4616] RSP: 002b:00007fad9bf87028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 60.533835][ T4616] RAX: fffffffffffffffc RBX: 00007fad9d7b5fa0 RCX: 00007fad9d52e159 [ 60.533851][ T4616] RDX: 0000200000002180 RSI: 0000000000000000 RDI: 0000000000000002 [ 60.533867][ T4616] RBP: 00007fad9d5c506b R08: 0000000000000000 R09: 0000000000000000 [ 60.533882][ T4616] R10: 00002000000021c0 R11: 0000000000000246 R12: 0000000000000000 [ 60.533897][ T4616] R13: 00007fad9d7b6038 R14: 00007fad9d7b5fa0 R15: 00007fffb44296d8 [ 60.533916][ T4616] [ 60.849883][ T4638] gretap1: entered promiscuous mode [ 60.899264][ T4640] 8021q: adding VLAN 0 to HW filter on device bond2 [ 60.972068][ T4640] bond2: (slave geneve2): making interface the new active one [ 60.977697][ T4640] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 61.045775][ T4640] syz.3.276 (4640) used greatest stack depth: 10120 bytes left [ 61.141375][ T29] kauditd_printk_skb: 125 callbacks suppressed [ 61.141392][ T29] audit: type=1400 audit(1790708887.564:2300): avc: denied { write } for pid=4642 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.237533][ T29] audit: type=1400 audit(1790708887.654:2301): avc: denied { write } for pid=4660 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 61.563853][ T4667] loop0: detected capacity change from 0 to 512 [ 61.980076][ T4654] bond1: entered allmulticast mode [ 61.980113][ T4654] bond1: entered promiscuous mode [ 61.980328][ T4654] macvlan2: left promiscuous mode [ 61.980374][ T4654] bond1: left promiscuous mode [ 61.980502][ T4654] macvlan2: left allmulticast mode [ 61.980518][ T4654] bond1: left allmulticast mode [ 61.980609][ T4654] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 62.035076][ T4671] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 62.088603][ T29] audit: type=1326 audit(1790708888.504:2302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.0.288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bcc2e159 code=0x7ffc0000 [ 62.103587][ T29] audit: type=1326 audit(1790708888.514:2303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.0.288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bcc2e159 code=0x7ffc0000 [ 62.123805][ T29] audit: type=1326 audit(1790708888.534:2304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.0.288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bcc2e159 code=0x7ffc0000 [ 62.124116][ T29] audit: type=1326 audit(1790708888.534:2305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.0.288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bcc2e159 code=0x7ffc0000 [ 62.137019][ T29] audit: type=1326 audit(1790708888.534:2306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.0.288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f22bcc2e159 code=0x7ffc0000 [ 62.180103][ T29] audit: type=1326 audit(1790708888.584:2307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.0.288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f22bcc2e159 code=0x7ffc0000 [ 62.180192][ T29] audit: type=1326 audit(1790708888.584:2308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.0.288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f22bcc2dec2 code=0x7ffc0000 [ 62.180219][ T29] audit: type=1326 audit(1790708888.584:2309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4684 comm="syz.0.288" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f22bcc2df57 code=0x7ffc0000 [ 62.506723][ T4701] FAULT_INJECTION: forcing a failure. [ 62.506723][ T4701] name failslab, interval 1, probability 0, space 0, times 0 [ 62.506804][ T4701] CPU: 1 UID: 0 PID: 4701 Comm: syz.6.293 Not tainted syzkaller #0 PREEMPT(lazy) [ 62.506834][ T4701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 62.506850][ T4701] Call Trace: [ 62.506858][ T4701] [ 62.506867][ T4701] __dump_stack+0x1d/0x30 [ 62.506895][ T4701] dump_stack_lvl+0x95/0xd0 [ 62.506921][ T4701] dump_stack+0x15/0x1b [ 62.506946][ T4701] should_fail_ex+0x262/0x280 [ 62.506978][ T4701] ? copy_sighand+0x52/0x1a0 [ 62.507065][ T4701] should_failslab+0x8c/0xb0 [ 62.507119][ T4701] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 62.507167][ T4701] ? copy_sighand+0x52/0x1a0 [ 62.507195][ T4701] copy_sighand+0x52/0x1a0 [ 62.507223][ T4701] copy_process+0x102c/0x2360 [ 62.507297][ T4701] kernel_clone+0x1c0/0x5f0 [ 62.507330][ T4701] __se_sys_clone3+0x1f5/0x230 [ 62.507370][ T4701] ? switch_fpu_return+0xe7/0x1b0 [ 62.507398][ T4701] __x64_sys_clone3+0x31/0x40 [ 62.507437][ T4701] x64_sys_call+0x437/0x2550 [ 62.507462][ T4701] do_syscall_64+0x112/0x360 [ 62.507487][ T4701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.507585][ T4701] RIP: 0033:0x7f3ab220e159 [ 62.507600][ T4701] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.507619][ T4701] RSP: 002b:00007f3ab0c66ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 62.507642][ T4701] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f3ab220e159 [ 62.507659][ T4701] RDX: 00007f3ab0c66f10 RSI: 0000000000000058 RDI: 00007f3ab0c66f10 [ 62.507685][ T4701] RBP: 00007f3ab22a506b R08: 0000000000000000 R09: 0000000000000058 [ 62.507700][ T4701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 62.507744][ T4701] R13: 00007f3ab2496038 R14: 00007f3ab2495fa0 R15: 00007ffd938da908 [ 62.507763][ T4701] [ 62.536347][ T4706] loop3: detected capacity change from 0 to 512 [ 62.557327][ T4706] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 62.865604][ T4723] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 63.010680][ T4731] netlink: 40 bytes leftover after parsing attributes in process `syz.4.302'. [ 63.227971][ T4740] FAULT_INJECTION: forcing a failure. [ 63.227971][ T4740] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 63.228013][ T4740] CPU: 1 UID: 0 PID: 4740 Comm: syz.6.307 Not tainted syzkaller #0 PREEMPT(lazy) [ 63.228057][ T4740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 63.228072][ T4740] Call Trace: [ 63.228081][ T4740] [ 63.228166][ T4740] __dump_stack+0x1d/0x30 [ 63.228192][ T4740] dump_stack_lvl+0x95/0xd0 [ 63.228218][ T4740] dump_stack+0x15/0x1b [ 63.228243][ T4740] should_fail_ex+0x262/0x280 [ 63.228351][ T4740] should_fail+0xb/0x20 [ 63.228397][ T4740] should_fail_usercopy+0x1a/0x20 [ 63.228431][ T4740] _copy_to_user+0x20/0xa0 [ 63.228488][ T4740] inotify_read+0x215/0x640 [ 63.228520][ T4740] ? __pfx_woken_wake_function+0x10/0x10 [ 63.228592][ T4740] ? __pfx_inotify_read+0x10/0x10 [ 63.228620][ T4740] vfs_readv+0x417/0x6d0 [ 63.228647][ T4740] do_readv+0xe9/0x210 [ 63.228739][ T4740] __x64_sys_readv+0x45/0x50 [ 63.228856][ T4740] x64_sys_call+0x1b4b/0x2550 [ 63.228885][ T4740] do_syscall_64+0x112/0x360 [ 63.228909][ T4740] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.228961][ T4740] RIP: 0033:0x7f3ab220e159 [ 63.228977][ T4740] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.228994][ T4740] RSP: 002b:00007f3ab0c67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 63.229014][ T4740] RAX: ffffffffffffffda RBX: 00007f3ab2495fa0 RCX: 00007f3ab220e159 [ 63.229027][ T4740] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 63.229068][ T4740] RBP: 00007f3ab22a506b R08: 0000000000000000 R09: 0000000000000000 [ 63.229084][ T4740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.229096][ T4740] R13: 00007f3ab2496038 R14: 00007f3ab2495fa0 R15: 00007ffd938da908 [ 63.229113][ T4740] [ 63.461956][ T4748] loop6: detected capacity change from 0 to 512 [ 63.480235][ T4748] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 63.524616][ T4748] EXT4-fs (loop6): 1 truncate cleaned up [ 63.544345][ T4748] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.726038][ T4764] loop0: detected capacity change from 0 to 8192 [ 63.815314][ T4263] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.850595][ T4748] syz.6.308 (4748) used greatest stack depth: 9928 bytes left [ 63.851889][ T3920] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.022604][ T4777] bond1: left promiscuous mode [ 64.022628][ T4777] bridge1: left promiscuous mode [ 64.028400][ T4777] 8021q: adding VLAN 0 to HW filter on device eth0 [ 64.341237][ T4781] loop0: detected capacity change from 0 to 512 [ 64.770523][ T4797] FAULT_INJECTION: forcing a failure. [ 64.770523][ T4797] name fail_futex, interval 1, probability 0, space 0, times 0 [ 64.770556][ T4797] CPU: 1 UID: 0 PID: 4797 Comm: syz.3.327 Not tainted syzkaller #0 PREEMPT(lazy) [ 64.770586][ T4797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 64.770606][ T4797] Call Trace: [ 64.770613][ T4797] [ 64.770622][ T4797] __dump_stack+0x1d/0x30 [ 64.770652][ T4797] dump_stack_lvl+0x95/0xd0 [ 64.770747][ T4797] dump_stack+0x15/0x1b [ 64.770772][ T4797] should_fail_ex+0x262/0x280 [ 64.770804][ T4797] should_fail+0xb/0x20 [ 64.770871][ T4797] get_futex_key+0x12d/0xb10 [ 64.770898][ T4797] ? dput+0x28/0x50 [ 64.770920][ T4797] ? tty_kref_put+0xdc/0x100 [ 64.771036][ T4797] futex_wait_setup+0x49/0x3e0 [ 64.771062][ T4797] ? __cgroup_account_cputime+0x83/0xa0 [ 64.771090][ T4797] ? update_se+0xc1/0x3b0 [ 64.771120][ T4797] __futex_wait+0xa9/0x260 [ 64.771200][ T4797] ? __pfx_futex_wake_mark+0x10/0x10 [ 64.771227][ T4797] futex_wait+0x98/0x1c0 [ 64.771254][ T4797] do_futex+0x391/0x460 [ 64.771289][ T4797] ? kmem_cache_free+0x106/0x3b0 [ 64.771374][ T4797] __se_sys_futex+0x2f6/0x370 [ 64.771412][ T4797] __x64_sys_futex+0x78/0x90 [ 64.771455][ T4797] x64_sys_call+0x22e2/0x2550 [ 64.771486][ T4797] do_syscall_64+0x112/0x360 [ 64.771573][ T4797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 64.771600][ T4797] RIP: 0033:0x7fad9d52e159 [ 64.771683][ T4797] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.771772][ T4797] RSP: 002b:00007fad9bf870e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 64.771797][ T4797] RAX: ffffffffffffffda RBX: 00007fad9d7b5fa8 RCX: 00007fad9d52e159 [ 64.771814][ T4797] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fad9d7b5fa8 [ 64.771830][ T4797] RBP: 00007fad9d7b5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 64.771850][ T4797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.771865][ T4797] R13: 00007fad9d7b6038 R14: 00007fffb44295f0 R15: 00007fffb44296d8 [ 64.771886][ T4797] [ 65.133246][ T4810] 9p: Bad value for 'rfdno' [ 65.141111][ T4815] FAULT_INJECTION: forcing a failure. [ 65.141111][ T4815] name failslab, interval 1, probability 0, space 0, times 0 [ 65.141141][ T4815] CPU: 0 UID: 0 PID: 4815 Comm: syz.0.335 Not tainted syzkaller #0 PREEMPT(lazy) [ 65.141221][ T4815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 65.141235][ T4815] Call Trace: [ 65.141242][ T4815] [ 65.141250][ T4815] __dump_stack+0x1d/0x30 [ 65.141276][ T4815] dump_stack_lvl+0x95/0xd0 [ 65.141300][ T4815] dump_stack+0x15/0x1b [ 65.141401][ T4815] should_fail_ex+0x262/0x280 [ 65.141429][ T4815] ? nsim_fib_event_nb+0x19c/0xd90 [ 65.141457][ T4815] should_failslab+0x8c/0xb0 [ 65.141493][ T4815] __kmalloc_cache_noprof+0x7a/0x400 [ 65.141530][ T4815] ? nsim_fib_event_nb+0x19c/0xd90 [ 65.141629][ T4815] ? pcpu_memcg_post_alloc_hook+0x5e/0x190 [ 65.141666][ T4815] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 65.141695][ T4815] nsim_fib_event_nb+0x19c/0xd90 [ 65.141724][ T4815] ? __pfx_nsim_fib_event_nb+0x10/0x10 [ 65.141813][ T4815] atomic_notifier_call_chain+0x79/0x1a0 [ 65.141841][ T4815] call_fib_notifiers+0x65/0xa0 [ 65.141943][ T4815] call_fib6_notifiers+0x30/0x40 [ 65.141975][ T4815] fib6_add_rt2node+0xbbd/0x1a20 [ 65.142015][ T4815] ? fib6_add_1+0x558/0xa80 [ 65.142048][ T4815] fib6_add+0x583/0xf50 [ 65.142076][ T4815] ? __ipv6_dev_ac_inc+0x1b8/0x640 [ 65.142157][ T4815] ip6_ins_rt+0x8a/0xc0 [ 65.142205][ T4815] __ipv6_dev_ac_inc+0x4f3/0x640 [ 65.142237][ T4815] ipv6_sock_ac_join+0x4d3/0x5f0 [ 65.142296][ T4815] do_ipv6_setsockopt+0x1885/0x2040 [ 65.142367][ T4815] ? avc_has_perm_noaudit+0xac/0x160 [ 65.142401][ T4815] ipv6_setsockopt+0x59/0x130 [ 65.142443][ T4815] udpv6_setsockopt+0x89/0xa0 [ 65.142473][ T4815] sock_common_setsockopt+0x69/0x80 [ 65.142508][ T4815] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 65.142542][ T4815] __sys_setsockopt+0x184/0x200 [ 65.142644][ T4815] __x64_sys_setsockopt+0x64/0x80 [ 65.142669][ T4815] x64_sys_call+0x248f/0x2550 [ 65.142696][ T4815] do_syscall_64+0x112/0x360 [ 65.142773][ T4815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.142798][ T4815] RIP: 0033:0x7f22bcc2e159 [ 65.142815][ T4815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.142834][ T4815] RSP: 002b:00007f22bb687028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 65.142903][ T4815] RAX: ffffffffffffffda RBX: 00007f22bceb5fa0 RCX: 00007f22bcc2e159 [ 65.142966][ T4815] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000004 [ 65.142980][ T4815] RBP: 00007f22bccc506b R08: 0000000000000014 R09: 0000000000000000 [ 65.142995][ T4815] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 65.143046][ T4815] R13: 00007f22bceb6038 R14: 00007f22bceb5fa0 R15: 00007ffe10b67058 [ 65.143067][ T4815] [ 65.203822][ T4821] validate_nla: 5 callbacks suppressed [ 65.203838][ T4821] netlink: 'syz.6.337': attribute type 1 has an invalid length. [ 65.227561][ T4821] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.315260][ T4821] bond1: (slave geneve2): making interface the new active one [ 65.350926][ T4821] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 65.465998][ T4835] netlink: 8 bytes leftover after parsing attributes in process `syz.6.341'. [ 65.466017][ T4835] netlink: 8 bytes leftover after parsing attributes in process `syz.6.341'. [ 65.548948][ T4837] loop6: detected capacity change from 0 to 512 [ 65.549374][ T4837] EXT4-fs: Ignoring removed nobh option [ 65.576954][ T4837] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002] [ 65.577058][ T4837] System zones: 0-2, 18-18, 34-35 [ 65.584554][ T4837] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 65.584620][ T4837] ext4 filesystem being mounted at /38/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 65.624894][ T4837] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #2: comm syz.6.343: corrupted inode contents [ 65.625435][ T4837] EXT4-fs error (device loop6): ext4_dirty_inode:6736: inode #2: comm syz.6.343: mark_inode_dirty error [ 65.626817][ T4837] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #2: comm syz.6.343: corrupted inode contents [ 65.626962][ T4837] EXT4-fs error (device loop6): __ext4_ext_dirty:207: inode #2: comm syz.6.343: mark_inode_dirty error [ 65.644249][ T4837] EXT4-fs warning (device loop6): ext4_es_cache_extent:1082: inode #2: comm syz.6.343: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 65.644249][ T4837] [ 65.644704][ T4837] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #2: comm syz.6.343: corrupted inode contents [ 65.645143][ T4837] EXT4-fs error (device loop6): ext4_append:88: inode #2: comm syz.6.343: mark_inode_dirty error [ 65.645432][ T4837] EXT4-fs error (device loop6) in ext4_append:100: Corrupt filesystem [ 65.657556][ T4837] EXT4-fs error (device loop6): ext4_do_update_inode:5801: inode #2: comm syz.6.343: corrupted inode contents [ 65.661013][ T4837] EXT4-fs error (device loop6): add_dirent_to_buf:2153: inode #2: comm syz.6.343: mark_inode_dirty error [ 65.741373][ T3920] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.931503][ T4852] loop6: detected capacity change from 0 to 512 [ 65.948038][ T4852] EXT4-fs (loop6): couldn't mount as ext2 due to feature incompatibilities [ 66.157024][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 66.157053][ T29] audit: type=1400 audit(1790708892.575:2396): avc: denied { getopt } for pid=4856 comm="syz.6.351" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 66.408121][ T4865] ip_tables: iptables: counters copy to user failed while replacing table [ 66.442312][ T29] audit: type=1400 audit(1790708892.865:2397): avc: denied { listen } for pid=4866 comm="syz.4.355" laddr=172.20.0.1 lport=12816 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 66.473309][ T4865] xt_CT: No such helper "syz1" [ 66.500824][ T4870] capability: warning: `syz.3.356' uses 32-bit capabilities (legacy support in use) [ 66.520545][ T4870] program syz.3.356 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 66.617550][ T4875] netlink: 28 bytes leftover after parsing attributes in process `syz.0.358'. [ 66.747024][ T4880] futex_wake_op: syz.0.360 tries to shift op by -1; fix this program [ 66.747086][ T4880] futex_wake_op: syz.0.360 tries to shift op by -1; fix this program [ 66.748011][ T4880] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 67.007476][ T4886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.362'. [ 67.010089][ T4885] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.048031][ T4886] 8021q: adding VLAN 0 to HW filter on device bond3 [ 67.063342][ T4886] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 67.063371][ T4885] erspan0: entered promiscuous mode [ 67.063474][ T4885] netlink: 8 bytes leftover after parsing attributes in process `syz.4.363'. [ 67.096619][ T4886] bond3 (unregistering): (slave gretap1): Releasing backup interface [ 67.098490][ T4886] bond3 (unregistering): Released all slaves [ 67.153877][ T4897] loop4: detected capacity change from 0 to 4096 [ 67.170635][ T4897] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.275066][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.053753][ T29] audit: type=1400 audit(1790708894.475:2398): avc: denied { name_connect } for pid=4928 comm="syz.2.379" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 68.080386][ T29] audit: type=1400 audit(1790708894.505:2399): avc: denied { accept } for pid=4928 comm="syz.2.379" lport=33387 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 68.086730][ T29] audit: type=1400 audit(1790708894.505:2400): avc: denied { setopt } for pid=4928 comm="syz.2.379" lport=33387 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 68.210470][ T29] audit: type=1400 audit(1790708894.635:2401): avc: denied { connect } for pid=4932 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.211568][ T29] audit: type=1400 audit(1790708894.635:2402): avc: denied { setopt } for pid=4932 comm="syz.3.381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 68.264429][ T29] audit: type=1326 audit(1790708894.685:2403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4934 comm="syz.0.382" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f22bcc2e159 code=0x0 [ 69.034255][ T4959] bridge_slave_0: left allmulticast mode [ 69.034350][ T4959] bridge_slave_0: left promiscuous mode [ 69.034505][ T4959] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.380261][ T4969] loop3: detected capacity change from 0 to 512 [ 69.414507][ T4969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 69.414612][ T4969] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 69.419304][ T29] audit: type=1400 audit(1790708895.835:2404): avc: denied { write } for pid=4968 comm="syz.3.396" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 69.523712][ T3304] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.536871][ T29] audit: type=1400 audit(1790708895.955:2405): avc: denied { remount } for pid=4984 comm="syz.3.400" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 69.708290][ T5007] loop0: detected capacity change from 0 to 1024 [ 69.714160][ T5007] EXT4-fs: Ignoring removed bh option [ 69.737095][ T5007] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 70.463612][ T5016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.412'. [ 70.687031][ T5024] loop4: detected capacity change from 0 to 128 [ 70.687985][ T5024] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 70.703998][ T5024] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.704276][ T5024] ext2 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 70.760614][ T3297] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.813062][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 70.896629][ T5036] FAULT_INJECTION: forcing a failure. [ 70.896629][ T5036] name failslab, interval 1, probability 0, space 0, times 0 [ 70.896660][ T5036] CPU: 0 UID: 0 PID: 5036 Comm: syz.3.421 Not tainted syzkaller #0 PREEMPT(lazy) [ 70.896683][ T5036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 70.896696][ T5036] Call Trace: [ 70.896702][ T5036] [ 70.896708][ T5036] __dump_stack+0x1d/0x30 [ 70.896782][ T5036] dump_stack_lvl+0x95/0xd0 [ 70.896810][ T5036] dump_stack+0x15/0x1b [ 70.896835][ T5036] should_fail_ex+0x262/0x280 [ 70.896868][ T5036] ? fib_trie_table+0x2f/0xf0 [ 70.897026][ T5036] should_failslab+0x8c/0xb0 [ 70.897219][ T5036] __kmalloc_noprof+0xd0/0x4d0 [ 70.897258][ T5036] ? fib_trie_table+0x2f/0xf0 [ 70.897299][ T5036] fib_trie_table+0x2f/0xf0 [ 70.897426][ T5036] fib_new_table+0x107/0x270 [ 70.897456][ T5036] inet_rtm_newroute+0x9f/0x160 [ 70.897503][ T5036] ? __pfx_inet_rtm_newroute+0x10/0x10 [ 70.897570][ T5036] rtnetlink_rcv_msg+0x64b/0x720 [ 70.897606][ T5036] netlink_rcv_skb+0x11e/0x220 [ 70.897645][ T5036] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 70.897734][ T5036] rtnetlink_rcv+0x1c/0x30 [ 70.897760][ T5036] netlink_unicast+0x5a9/0x680 [ 70.897797][ T5036] netlink_sendmsg+0x5be/0x6f0 [ 70.897832][ T5036] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.897851][ T5036] __sys_sendto+0x411/0x470 [ 70.897877][ T5036] __x64_sys_sendto+0x76/0x90 [ 70.897902][ T5036] x64_sys_call+0x200c/0x2550 [ 70.897939][ T5036] do_syscall_64+0x112/0x360 [ 70.898043][ T5036] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.898135][ T5036] RIP: 0033:0x7fad9d52e159 [ 70.898154][ T5036] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 70.898175][ T5036] RSP: 002b:00007fad9bf87028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 70.898281][ T5036] RAX: ffffffffffffffda RBX: 00007fad9d7b5fa0 RCX: 00007fad9d52e159 [ 70.898297][ T5036] RDX: 0000000000000078 RSI: 0000200000000080 RDI: 0000000000000004 [ 70.898313][ T5036] RBP: 00007fad9d5c506b R08: 0000000000000000 R09: 0000000000000000 [ 70.898329][ T5036] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000000 [ 70.898412][ T5036] R13: 00007fad9d7b6038 R14: 00007fad9d7b5fa0 R15: 00007fffb44296d8 [ 70.898434][ T5036] [ 71.020593][ T5042] netlink: 4 bytes leftover after parsing attributes in process `syz.2.424'. [ 71.303621][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 71.303638][ T29] audit: type=1400 audit(1790708897.725:2409): avc: denied { mounton } for pid=5049 comm="syz.2.425" path="/92/file0" dev="tmpfs" ino=501 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 71.305442][ T3377] kernel read not supported for file bpf-prog (pid: 3377 comm: kworker/0:4) [ 71.474090][ T5056] loop3: detected capacity change from 0 to 512 [ 71.491768][ T5056] EXT4-fs (loop3): invalid journal inode [ 71.491872][ T5056] EXT4-fs (loop3): can't get journal size [ 71.495887][ T5056] EXT4-fs (loop3): 1 truncate cleaned up [ 71.496250][ T5056] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.534770][ T29] audit: type=1400 audit(1790708897.955:2410): avc: denied { write } for pid=5055 comm="syz.3.437" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.536848][ T29] audit: type=1400 audit(1790708897.955:2411): avc: denied { mounton } for pid=5055 comm="syz.3.437" path="/89/file1/proc_mnt" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 71.583107][ T29] audit: type=1400 audit(1790708897.985:2412): avc: denied { write } for pid=3304 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.583138][ T29] audit: type=1400 audit(1790708897.985:2413): avc: denied { rmdir } for pid=3304 comm="syz-executor" name="lost+found" dev="loop3" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.583941][ T29] audit: type=1400 audit(1790708898.005:2414): avc: denied { write } for pid=3304 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.606184][ T29] audit: type=1400 audit(1790708898.025:2415): avc: denied { write } for pid=3304 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.606213][ T29] audit: type=1400 audit(1790708898.025:2416): avc: denied { rmdir } for pid=3304 comm="syz-executor" name="proc_mnt" dev="loop3" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 71.606657][ T29] audit: type=1400 audit(1790708898.025:2417): avc: denied { write } for pid=3304 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.606963][ T29] audit: type=1400 audit(1790708898.025:2418): avc: denied { write } for pid=3304 comm="syz-executor" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 71.607270][ T3304] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 71.607827][ T3304] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 71.696838][ T4858] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.919488][ T365] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.978580][ T365] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.031855][ T365] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.072408][ T365] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 72.159314][ T365] bridge_slave_1: left allmulticast mode [ 72.159340][ T365] bridge_slave_1: left promiscuous mode [ 72.159418][ T365] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.160124][ T365] bridge_slave_0: left allmulticast mode [ 72.160139][ T365] bridge_slave_0: left promiscuous mode [ 72.160247][ T365] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.358420][ T365] bond2 (unregistering): (slave geneve2): Releasing active interface [ 72.387458][ T365] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.397448][ T365] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.398396][ T365] bond0 (unregistering): Released all slaves [ 72.416229][ T365] bond1 (unregistering): Released all slaves [ 72.426177][ T365] bond2 (unregistering): Released all slaves [ 72.441543][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 72.479854][ T365] hsr_slave_0: left promiscuous mode [ 72.480224][ T365] hsr_slave_1: left promiscuous mode [ 72.480618][ T365] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 72.480633][ T365] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 72.481021][ T365] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 72.481032][ T365] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 72.485128][ T365] veth1_macvtap: left promiscuous mode [ 72.485201][ T365] veth0_macvtap: left promiscuous mode [ 72.485341][ T365] veth1_vlan: left promiscuous mode [ 72.486824][ T365] veth0_vlan: left promiscuous mode [ 72.652619][ T365] team0 (unregistering): Port device team_slave_1 removed [ 72.655192][ T365] team0 (unregistering): Port device team_slave_0 removed [ 72.707419][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10 [ 72.901578][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11 [ 73.106043][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12 [ 84.448091][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 84.448178][ T29] audit: type=1400 audit(1790708910.867:2427): avc: denied { write } for pid=5128 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.496825][ T29] audit: type=1400 audit(1790708910.907:2428): avc: denied { write } for pid=5139 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.801691][ T29] audit: type=1400 audit(1790708911.217:2429): avc: denied { write } for pid=5142 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.869453][ T29] audit: type=1400 audit(1790708911.287:2430): avc: denied { write } for pid=5153 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.187965][ T5160] loop4: detected capacity change from 0 to 512 [ 85.188340][ T5160] EXT4-fs: Ignoring removed mblk_io_submit option [ 85.196909][ T5160] EXT4-fs error (device loop4): ext4_iget_extra_inode:5210: inode #15: comm syz.4.431: corrupted in-inode xattr: e_value size too large [ 85.196950][ T5160] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.227062][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 85.227084][ C1] EXT4-fs (loop4): initial error at time 1790708911: ext4_iget_extra_inode:5210: inode 15 [ 85.227112][ C1] EXT4-fs (loop4): last error at time 1790708911: ext4_iget_extra_inode:5210: inode 15 [ 85.227900][ T5160] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.431: couldn't read orphan inode 15 (err -117) [ 85.227930][ T5160] loop4: lost filesystem error report for type 5 error -117 [ 85.229402][ T5160] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.231511][ T29] audit: type=1326 audit(1790708911.647:2431): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.2.429" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ca0ce159 code=0x7ffc0000 [ 85.231598][ T29] audit: type=1326 audit(1790708911.647:2432): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.2.429" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ca0ce159 code=0x7ffc0000 [ 85.231780][ T29] audit: type=1326 audit(1790708911.647:2433): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.2.429" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ca0ce159 code=0x7ffc0000 [ 85.231811][ T29] audit: type=1326 audit(1790708911.647:2434): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.2.429" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ca0ce159 code=0x7ffc0000 [ 85.237870][ T29] audit: type=1326 audit(1790708911.657:2435): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.2.429" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7fc6ca0ce159 code=0x7ffc0000 [ 85.237902][ T29] audit: type=1326 audit(1790708911.657:2436): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5157 comm="syz.2.429" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ca0ce159 code=0x7ffc0000 [ 85.360283][ T4345] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.497133][ T3297] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.517104][ T4345] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.559117][ T4345] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.622799][ T4345] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.800647][ T4263] IPVS: starting estimator thread 0... [ 86.049408][ T5218] IPVS: using max 2592 ests per chain, 129600 per kthread [ 86.096776][ T4345] bridge_slave_1: left allmulticast mode [ 86.096801][ T4345] bridge_slave_1: left promiscuous mode [ 86.096944][ T4345] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.237197][ T4345] bond1 (unregistering): (slave geneve2): Releasing active interface [ 86.247766][ T4345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.266329][ T4345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.267683][ T4345] bond0 (unregistering): Released all slaves [ 86.282683][ T4345] bond1 (unregistering): Released all slaves [ 86.322996][ T4345] hsr_slave_0: left promiscuous mode [ 86.323301][ T4345] hsr_slave_1: left promiscuous mode [ 86.323844][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.323860][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.324156][ T4345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.324167][ T4345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.334371][ T4345] veth1_macvtap: left promiscuous mode [ 86.334398][ T4345] veth0_macvtap: left promiscuous mode [ 86.334440][ T4345] veth1_vlan: left promiscuous mode [ 86.334487][ T4345] veth0_vlan: left promiscuous mode [ 86.453966][ T4345] team0 (unregistering): Port device team_slave_1 removed [ 86.464865][ T4345] team0 (unregistering): Port device team_slave_0 removed [ 86.550521][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.550560][ T5167] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.550640][ T5167] bridge_slave_0: entered allmulticast mode [ 86.551038][ T5167] bridge_slave_0: entered promiscuous mode [ 86.553629][ T5173] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.553669][ T5173] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.553850][ T5173] bridge_slave_0: entered allmulticast mode [ 86.554209][ T5173] bridge_slave_0: entered promiscuous mode [ 86.559073][ T5259] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap2 [ 86.559420][ T5259] batman_adv: batadv0: Adding interface: gretap2 [ 86.559432][ T5259] batman_adv: batadv0: The MTU of interface gretap2 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.559496][ T5259] batman_adv: batadv0: Interface activated: gretap2 [ 86.560628][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.560658][ T5173] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.560714][ T5173] bridge_slave_1: entered allmulticast mode [ 86.561254][ T5173] bridge_slave_1: entered promiscuous mode [ 86.562280][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.562310][ T5167] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.562367][ T5167] bridge_slave_1: entered allmulticast mode [ 86.562802][ T5167] bridge_slave_1: entered promiscuous mode [ 86.583597][ T5167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.609630][ T5173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.616448][ T5173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.617606][ T5167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.682145][ T5167] team0: Port device team_slave_0 added [ 86.699259][ T5167] team0: Port device team_slave_1 added [ 86.746833][ T5173] team0: Port device team_slave_0 added [ 86.749089][ T5167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.749103][ T5167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.749132][ T5167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.753370][ T5167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.753383][ T5167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.753413][ T5167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.754228][ T5173] team0: Port device team_slave_1 added [ 86.832846][ T5173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.832861][ T5173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.832898][ T5173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.878949][ T5173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.878964][ T5173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.878993][ T5173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.888916][ T5167] hsr_slave_0: entered promiscuous mode [ 86.889384][ T5167] hsr_slave_1: entered promiscuous mode [ 86.990304][ T5173] hsr_slave_0: entered promiscuous mode [ 86.990655][ T5173] hsr_slave_1: entered promiscuous mode [ 86.990951][ T5173] debugfs: 'hsr0' already exists in 'hsr' [ 86.990963][ T5173] Cannot create hsr debugfs directory [ 87.081124][ T5291] netlink: 12 bytes leftover after parsing attributes in process `syz.4.455'. [ 87.130761][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13 [ 87.189614][ T5291] 8021q: adding VLAN 0 to HW filter on device bond2 [ 87.190649][ T5291] bond1: (slave bond2): Enslaving as an active interface with an up link [ 87.465608][ T3022] 8021q: adding VLAN 0 to HW filter on device eth14 [ 87.497945][ T5328] netlink: 8 bytes leftover after parsing attributes in process `syz.4.463'. [ 87.497965][ T5328] netlink: 20 bytes leftover after parsing attributes in process `syz.4.463'. [ 87.616190][ T5173] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 87.629214][ T5173] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.635186][ T5173] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 87.651949][ T5173] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.666768][ T5173] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 87.668801][ T5173] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.672799][ T5173] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 87.675724][ T5173] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.676167][ T5167] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.682415][ T5167] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.684792][ T5167] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.694484][ T5167] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.700369][ T5167] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.703859][ T5167] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.721906][ T5167] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.724303][ T5167] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.824674][ T5173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.838787][ T3022] 8021q: adding VLAN 0 to HW filter on device eth15 [ 87.844862][ T5173] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.847650][ T4345] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.847682][ T4345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.862139][ T5167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.885246][ T4263] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.885279][ T4263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.889533][ T5167] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.893202][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.893236][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.909969][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.910006][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.131914][ T3022] 8021q: adding VLAN 0 to HW filter on device eth16 [ 88.172925][ T5367] loop4: detected capacity change from 0 to 512 [ 88.250096][ T5167] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.294372][ T5173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.512510][ T5167] veth0_vlan: entered promiscuous mode [ 88.531502][ T5167] veth1_vlan: entered promiscuous mode [ 88.562815][ T5167] veth0_macvtap: entered promiscuous mode [ 88.586172][ T5167] veth1_macvtap: entered promiscuous mode [ 88.615369][ T5167] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.625989][ T5167] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.687458][ T5455] tmpfs: Unknown parameter 'l' [ 88.688412][ T4263] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.688458][ T4263] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.688491][ T4263] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.688524][ T4263] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.714209][ T5173] veth0_vlan: entered promiscuous mode [ 88.732808][ T5173] veth1_vlan: entered promiscuous mode [ 88.773347][ T5173] veth0_macvtap: entered promiscuous mode [ 88.790633][ T5173] veth1_macvtap: entered promiscuous mode [ 88.823675][ T5173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.835755][ T5173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.877590][ T4263] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.877705][ T4263] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.877810][ T4263] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.877846][ T4263] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.904956][ T5462] loop3: detected capacity change from 0 to 1024 [ 88.909020][ T5462] EXT4-fs: Ignoring removed bh option [ 88.946657][ T5462] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 88.949956][ T5470] loop0: detected capacity change from 0 to 512 [ 88.954192][ T5470] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 88.983471][ T5470] EXT4-fs (loop0): 1 truncate cleaned up [ 88.983923][ T5470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.015226][ T5468] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 89.334833][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.401565][ T5513] loop0: detected capacity change from 0 to 512 [ 89.431671][ T5513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.431759][ T5513] ext4 filesystem being mounted at /104/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 89.466569][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 89.466589][ T29] audit: type=1400 audit(1790708921.890:2503): avc: denied { read write } for pid=5512 comm="syz.0.481" name="file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.466684][ T29] audit: type=1400 audit(1790708921.890:2504): avc: denied { open } for pid=5512 comm="syz.0.481" path="/104/file1/file1" dev="loop0" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.496336][ T29] audit: type=1400 audit(1790708921.890:2505): avc: denied { write } for pid=5512 comm="syz.0.481" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 89.521125][ T29] audit: type=1400 audit(1790708921.920:2506): avc: denied { write } for pid=5523 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.544432][ T29] audit: type=1400 audit(1790708921.940:2507): avc: denied { ioctl } for pid=5512 comm="syz.0.481" path="/104/file1/file1" dev="loop0" ino=15 ioctlcmd=0x660f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 89.659657][ T3301] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.786464][ T29] audit: type=1326 audit(1790708922.200:2508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.2.486" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ca0ce159 code=0x7ffc0000 [ 89.787939][ T29] audit: type=1326 audit(1790708922.210:2509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.2.486" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ca0ce159 code=0x7ffc0000 [ 89.787980][ T29] audit: type=1326 audit(1790708922.210:2510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.2.486" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ca0ce159 code=0x7ffc0000 [ 89.813729][ T29] audit: type=1326 audit(1790708922.240:2511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.2.486" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fc6ca0ce159 code=0x7ffc0000 [ 89.840321][ T29] audit: type=1326 audit(1790708922.260:2512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5539 comm="syz.2.486" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc6ca0ce159 code=0x7ffc0000 [ 90.178925][ T5167] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 90.663038][ T5596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.495'. [ 90.820867][ T5614] syz.2.499 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 91.151232][ T5657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 91.151297][ T5657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.503'. [ 91.412331][ T5688] ip_tables: iptables: counters copy to user failed while replacing table [ 91.513490][ T5688] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.513623][ T5688] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.693112][ T5688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.714907][ T5688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 91.917082][ T4263] netdevsim netdevsim10 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.917971][ T4265] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.918010][ T4265] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.918075][ T4265] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.918164][ T4265] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.386279][ T5721] loop3: detected capacity change from 0 to 1024 [ 92.403176][ T5721] EXT4-fs: Ignoring removed i_version option [ 92.415916][ T5721] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 92.416026][ T5721] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 92.435613][ T2983] ================================================================== [ 92.435644][ T2983] BUG: KCSAN: data-race in d_make_discardable / step_into_slowpath [ 92.435677][ T2983] [ 92.435682][ T2983] write to 0xffff888105d250c0 of 4 bytes by task 5163 on cpu 0: [ 92.435698][ T2983] d_make_discardable+0x4f/0x90 [ 92.435724][ T2983] simple_unlink+0x68/0x80 [ 92.435744][ T2983] shmem_unlink+0x12d/0x140 [ 92.435765][ T2983] vfs_unlink+0x1c3/0x490 [ 92.435783][ T2983] filename_unlinkat+0x1dc/0x410 [ 92.435802][ T2983] __se_sys_unlink+0x2b/0xe0 [ 92.435821][ T2983] __x64_sys_unlink+0x1f/0x30 [ 92.435839][ T2983] x64_sys_call+0x18ee/0x2550 [ 92.435865][ T2983] do_syscall_64+0x112/0x360 [ 92.435886][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.435908][ T2983] [ 92.435913][ T2983] read to 0xffff888105d250c0 of 4 bytes by task 2983 on cpu 1: [ 92.435928][ T2983] step_into_slowpath+0x139/0x4c0 [ 92.435957][ T2983] path_lookupat+0x2eb/0x4c0 [ 92.435982][ T2983] filename_lookup+0x18f/0x390 [ 92.436003][ T2983] do_readlinkat+0x74/0x2f0 [ 92.436026][ T2983] __x64_sys_readlink+0x47/0x60 [ 92.436050][ T2983] x64_sys_call+0x1d41/0x2550 [ 92.436076][ T2983] do_syscall_64+0x112/0x360 [ 92.436094][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.436114][ T2983] [ 92.436118][ T2983] value changed: 0x08300080 -> 0x00004080 [ 92.436128][ T2983] [ 92.436132][ T2983] Reported by Kernel Concurrency Sanitizer on: [ 92.436142][ T2983] CPU: 1 UID: 0 PID: 2983 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 92.436167][ T2983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.436179][ T2983] ================================================================== [ 101.923533][ T29] kauditd_printk_skb: 155 callbacks suppressed [ 101.923594][ T29] audit: type=1400 audit(1790708934.340:2668): avc: denied { write } for pid=5740 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 101.957606][ T29] audit: type=1400 audit(1790708934.350:2669): avc: denied { write } for pid=5751 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.203941][ T29] audit: type=1400 audit(1790708934.620:2670): avc: denied { write } for pid=5754 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.230051][ T29] audit: type=1400 audit(1790708934.630:2671): avc: denied { write } for pid=5765 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1