last executing test programs: 1m13.655135263s ago: executing program 32 (id=164): getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500)={0x0}, &(0x7f0000000540)=0xc) perf_event_open(0x0, r0, 0xfffffdffffffffff, 0xffffffffffffffff, 0x9) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000400)={"4f4d1434fab45f24e70a4e70d6340b99", 0x0, 0x0, {0x20000, 0x81}, {0x8001, 0xa5f}, 0x1, [0x0, 0xffffffffffffffff, 0x7, 0x2, 0x9, 0x8000, 0xa54a, 0x2, 0x80, 0x7, 0x100, 0x7, 0x8, 0x2, 0x7fffffff, 0x5]}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0xffffffffffffffff, 0xfffffffffffffff0}, 0x1061, 0x1, 0xbd6, 0x8, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_evm(r1, &(0x7f0000000580), &(0x7f00000005c0)=@ng={0x4, 0xc}, 0x2, 0x1) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x44, 0x10, 0xfffffffffffff6ff, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x35a71, 0x51a23}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_UPDELAY={0x8}]}}}]}, 0x44}}, 0x20040040) 1m2.60717761s ago: executing program 4 (id=310): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0) 1m1.679021664s ago: executing program 4 (id=325): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000001280)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x492492492492775, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200)={0x5, 0x5, 0x6, 0x5, 0xff, 0x1, 0xea, 0xfa, 0x2, 0x4, 0x81, 0x8, 0x40, 0x1c}, 0xe) 1m1.588973132s ago: executing program 4 (id=326): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000140)='./file0\x00', 0x10) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x5603d}], 0x1) mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0) r2 = open(&(0x7f00000002c0)='./bus\x00', 0x60102, 0x0) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) tee(r3, r2, 0x6, 0x0) 1m1.570358636s ago: executing program 4 (id=327): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) 1m1.331385693s ago: executing program 4 (id=332): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000580)={&(0x7f0000000180)={0xa, 0x4e24, 0x3, @empty, 0x1ff}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=[@pktinfo={{0x24, 0x29, 0x32, {@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}}}}], 0x28}, 0x4000) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) io_setup(0x1, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000040), 0xaa201, 0x0) write(0xffffffffffffffff, &(0x7f0000000280)='0fc5:1227:am', 0xc) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 1m1.09646532s ago: executing program 4 (id=339): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) 1m1.058900978s ago: executing program 33 (id=339): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000010000850000001b000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x100, 0x3, 0x28}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x7, 0x8, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0x66137, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x4}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$cgroup_pid(r3, &(0x7f0000000000), 0x2a979d) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x9) 55.797099154s ago: executing program 5 (id=398): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r4 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 55.16681803s ago: executing program 5 (id=409): r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000380)={0x2, 0x0, @remote}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_1\x00', 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000780)=@newsa={0x138, 0x1a, 0x633, 0x0, 0x21dfdbfd, {{@in6=@private2, @in=@local, 0x4e24, 0x4004, 0x4e24, 0x8001, 0xa, 0x20}, {@in=@multicast1, 0x0, 0x32}, @in6=@loopback, {0x323, 0x9, 0x0, 0x0, 0x4000, 0x0, 0xfffffffffffffffd}, {}, {0x0, 0xfffffffe}, 0x70bd29, 0x3502, 0xa, 0x4, 0x0, 0x26}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x810) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x50a11, 0x20a3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}, @IFLA_MTU={0x8, 0x4, 0x100}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0xc31fe084736598c) sendmsg$nl_xfrm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@delpolicy={0x68, 0x14, 0x1, 0x70bd2b, 0x25dfdbff, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@loopback, 0x0, 0x0, 0x7, 0x0, 0xa, 0x20}, 0x0, 0x2}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x1}}, @mark={0xc, 0x15, {0x0, 0x100}}]}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x4004040) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'rose0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x47, 0xe1, 0x3, 0x5, 0x6, "5d6a81", 0x80000001, [0xb8]}}) 55.041281404s ago: executing program 5 (id=411): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e24, 0x104, @dev={0xfe, 0x80, '\x00', 0x3f}, 0x80006}, 0x1c) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b45602067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a04000800ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 54.966663519s ago: executing program 5 (id=412): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) 54.515747539s ago: executing program 5 (id=417): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) unshare(0x22020600) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000540)='./file0/file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 54.230535106s ago: executing program 6 (id=424): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000033c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x1290, 0x5802, 0x294, 0x1290, 0x294, 0x13c0, 0x325, 0x378, 0x13c0, 0x378, 0x3, 0x0, {[{{@ipv6={@loopback, @empty, [], [], 'pimreg0\x00', 'macsec0\x00'}, 0x0, 0xa8, 0x110, 0x52020000}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10400, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000400)='./tracefs\x00', 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r1, &(0x7f0000001000)=ANY=[@ANYBLOB="0b00000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3020000000000000000000000000000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000073797a300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001d0005000900000040000000030000000800000005010905a10105091901290a150025017501950a8102950175068103c0"], 0x135) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) write$UHID_INPUT(r1, &(0x7f0000001140)={0x8, {"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", 0x1000}}, 0x1006) 53.652471241s ago: executing program 6 (id=425): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000340)={0x0, 0x0}) capset(&(0x7f0000000500)={0x20080522, r0}, &(0x7f0000000200)={0x200002, 0xd, 0x800, 0x6, 0x9}) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r1) r2 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f00000000c0)='stack\x00') r4 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) pread64(r3, &(0x7f0000000140)=""/15, 0xf, 0x4) 53.601581431s ago: executing program 6 (id=427): recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r0 = socket$kcm(0x2, 0x5, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x0, 0x2}, {0x10000002, 0x0, 0xfffffffd}]}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x6e, &(0x7f0000000000)=r3, 0x10) r4 = socket$kcm(0x2, 0x5, 0x84) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r4, 0x84, 0x77, &(0x7f0000000000)=r5, 0x62) 53.490920833s ago: executing program 6 (id=429): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) 52.721755496s ago: executing program 6 (id=436): openat$tun(0xffffffffffffff9c, 0x0, 0x68c01, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x2c0800, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0x1}, 0x10a0, 0x0, 0x0, 0x0, 0x4, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000), 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f00000001c0)=ANY=[]) pread64(r0, &(0x7f0000000240)=""/249, 0xf9, 0x4) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000002c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4048048}, 0x8494) 52.502873659s ago: executing program 6 (id=443): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) fallocate(r0, 0x3, 0x9, 0x81) 52.34816815s ago: executing program 34 (id=443): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) fallocate(r0, 0x3, 0x9, 0x81) 51.258930436s ago: executing program 5 (id=452): r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r1, 0x40305829, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='0', 0x1) modify_ldt$read_default(0x2, &(0x7f0000000100)=""/158, 0x9e) 51.061901656s ago: executing program 35 (id=452): r0 = perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x5, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, r0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r1 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$OCFS2_IOC_UNRESVSP(r1, 0x40305829, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='0', 0x1) modify_ldt$read_default(0x2, &(0x7f0000000100)=""/158, 0x9e) 43.326521654s ago: executing program 7 (id=509): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x400, 0x8}, 0x4202, 0x0, 0xffffffff, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)="d80000001c0081054e81f782db44b904021d08040e000000100d10a118000c000600142603600e1208000f0000810401a80016002000014003000008", 0x3c}], 0x1, 0x0, 0x0, 0x7400}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907001175f37538e486dd637f4b22667f2f00db5b686158bbcfe8875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100008}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b1a, &(0x7f0000000000)={'wlan1\x00', @random="0000230c1100"}) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fed007907001175f37538e486dd6317ce2200"], 0xcfa4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xff00}, 0x48) 42.283390162s ago: executing program 7 (id=516): mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='logfs\x00', 0x2040024, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, @perf_bp={0x0, 0xd}, 0x4, 0x8, 0x11000, 0x5, 0x2, 0x9000000e, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpuidle/current_governor\x00', 0x2, 0x0) preadv(r0, &(0x7f0000010b80), 0x0, 0xb, 0x2e91) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10810d, 0x7fffffff, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) syz_create_resource$binfmt(0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000200)=ANY=[], 0x1cb) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, 0x0, 0x0) perf_event_open$cgroup(&(0x7f0000000180)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x8}, 0x2e2}, 0xffffffffffffffff, 0x2000000000000000, 0xffffffffffffffff, 0x0) 41.890923459s ago: executing program 7 (id=521): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0xce0, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r4 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x30) 40.788588289s ago: executing program 7 (id=525): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) 40.07969112s ago: executing program 7 (id=537): r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000180)=0x8) close(0x3) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r2, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x4048080}], 0x1, 0x44) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x460b, 0x0, 0x8004, 0x101, 0x5d, 0xff, 0xd2f, 0x8, r1}, &(0x7f00000000c0)=0x20) 36.943028813s ago: executing program 7 (id=577): write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000001, 0x0, 0x3}, @loopback, @private=0xa010101}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20) 36.882597686s ago: executing program 36 (id=577): write$P9_RREADLINK(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000300)=@newtfilter={0x8c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0x0, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x5c, 0x2, [@TCA_BASIC_ACT={0x58, 0x3, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x0, 0x10000001, 0x0, 0x3}, @loopback, @private=0xa010101}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x5}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) write$tun(r0, &(0x7f0000000500)=ANY=[], 0x20) 35.580692654s ago: executing program 2 (id=591): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e22, @rand_addr=0x64010103}, @in6={0xa, 0x4e22, 0x9c, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e22, 0x9, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, @in6={0xa, 0x4e22, 0x6, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x3}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) r3 = dup(r0) r4 = dup(r0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e22, 0xf, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x24, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0xfffffffc, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x5, 0x806, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 35.308277959s ago: executing program 2 (id=593): perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb905b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x147b7e, 0x0, @perf_config_ext={0x7ffff}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x1000003}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x3) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r0) r1 = perf_event_open(0x0, 0xffffffffffffffff, 0x80e, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xbfffffffffffffff, r1, 0x9) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_clone(0x20b84311, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x2000000) sendto$inet(r2, 0x0, 0xfffffdad, 0x0, &(0x7f00000000c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) 34.331278883s ago: executing program 2 (id=600): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x4002, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={&(0x7f0000000380)}, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c3a00000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000080083850000002d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000200)="80fd", 0x2}], 0x1, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=0x1, @ANYRES32=r3, @ANYBLOB='.'], 0x20) r4 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000), 0x80300, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@fallback, 0xffffffffffffffff, 0x7, 0x0, 0x0, @void, @value=r4}, 0x20) 33.731094842s ago: executing program 2 (id=603): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r0, @ANYRES32=r0, @ANYRESOCT], 0x1, 0x392, &(0x7f0000001000)="$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") mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xc0042, 0x1) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r2, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r1, 0x0, 0x0, 0x0, 0x0, 0x2}]) truncate(&(0x7f0000000340)='./file1\x00', 0x20fffbfffc) 33.116835124s ago: executing program 2 (id=606): sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x439, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r1, 0x9801}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gre={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0xc}}, @IFLA_GRE_IGNORE_DF={0x5, 0x13, 0x1}, @IFLA_GRE_PMTUDISC={0x5}]}}}]}, 0x48}}, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 32.915614485s ago: executing program 2 (id=609): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000180)={0x24, @none={0x0, 0xffff}}, 0x14) sendmmsg(r1, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) ioctl$KDDELIO(r0, 0x4b34, 0x3bf) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80000003, 0x0, 0x101}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r2, 0x0, 0x0) 32.872856673s ago: executing program 37 (id=609): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'netdevsim0\x00'}) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r1, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r1, &(0x7f0000000180)={0x24, @none={0x0, 0xffff}}, 0x14) sendmmsg(r1, &(0x7f00000196c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0xd, 0x0}}], 0x4000050, 0x400c010) ioctl$KDDELIO(r0, 0x4b34, 0x3bf) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80000003, 0x0, 0x101}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r2, 0x0, 0x0) 3.663325312s ago: executing program 0 (id=1013): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f00000005c0)='fd', 0x0, r0) unshare(0x2a020480) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r3, r3) setpgid(0x0, r3) openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.net/cgroup.procs\x00', 0x40002, 0x128) 3.56931275s ago: executing program 0 (id=1016): socketpair$unix(0x1, 0x2, 0x0, 0x0) eventfd(0x3) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setns(0xc9, 0x0) r0 = fsopen(&(0x7f00000000c0)='sysfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x9) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 2.603319912s ago: executing program 1 (id=1032): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0xfffffffc}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000100000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 2.497962663s ago: executing program 1 (id=1033): io_submit(0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x100, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_config_ext={0x1ff, 0x6}, 0x102005, 0x0, 0x8, 0x5, 0x8b, 0x8, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)="737562d751f911e16c3a65f406a35b36743a6d6f643ab6b7d996e659c1f68f8e1c73797a5f6d6fdd", 0x28) socket$kcm(0x2, 0xa, 0x2) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) 2.479405087s ago: executing program 0 (id=1035): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x86d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext={0xaf49, 0x6}, 0x2400, 0x0, 0x0, 0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x262, &(0x7f0000000340)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) syz_mount_image$vfat(&(0x7f000000abc0), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f000000abc0)) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r0) r1 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000640)={@cgroup=r1, 0x24, 0x0, 0xffff, &(0x7f0000000000)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 2.203823262s ago: executing program 0 (id=1040): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@nombcache}, {}, {@delalloc}, {@resuid={'resuid', 0x3d, 0xee01}}, {@init_itable}, {@nodelalloc}, {@grpid}, {@quota}, {@nomblk_io_submit}]}, 0x1, 0x56a, &(0x7f00000015c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) sendmsg$kcm(r0, &(0x7f0000002bc0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="e31eebbaef60d0df1bb6dfdc2ecc4b7021f75d5001ffc32877553de70637f112", 0x20}], 0x1}, 0x20008005) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x240408c1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e22, 0x1, @empty, 0x7}], 0x1c) io_uring_enter(0xffffffffffffffff, 0x8af, 0xc0b8, 0x0, &(0x7f0000000100)={[0x6]}, 0x8) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x7) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.081850186s ago: executing program 0 (id=1041): close(0x3) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a80)=@base={0x19, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000, 0xffffffffffffffff, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 1.927144107s ago: executing program 0 (id=1044): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) close(0x3) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) close(r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r4, r0, 0x4, r2}, 0x10) 1.898985502s ago: executing program 38 (id=1044): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) close(0x3) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) close(r1) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000000)={r4, r0, 0x4, r2}, 0x10) 1.683475145s ago: executing program 3 (id=1048): r0 = socket(0x400000000010, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffdf, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r2, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r4, {0xf000, 0xffff}, {}, {0x7, 0xa}}, [@filter_kind_options=@f_route={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0x1, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r6, {0xf000}, {}, {0x7, 0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 1.614431479s ago: executing program 1 (id=1049): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r3 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x201, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r3, 0x2219, 0x7721, 0x16, 0x0, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r2) sendmsg$NFC_CMD_DEV_UP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010023010a00340200000200000008000100", @ANYRES32=r1], 0x1c}}, 0x0) 1.547028052s ago: executing program 3 (id=1050): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x1, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x10, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x6a2e4e0ed11fabf6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x9, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x2000}, 0x50) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 1.518393028s ago: executing program 3 (id=1051): timer_create(0x0, 0x0, &(0x7f0000bbdffc)) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_pidfd_open(0x0, 0x0) keyctl$describe(0x6, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) syz_clone(0x10000011, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x40f00}, 0x94) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r0) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x80) 1.092895253s ago: executing program 9 (id=1053): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x1, 0x100007, 0x4, 0x25, 0x1, 0xffffffffffffffff, 0x60}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x8}, 0x2, 0x3, 0x1, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x4030582a, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240), 0x0, 0x2, r0}, 0x38) 818.805727ms ago: executing program 8 (id=1055): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) 701.41684ms ago: executing program 3 (id=1056): r0 = open(&(0x7f0000001040)='.\x00', 0x800, 0x122) fcntl$notify(r0, 0x402, 0x8000003d) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x27) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) ftruncate(r2, 0x2000009) sendfile(r1, r2, 0x0, 0x20000000000006) r3 = open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000580)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0001}]}) tee(r3, r4, 0x1, 0x0) 701.17941ms ago: executing program 9 (id=1057): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0xc0d00) bind$can_raw(0xffffffffffffffff, &(0x7f00000002c0), 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000012c0), 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="0218000014000000000000000000000005000500000000000a00ffff00000000fe8000000000000000000000000000aa0000000000000000080012000000000003000000000000003000000000000000000000000000000002000002000000000000000000000000fc010000000000000000000000000000050006006c0000000a"], 0xa0}}, 0x0) 678.235845ms ago: executing program 1 (id=1058): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) 435.060764ms ago: executing program 8 (id=1059): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0xa000, 0x800, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) setsockopt$XDP_RX_RING(r2, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0xa, r3}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000110021002cbd7000ffdbdf2500000000", @ANYRES32=r3], 0x44}}, 0x40000) 383.129734ms ago: executing program 3 (id=1060): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syzkaller0\x00', 0x0}) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newqdisc={0x30, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newtfilter={0x7c, 0x2c, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1}, {0xfff1, 0xffff}, {0x8, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4c, 0x2, [@TCA_BASIC_ACT={0x48, 0x3, [@m_ct={0x44, 0x1, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x0, 0x0, 0x20000000, 0x0, 0xfffffffe}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) write$tun(r0, &(0x7f0000000240)=ANY=[], 0x1c) 382.969064ms ago: executing program 1 (id=1061): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0xfff3, 0xffe0}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000002000)=@delchain={0x2c, 0x66, 0x49404108a2eb2df, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xffeb, 0x1d0c5d7c03b59b98}}, [@TCA_RATE={0x6, 0x5, {0xec, 0x7a}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8848}, 0x20004800) 365.732667ms ago: executing program 9 (id=1062): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev_mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x1f, 0x15, &(0x7f0000000580)=ANY=[@ANYBLOB="0000000000000000b708", @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@ipv4_delroute={0x24, 0x18, 0x901, 0x0, 0x25dfdbff, {0x2, 0x18, 0x0, 0x0, 0xff, 0x0, 0x0, 0x8, 0x2000000}, [@RTA_DST={0x8, 0x1, @dev}]}, 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$inet(0x2, 0x3, 0x1) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) 322.612456ms ago: executing program 1 (id=1063): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@gettaction={0x14, 0x32, 0x400, 0x70bd2e, 0x25dfdbfc}, 0xffe3}, 0x1, 0x0, 0x0, 0x44014}, 0x4024004) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x56ab, &(0x7f0000000040)={0x0, 0x917b, 0xc000, 0x2, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1b, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfd11, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pwritev(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000000000)='0', 0x1}], 0x1, 0x0, 0x3) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) 214.976617ms ago: executing program 9 (id=1064): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r1) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) 214.752967ms ago: executing program 3 (id=1065): socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x3, 0x5}, 0x4000, 0x2, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x200280d0}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events.local\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00\x00\x00', @ANYRES32=r1], 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00'}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedc0790700117df37538e486dd6317ce220005"], 0xfdef) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x11, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 214.625637ms ago: executing program 8 (id=1066): r0 = syz_clone(0x100411, 0x0, 0x0, 0x0, 0x0, 0x0) tkill(r0, 0x13) tkill(r0, 0x12) waitid(0x1, r0, &(0x7f0000000000), 0x2100000c, 0x0) pipe(0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x44014) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40010040, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0x13, &(0x7f0000000000)=0x4, 0x4) 175.025355ms ago: executing program 8 (id=1067): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r3, 0x1ff}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000100)={r4}, 0x8) 138.973922ms ago: executing program 8 (id=1068): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) iopl(0x3) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getpid() sendmmsg$unix(r1, &(0x7f000000d6c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x1, 0x10018090) 73.880495ms ago: executing program 9 (id=1069): r0 = socket(0x10, 0x3, 0x0) close(0x3) r1 = socket(0x10, 0x803, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, 0x0, 0x804) write(0xffffffffffffffff, 0x0, 0x0) setresgid(0xee01, 0xee00, 0x0) setregid(0xee00, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000a00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x10) preadv(0xffffffffffffffff, 0x0, 0x0, 0x1ff, 0x5) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x5, &(0x7f0000000600)=""/191, 0xbf, 0xa1}}], 0x1, 0x2040000, &(0x7f0000003700)={0x77359400}) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000001400)=ANY=[@ANYBLOB="14000000520001f6"], 0x14}, 0x1, 0x0, 0x0, 0x404c000}, 0x40) 18.093637ms ago: executing program 8 (id=1070): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, @perf_bp={0x0, 0x8}, 0x40, 0x0, 0x0, 0x0, 0x7, 0x0, 0xffff}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002130000ffff000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x42, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fc0000001900010000000000000000893ad4cf00000000000000000000000000fc0100000000000000", @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffff"], 0xfc}}, 0x408) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000001c0), 0x1103, r1}, 0x38) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r1, 0xffffffffffffffff}, &(0x7f00000004c0), &(0x7f0000000500)='%+9llu \x00'}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000280), &(0x7f0000000880), 0x531c, r3}, 0x38) 0s ago: executing program 9 (id=1071): syz_mount_image$ext4(&(0x7f0000000c00)='ext4\x00', &(0x7f0000000c40)='./file0\x00', 0x0, &(0x7f0000000c80), 0x1, 0xbf6, &(0x7f0000000cc0)="$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") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdir(0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x180) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0xfffffffffffffffd, 0x7}, 0x4000, 0x0, 0x20000000, 0x3, 0x800000, 0xffffffd9, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x11, 0xffffffffffffffff, 0xc9751000) socket$inet(0x2, 0x1, 0x6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) write$sndseq(0xffffffffffffffff, 0x0, 0x0) flistxattr(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 6b65be2-f6da-4727-8c75-0525a5b65a09. [ 76.541693][ T5355] TC_ACT_REPEAT abuse ? [ 76.740632][ T5378] netlink: 8 bytes leftover after parsing attributes in process `syz.8.487'. [ 76.774607][ T5367] syzkaller0: entered promiscuous mode [ 76.774630][ T5367] syzkaller0: entered allmulticast mode [ 76.876275][ T5384] VFS: file-max limit 0 reached [ 76.884767][ T5378] syzkaller0: left allmulticast mode [ 76.951073][ T29] kauditd_printk_skb: 12 callbacks suppressed [ 76.951091][ T29] audit: type=1400 audit(1790399496.295:937): avc: denied { write } for pid=5376 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.056924][ T29] audit: type=1400 audit(1790399496.395:938): avc: denied { write } for pid=5396 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.470921][ T29] audit: type=1400 audit(1790399496.815:939): avc: denied { write } for pid=5406 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.569841][ T29] audit: type=1400 audit(1790399496.915:940): avc: denied { write } for pid=5422 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.610170][ T5428] loop7: detected capacity change from 0 to 512 [ 77.650014][ T3023] 8021q: adding VLAN 0 to HW filter on device eth15 [ 77.654686][ T5428] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 77.654846][ T5428] ext4 filesystem being mounted at /1/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 77.794008][ T5041] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.815615][ T5419] loop0: detected capacity change from 0 to 1024 [ 77.871794][ T29] audit: type=1400 audit(1790399497.215:941): avc: denied { write } for pid=5433 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.904798][ T5419] EXT4-fs: Ignoring removed i_version option [ 77.922726][ T29] audit: type=1400 audit(1790399497.265:942): avc: denied { write } for pid=5446 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.930207][ T5419] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 77.930269][ T5419] EXT4-fs (loop0): couldn't mount as ext2 due to feature incompatibilities [ 77.979565][ T3023] 8021q: adding VLAN 0 to HW filter on device eth16 [ 78.261497][ T5460] bond0: option arp_validate: invalid value () [ 78.454441][ T29] audit: type=1400 audit(1790399497.795:943): avc: denied { ioctl } for pid=5466 comm="syz.0.501" path="socket:[14242]" dev="sockfs" ino=14242 ioctlcmd=0x89ed scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 78.585705][ T5473] netlink: 24 bytes leftover after parsing attributes in process `syz.0.501'. [ 78.633478][ T5470] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.655054][ T29] audit: type=1400 audit(1790399497.965:944): avc: denied { create } for pid=5466 comm="syz.0.501" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 78.699260][ T5474] loop7: detected capacity change from 0 to 512 [ 78.699651][ T5474] EXT4-fs: test_dummy_encryption option not supported [ 78.740555][ T5470] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.768133][ T29] audit: type=1400 audit(1790399498.105:945): avc: denied { unlink } for pid=3300 comm="syz-executor" name="file0" dev="tmpfs" ino=634 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 78.822964][ T5470] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.925391][ T5470] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.059155][ T5483] VFS: file-max limit 0 reached [ 79.094221][ T51] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.129631][ T5452] loop2: detected capacity change from 0 to 8192 [ 79.157782][ T51] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.168136][ T51] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.182484][ T51] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.557261][ T29] audit: type=1400 audit(1790399498.895:946): avc: denied { getopt } for pid=5480 comm="syz.8.507" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 79.584590][ T5494] bond0: left allmulticast mode [ 79.584610][ T5494] bond_slave_0: left allmulticast mode [ 79.584624][ T5494] bond_slave_1: left allmulticast mode [ 79.584761][ T5494] bond0: left promiscuous mode [ 79.584775][ T5494] bond_slave_0: left promiscuous mode [ 79.584862][ T5494] bond_slave_1: left promiscuous mode [ 79.585166][ T5494] bridge0: port 3(bond0) entered disabled state [ 79.890229][ T5494] bridge_slave_0: left allmulticast mode [ 79.890256][ T5494] bridge_slave_0: left promiscuous mode [ 79.890485][ T5494] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.934047][ T5494] bridge_slave_1: left allmulticast mode [ 79.934101][ T5494] bridge_slave_1: left promiscuous mode [ 79.934202][ T5494] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.962484][ T5494] bond0: (slave bond_slave_0): Releasing backup interface [ 79.965423][ T5494] bond0: (slave bond_slave_1): Releasing backup interface [ 79.994273][ T5498] loop2: detected capacity change from 0 to 512 [ 80.011554][ T5498] EXT4-fs (loop2): invalid journal inode [ 80.011653][ T5498] EXT4-fs (loop2): can't get journal size [ 80.013836][ T5494] team0: Port device team_slave_0 removed [ 80.026365][ T5498] EXT4-fs (loop2): 1 truncate cleaned up [ 80.045959][ T5498] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.062792][ T5494] team0: Port device team_slave_1 removed [ 80.066152][ T5494] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.066171][ T5494] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.091420][ T5494] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 80.100383][ T5495] team0: Port device xfrm0 added [ 80.106221][ T5496] tipc: Started in network mode [ 80.106294][ T5496] tipc: Node identity 123b5a913fe8, cluster identity 4711 [ 80.106484][ T5496] tipc: Enabled bearer , priority 0 [ 80.233384][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.345321][ T5510] loop8: detected capacity change from 0 to 512 [ 80.380076][ T5510] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 80.404941][ T5510] EXT4-fs (loop8): 1 truncate cleaned up [ 80.405748][ T5510] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.459052][ T5093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.511633][ T5521] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 80.511809][ T5521] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 80.601597][ T5523] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.654089][ T5523] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.756583][ T5523] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.844366][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 80.845765][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 80.847219][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 80.874482][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 80.875579][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 80.876909][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 80.884903][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 80.889944][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 80.912529][ T5523] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.933110][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 80.934566][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 80.935935][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 80.937039][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 80.940604][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 80.941666][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 80.942930][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 80.948750][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 80.958493][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 80.974402][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.017946][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.056173][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.057205][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.082532][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.083545][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.085968][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.086972][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.131773][ T9] tipc: Node number set to 768826001 [ 81.150750][ T401] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.185302][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.187747][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.210743][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.214810][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.240845][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.242019][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.247865][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.294401][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.295592][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.319877][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.320834][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.321889][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.322912][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.324046][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.324888][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.326031][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.326987][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.330960][ T5531] FAULT_INJECTION: forcing a failure. [ 81.330960][ T5531] name failslab, interval 1, probability 0, space 0, times 0 [ 81.331062][ T5531] CPU: 1 UID: 0 PID: 5531 Comm: syz.8.524 Not tainted syzkaller #0 PREEMPT(lazy) [ 81.331214][ T5531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 81.331258][ T5531] Call Trace: [ 81.331280][ T5531] [ 81.331302][ T5531] __dump_stack+0x1d/0x30 [ 81.331451][ T5531] dump_stack_lvl+0x95/0xd0 [ 81.331525][ T5531] dump_stack+0x15/0x1b [ 81.331627][ T5531] should_fail_ex+0x262/0x280 [ 81.331710][ T5531] ? security_tun_dev_alloc_security+0x3f/0x120 [ 81.331833][ T5531] should_failslab+0x8c/0xb0 [ 81.332013][ T5531] __kmalloc_noprof+0xd0/0x4d0 [ 81.332252][ T5531] ? security_tun_dev_alloc_security+0x3f/0x120 [ 81.332359][ T5531] security_tun_dev_alloc_security+0x3f/0x120 [ 81.332477][ T5531] tun_net_init+0x58/0x2c0 [ 81.332615][ T5531] register_netdevice+0x239/0x11a0 [ 81.332674][ T5531] tun_set_iff+0x5fe/0x870 [ 81.332780][ T5531] __tun_chr_ioctl+0x682/0x1550 [ 81.332901][ T5531] ? selinux_file_ioctl+0x33c/0x3c0 [ 81.332993][ T5531] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 81.333073][ T5531] tun_chr_ioctl+0x27/0x40 [ 81.333156][ T5531] __se_sys_ioctl+0xce/0x140 [ 81.333312][ T5531] __x64_sys_ioctl+0x43/0x50 [ 81.333411][ T5531] x64_sys_call+0x239d/0x2550 [ 81.333499][ T5531] do_syscall_64+0x112/0x360 [ 81.333638][ T5531] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.333706][ T5531] RIP: 0033:0x7ff87c0fe159 [ 81.333759][ T5531] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 81.333831][ T5531] RSP: 002b:00007ff87ab57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 81.333902][ T5531] RAX: ffffffffffffffda RBX: 00007ff87c385fa0 RCX: 00007ff87c0fe159 [ 81.333945][ T5531] RDX: 00002000000002c0 RSI: 00000000400454ca RDI: 0000000000000006 [ 81.333990][ T5531] RBP: 00007ff87c19506b R08: 0000000000000000 R09: 0000000000000000 [ 81.334029][ T5531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 81.334066][ T5531] R13: 00007ff87c386038 R14: 00007ff87c385fa0 R15: 00007ffc49b48968 [ 81.334180][ T5531] [ 81.378182][ T401] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.378378][ T401] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.378549][ T401] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.443865][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.669687][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.670870][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.671928][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.673068][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.674241][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.676670][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.677737][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.743152][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.744459][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.745679][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.746794][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.747872][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.793351][ T5533] loop7: detected capacity change from 0 to 512 [ 81.813775][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.814808][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.815221][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.815623][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.815994][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.816356][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.816791][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.817293][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.817857][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.827120][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.827568][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.827917][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.899865][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.911705][ T5529] 9pnet_fd: p9_fd_create_tcp (5529): problem connecting socket to 127.0.0.1 [ 81.941587][ T5533] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 81.941932][ T5533] FAT-fs (loop7): Filesystem has been set read-only [ 81.961451][ T5533] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 82.017090][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 82.017106][ T29] audit: type=1400 audit(1790399501.355:954): avc: denied { create } for pid=5542 comm="syz.0.529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 82.093113][ T29] audit: type=1400 audit(1790399501.435:955): avc: denied { read } for pid=5542 comm="syz.0.529" path="socket:[15367]" dev="sockfs" ino=15367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 82.096118][ T29] audit: type=1400 audit(1790399501.435:956): avc: denied { write } for pid=5542 comm="syz.0.529" path="socket:[15367]" dev="sockfs" ino=15367 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 82.190067][ T5546] netlink: 'syz.2.531': attribute type 7 has an invalid length. [ 82.347244][ T5041] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 82.347357][ T5041] FAT-fs (loop7): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 82.487168][ T5565] FAULT_INJECTION: forcing a failure. [ 82.487168][ T5565] name failslab, interval 1, probability 0, space 0, times 0 [ 82.487251][ T5565] CPU: 1 UID: 60928 PID: 5565 Comm: syz.8.540 Not tainted syzkaller #0 PREEMPT(lazy) [ 82.487276][ T5565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 82.487293][ T5565] Call Trace: [ 82.487301][ T5565] [ 82.487312][ T5565] __dump_stack+0x1d/0x30 [ 82.487408][ T5565] dump_stack_lvl+0x95/0xd0 [ 82.487483][ T5565] dump_stack+0x15/0x1b [ 82.487511][ T5565] should_fail_ex+0x262/0x280 [ 82.487612][ T5565] ? security_sb_alloc+0x48/0x100 [ 82.487645][ T5565] should_failslab+0x8c/0xb0 [ 82.487694][ T5565] __kmalloc_noprof+0xd0/0x4d0 [ 82.487741][ T5565] ? should_failslab+0x8c/0xb0 [ 82.487836][ T5565] ? security_sb_alloc+0x48/0x100 [ 82.487865][ T5565] ? __account_obj_stock+0x43d/0x720 [ 82.487915][ T5565] security_sb_alloc+0x48/0x100 [ 82.488012][ T5565] sget_fc+0x5c4/0xfa0 [ 82.488043][ T5565] ? __pfx_set_anon_super_fc+0x10/0x10 [ 82.488149][ T5565] ? __kmalloc_cache_noprof+0x19b/0x400 [ 82.488192][ T5565] ? mqueue_init_fs_context+0x38/0x2c0 [ 82.488272][ T5565] ? __pfx_mqueue_fill_super+0x10/0x10 [ 82.488298][ T5565] get_tree_nodev+0x2a/0x100 [ 82.488347][ T5565] mqueue_get_tree+0x5d/0x80 [ 82.488387][ T5565] vfs_get_tree+0x57/0x1d0 [ 82.488434][ T5565] fc_mount_longterm+0x18/0xb0 [ 82.488473][ T5565] mq_init_ns+0x2db/0x370 [ 82.488552][ T5565] copy_ipcs+0x26d/0x460 [ 82.488583][ T5565] create_new_namespaces+0x121/0x420 [ 82.488628][ T5565] unshare_nsproxy_namespaces+0x115/0x150 [ 82.488681][ T5565] ksys_unshare+0x42b/0x710 [ 82.488722][ T5565] __x64_sys_unshare+0x1f/0x30 [ 82.488758][ T5565] x64_sys_call+0x1e33/0x2550 [ 82.488826][ T5565] do_syscall_64+0x112/0x360 [ 82.488886][ T5565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.488917][ T5565] RIP: 0033:0x7ff87c0fe159 [ 82.488937][ T5565] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.489018][ T5565] RSP: 002b:00007ff87ab57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 82.489038][ T5565] RAX: ffffffffffffffda RBX: 00007ff87c385fa0 RCX: 00007ff87c0fe159 [ 82.489057][ T5565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006a040000 [ 82.489149][ T5565] RBP: 00007ff87c19506b R08: 0000000000000000 R09: 0000000000000000 [ 82.489208][ T5565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.489225][ T5565] R13: 00007ff87c386038 R14: 00007ff87c385fa0 R15: 00007ffc49b48968 [ 82.489252][ T5565] [ 82.773478][ T5569] loop8: detected capacity change from 0 to 512 [ 82.793208][ T5569] FAT-fs (loop8): data area starts beyond volume (199892 > 45184) [ 82.803315][ T5569] FAT-fs (loop8): Can't find a valid FAT filesystem [ 83.187297][ T29] audit: type=1326 audit(1790399502.525:957): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5571 comm="syz.3.543" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557727e159 code=0x7ffc0000 [ 83.187353][ T29] audit: type=1326 audit(1790399502.525:958): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5571 comm="syz.3.543" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557727e159 code=0x7ffc0000 [ 83.187417][ T29] audit: type=1326 audit(1790399502.525:959): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5571 comm="syz.3.543" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557727e159 code=0x7ffc0000 [ 83.187443][ T29] audit: type=1326 audit(1790399502.525:960): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5571 comm="syz.3.543" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f557727e159 code=0x7ffc0000 [ 83.187526][ T29] audit: type=1326 audit(1790399502.525:961): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5571 comm="syz.3.543" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557727e159 code=0x7ffc0000 [ 83.187620][ T29] audit: type=1326 audit(1790399502.525:962): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5571 comm="syz.3.543" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557727e159 code=0x7ffc0000 [ 83.187717][ T29] audit: type=1326 audit(1790399502.525:963): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5571 comm="syz.3.543" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f557727e159 code=0x7ffc0000 [ 83.506323][ T5591] tipc: Failed to remove unknown binding: 66,0,0/768826001:2793719501/2793719503 [ 83.506354][ T5591] tipc: Failed to remove unknown binding: 66,0,0/768826001:2793719501/2793719502 [ 83.506635][ T5591] tipc: Failed to remove unknown binding: 66,0,0/768826001:2793719501/2793719503 [ 83.506789][ T5591] tipc: Failed to remove unknown binding: 66,0,0/768826001:2793719501/2793719502 [ 83.578880][ T5595] bridge_slave_0: left allmulticast mode [ 83.578921][ T5595] bridge_slave_0: left promiscuous mode [ 83.579076][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.688483][ T5601] bond0: left allmulticast mode [ 83.688506][ T5601] bond_slave_0: left allmulticast mode [ 83.688566][ T5601] bond_slave_1: left allmulticast mode [ 83.688625][ T5601] bond0: left promiscuous mode [ 83.688642][ T5601] bond_slave_0: left promiscuous mode [ 83.688716][ T5601] bond_slave_1: left promiscuous mode [ 83.689056][ T5601] bridge0: port 3(bond0) entered disabled state [ 83.694300][ T5601] bridge_slave_1: left allmulticast mode [ 83.694325][ T5601] bridge_slave_1: left promiscuous mode [ 83.694490][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.823561][ T5603] bridge_slave_0: left allmulticast mode [ 83.823581][ T5603] bridge_slave_0: left promiscuous mode [ 83.823725][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.852450][ T5603] bridge_slave_1: left allmulticast mode [ 83.854132][ T5603] bridge_slave_1: left promiscuous mode [ 83.854269][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.877705][ T5603] bond0: (slave bond_slave_0): Releasing backup interface [ 83.888945][ T5603] bond0: (slave bond_slave_1): Releasing backup interface [ 83.890929][ T5611] ./dev/sda1: Can't lookup blockdev [ 83.912325][ T5603] team0: Port device team_slave_0 removed [ 83.915642][ T5603] team0: Port device team_slave_1 removed [ 83.916776][ T5603] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.916796][ T5603] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.949035][ T5603] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.949057][ T5603] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.957429][ T5603] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 83.976670][ T5608] team0: Port device xfrm0 added [ 83.986891][ T5612] tipc: Started in network mode [ 83.986971][ T5612] tipc: Node identity 36f030edc87e, cluster identity 4711 [ 83.987064][ T5612] tipc: Enabled bearer , priority 0 [ 84.069017][ T5619] netlink: 12 bytes leftover after parsing attributes in process `syz.8.561'. [ 84.105830][ T5619] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 84.144261][ T5619] team0: Port device xfrm0 removed [ 84.147064][ T5619] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 84.148587][ T108] tipc: Resetting bearer [ 84.930211][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.930250][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.930400][ T5644] bridge_slave_0: entered allmulticast mode [ 84.930865][ T5644] bridge_slave_0: entered promiscuous mode [ 84.931085][ T5644] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.931117][ T5644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.974361][ T5644] bridge_slave_0: left allmulticast mode [ 84.974383][ T5644] bridge_slave_0: left promiscuous mode [ 84.974479][ T5644] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.998729][ T3399] tipc: Node number set to 4270731501 [ 85.416989][ T5678] loop0: detected capacity change from 0 to 512 [ 85.452496][ T5678] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.576: iget: bad i_size value: 38620345925642 [ 85.452617][ T5678] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 85.453741][ T5678] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.576: couldn't read orphan inode 15 (err -117) [ 85.453823][ T5678] loop0: lost filesystem error report for type 5 error -117 [ 85.502462][ T5678] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 85.529302][ T12] netdevsim netdevsim7 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.553875][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.561557][ T12] netdevsim netdevsim7 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.604079][ T12] netdevsim netdevsim7 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.672578][ T12] netdevsim netdevsim7 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.731418][ T31] netdevsim netdevsim7 eth18: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.764674][ T12] bridge_slave_1: left allmulticast mode [ 85.764696][ T12] bridge_slave_1: left promiscuous mode [ 85.764880][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.766024][ T12] bridge_slave_0: left allmulticast mode [ 85.766040][ T12] bridge_slave_0: left promiscuous mode [ 85.766162][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.904926][ T5683] loop8: detected capacity change from 0 to 764 [ 85.906822][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.914716][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.935870][ T12] bond0 (unregistering): Released all slaves [ 85.957809][ T31] netdevsim netdevsim7 eth19: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.957932][ T31] netdevsim netdevsim7 eth17: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.957973][ T31] netdevsim netdevsim7 eth20: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.000750][ T12] hsr_slave_0: left promiscuous mode [ 86.001175][ T12] hsr_slave_1: left promiscuous mode [ 86.001613][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.001631][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.001909][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.001926][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.005441][ T12] veth1_macvtap: left promiscuous mode [ 86.005597][ T12] veth0_macvtap: left promiscuous mode [ 86.005723][ T12] veth1_vlan: left promiscuous mode [ 86.005775][ T12] veth0_vlan: left promiscuous mode [ 86.239626][ T5710] FAULT_INJECTION: forcing a failure. [ 86.239626][ T5710] name failslab, interval 1, probability 0, space 0, times 0 [ 86.239739][ T5710] CPU: 0 UID: 0 PID: 5710 Comm: syz.2.584 Not tainted syzkaller #0 PREEMPT(lazy) [ 86.239767][ T5710] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.239780][ T5710] Call Trace: [ 86.239789][ T5710] [ 86.239797][ T5710] __dump_stack+0x1d/0x30 [ 86.239862][ T5710] dump_stack_lvl+0x95/0xd0 [ 86.239946][ T5710] dump_stack+0x15/0x1b [ 86.239978][ T5710] should_fail_ex+0x262/0x280 [ 86.240013][ T5710] ? create_filter_start+0xcf/0x140 [ 86.240055][ T5710] should_failslab+0x8c/0xb0 [ 86.240196][ T5710] __kmalloc_cache_noprof+0x7a/0x400 [ 86.240241][ T5710] ? create_filter_start+0xcf/0x140 [ 86.240284][ T5710] create_filter_start+0xcf/0x140 [ 86.240326][ T5710] apply_subsystem_event_filter+0x109/0xcd0 [ 86.240415][ T5710] ? __kmalloc_node_track_caller_noprof+0x484/0x500 [ 86.240556][ T5710] subsystem_filter_write+0x79/0xd0 [ 86.240588][ T5710] ? __pfx_subsystem_filter_write+0x10/0x10 [ 86.240619][ T5710] vfs_write+0x254/0x9a0 [ 86.240669][ T5710] ? __fget_files+0x184/0x1c0 [ 86.240699][ T5710] ? mutex_lock+0x57/0x90 [ 86.240779][ T5710] ksys_write+0xdc/0x1a0 [ 86.240827][ T5710] __x64_sys_write+0x40/0x50 [ 86.240868][ T5710] x64_sys_call+0x154e/0x2550 [ 86.240896][ T5710] do_syscall_64+0x112/0x360 [ 86.240927][ T5710] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.241024][ T5710] RIP: 0033:0x7fa746a1e159 [ 86.241047][ T5710] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.241073][ T5710] RSP: 002b:00007fa745477028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 86.241130][ T5710] RAX: ffffffffffffffda RBX: 00007fa746ca5fa0 RCX: 00007fa746a1e159 [ 86.241144][ T5710] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 86.241167][ T5710] RBP: 00007fa746ab506b R08: 0000000000000000 R09: 0000000000000000 [ 86.241185][ T5710] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 86.241202][ T5710] R13: 00007fa746ca6038 R14: 00007fa746ca5fa0 R15: 00007ffc2ba695e8 [ 86.241229][ T5710] [ 86.266276][ T5718] process 'syz.0.585' launched './file1' with NULL argv: empty string added [ 86.537296][ T12] team0 (unregistering): Port device team_slave_1 removed [ 86.574371][ T12] team0 (unregistering): Port device team_slave_0 removed [ 86.742505][ T3023] 8021q: adding VLAN 0 to HW filter on device eth17 [ 87.032198][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 87.032218][ T29] audit: type=1400 audit(1790399762.369:1031): avc: denied { write } for pid=5736 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.086714][ T5686] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.086818][ T5686] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.086886][ T5686] bridge_slave_0: entered allmulticast mode [ 87.090899][ T5686] bridge_slave_0: entered promiscuous mode [ 87.096445][ T5686] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.096528][ T5686] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.096718][ T5686] bridge_slave_1: entered allmulticast mode [ 87.101408][ T5686] bridge_slave_1: entered promiscuous mode [ 87.171798][ T29] audit: type=1400 audit(1790399762.509:1032): avc: denied { write } for pid=5761 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.217527][ T5686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.226581][ T5686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.293875][ T3023] 8021q: adding VLAN 0 to HW filter on device eth18 [ 87.312451][ T5686] team0: Port device team_slave_0 added [ 87.313545][ T5686] team0: Port device team_slave_1 added [ 87.359797][ T5686] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.359817][ T5686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.359855][ T5686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.360628][ T5686] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.360643][ T5686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.360680][ T5686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.430966][ T5686] hsr_slave_0: entered promiscuous mode [ 87.431999][ T5686] hsr_slave_1: entered promiscuous mode [ 87.432658][ T5686] debugfs: 'hsr0' already exists in 'hsr' [ 87.432705][ T5686] Cannot create hsr debugfs directory [ 87.659583][ T5686] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 87.664741][ T5686] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.665822][ T5686] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 87.669137][ T5686] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.671104][ T5686] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 87.679872][ T5686] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.681433][ T5686] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 87.692629][ T5686] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.750340][ T5686] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.750380][ T5686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.750450][ T5686] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.750576][ T5686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.837931][ T29] audit: type=1400 audit(1790399763.169:1033): avc: denied { write } for pid=5774 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.916631][ T5686] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.932546][ T29] audit: type=1400 audit(1790399763.269:1034): avc: denied { write } for pid=5799 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.991142][ T108] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.991957][ T108] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.002576][ T3023] 8021q: adding VLAN 0 to HW filter on device eth19 [ 88.084401][ T5686] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.095925][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.095970][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.141781][ T108] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.141814][ T108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.407303][ T29] audit: type=1400 audit(1790399763.739:1035): avc: denied { write } for pid=5807 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.476462][ T5686] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.515711][ T29] audit: type=1400 audit(1790399763.849:1036): avc: denied { write } for pid=5839 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.563338][ T3023] 8021q: adding VLAN 0 to HW filter on device eth20 [ 88.756837][ T5686] veth0_vlan: entered promiscuous mode [ 88.763876][ T5686] veth1_vlan: entered promiscuous mode [ 88.812511][ T5686] veth0_macvtap: entered promiscuous mode [ 88.822944][ T5686] veth1_macvtap: entered promiscuous mode [ 88.850688][ T5857] loop2: detected capacity change from 0 to 512 [ 88.867928][ T5686] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.887839][ T5686] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.931167][ T108] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.931338][ T108] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.931521][ T108] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.957303][ T5857] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 88.957391][ T5857] FAT-fs (loop2): Filesystem has been set read-only [ 88.959488][ T108] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.962579][ T5857] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 89.065827][ T29] audit: type=1400 audit(1790399764.400:1037): avc: denied { write } for pid=5860 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.122553][ T29] audit: type=1400 audit(1790399764.460:1038): avc: denied { write } for pid=5881 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 89.172304][ T5876] loop9: detected capacity change from 0 to 512 [ 89.204104][ T3301] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 89.204253][ T3301] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 89.241409][ T5876] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 89.272518][ T5876] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 89.274918][ T5876] EXT4-fs (loop9): orphan cleanup on readonly fs [ 89.281036][ T5876] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:4223: comm syz.9.578: Allocating blocks 41-42 which overlap fs metadata [ 89.281173][ T5876] loop9: lost filesystem error report for type 5 error -117 [ 89.284402][ T5876] EXT4-fs (loop9): Remounting filesystem read-only [ 89.284502][ T5876] Quota error (device loop9): write_blk: dquota write failed [ 89.284541][ T5876] Quota error (device loop9): qtree_write_dquot: Error -117 occurred while creating quota [ 89.284799][ T5876] EXT4-fs (loop9): 1 truncate cleaned up [ 89.286081][ T5876] EXT4-fs (loop9): pa ffff8881006635b0: logic 1, phys. 41, len 23 [ 89.289001][ T5876] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 89.374701][ T5686] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.496755][ T5893] sctp: [Deprecated]: syz.9.608 (pid 5893) Use of struct sctp_assoc_value in delayed_ack socket option. [ 89.496755][ T5893] Use struct sctp_sack_info instead [ 89.552875][ T5893] loop9: detected capacity change from 0 to 512 [ 89.572056][ T5893] EXT4-fs (loop9): can't mount with data=, fs mounted w/o journal [ 89.574058][ T414] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.641865][ T414] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.712519][ T414] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.735625][ T5906] tipc: Failed to remove unknown binding: 66,0,0/4270731501:3773449986/3773449988 [ 89.735656][ T5906] tipc: Failed to remove unknown binding: 66,0,0/4270731501:3773449986/3773449987 [ 89.735940][ T5906] tipc: Failed to remove unknown binding: 66,0,0/4270731501:3773449986/3773449988 [ 89.735966][ T5906] tipc: Failed to remove unknown binding: 66,0,0/4270731501:3773449986/3773449987 [ 89.812595][ T5902] loop0: detected capacity change from 0 to 512 [ 89.835801][ T414] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.909169][ T5902] EXT4-fs (loop0): invalid #clusters per group: 95 [ 89.996029][ T31] netdevsim netdevsim2 eth23: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.025543][ T5918] FAULT_INJECTION: forcing a failure. [ 90.025543][ T5918] name failslab, interval 1, probability 0, space 0, times 0 [ 90.025584][ T5918] CPU: 0 UID: 0 PID: 5918 Comm: syz.9.618 Not tainted syzkaller #0 PREEMPT(lazy) [ 90.025653][ T5918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.025700][ T5918] Call Trace: [ 90.025706][ T5918] [ 90.025713][ T5918] __dump_stack+0x1d/0x30 [ 90.025736][ T5918] dump_stack_lvl+0x95/0xd0 [ 90.025845][ T5918] dump_stack+0x15/0x1b [ 90.025869][ T5918] should_fail_ex+0x262/0x280 [ 90.025892][ T5918] should_failslab+0x8c/0xb0 [ 90.025994][ T5918] __kvmalloc_node_noprof+0x168/0x5c0 [ 90.026032][ T5918] ? io_rsrc_data_alloc+0x2d/0x70 [ 90.026061][ T5918] ? io_rsrc_data_alloc+0x2d/0x70 [ 90.026175][ T5918] io_rsrc_data_alloc+0x2d/0x70 [ 90.026209][ T5918] io_alloc_file_tables+0x21/0x90 [ 90.026309][ T5918] io_sqe_files_register+0x12e/0x4e0 [ 90.026395][ T5918] __se_sys_io_uring_register+0xe7e/0x1330 [ 90.026423][ T5918] ? __se_sys_futex+0x2f6/0x370 [ 90.026529][ T5918] ? restore_fpregs_from_fpstate+0x61/0x110 [ 90.026552][ T5918] __x64_sys_io_uring_register+0x55/0x70 [ 90.026625][ T5918] x64_sys_call+0x1ff6/0x2550 [ 90.026657][ T5918] do_syscall_64+0x112/0x360 [ 90.026684][ T5918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.026707][ T5918] RIP: 0033:0x7f5b0474e159 [ 90.026747][ T5918] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.026764][ T5918] RSP: 002b:00007f5b031a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 90.026787][ T5918] RAX: ffffffffffffffda RBX: 00007f5b049d5fa0 RCX: 00007f5b0474e159 [ 90.026800][ T5918] RDX: 0000200000002d40 RSI: 0000000000000002 RDI: 0000000000000004 [ 90.026914][ T5918] RBP: 00007f5b047e506b R08: 0000000000000000 R09: 0000000000000000 [ 90.026926][ T5918] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000000 [ 90.026941][ T5918] R13: 00007f5b049d6038 R14: 00007f5b049d5fa0 R15: 00007ffcff747fe8 [ 90.026960][ T5918] [ 90.040198][ T414] bond0: left allmulticast mode [ 90.040217][ T414] bond_slave_0: left allmulticast mode [ 90.040285][ T414] bond_slave_1: left allmulticast mode [ 90.040443][ T414] bond0: left promiscuous mode [ 90.040484][ T414] bond_slave_0: left promiscuous mode [ 90.040674][ T414] bond_slave_1: left promiscuous mode [ 90.041260][ T414] bridge0: port 3(bond0) entered disabled state [ 90.059805][ T414] bridge_slave_1: left allmulticast mode [ 90.059828][ T414] bridge_slave_1: left promiscuous mode [ 90.060196][ T414] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.066517][ T414] bridge_slave_0: left allmulticast mode [ 90.066592][ T414] bridge_slave_0: left promiscuous mode [ 90.066908][ T414] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.367929][ T5912] loop8: detected capacity change from 0 to 764 [ 90.452518][ T414] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 90.472119][ T414] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 90.473085][ T414] bond0 (unregistering): Released all slaves [ 90.499348][ T5912] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 90.503273][ T5942] FAULT_INJECTION: forcing a failure. [ 90.503273][ T5942] name failslab, interval 1, probability 0, space 0, times 0 [ 90.503310][ T5942] CPU: 0 UID: 0 PID: 5942 Comm: syz.9.622 Not tainted syzkaller #0 PREEMPT(lazy) [ 90.503358][ T5942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.503371][ T5942] Call Trace: [ 90.503378][ T5942] [ 90.503468][ T5942] __dump_stack+0x1d/0x30 [ 90.503502][ T5942] dump_stack_lvl+0x95/0xd0 [ 90.503611][ T5942] dump_stack+0x15/0x1b [ 90.503638][ T5942] should_fail_ex+0x262/0x280 [ 90.503667][ T5942] ? do_kimage_alloc_init+0x2f/0x160 [ 90.503687][ T5942] should_failslab+0x8c/0xb0 [ 90.503733][ T5942] __kmalloc_cache_noprof+0x7a/0x400 [ 90.503775][ T5942] ? do_kimage_alloc_init+0x2f/0x160 [ 90.503828][ T5942] do_kimage_alloc_init+0x2f/0x160 [ 90.503855][ T5942] do_kexec_load+0xc9/0x510 [ 90.503890][ T5942] __se_sys_kexec_load+0x134/0x160 [ 90.503917][ T5942] __x64_sys_kexec_load+0x55/0x70 [ 90.503987][ T5942] x64_sys_call+0x1f30/0x2550 [ 90.504078][ T5942] do_syscall_64+0x112/0x360 [ 90.504108][ T5942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.504138][ T5942] RIP: 0033:0x7f5b0474e159 [ 90.504225][ T5942] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.504251][ T5942] RSP: 002b:00007f5b031a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f6 [ 90.504324][ T5942] RAX: ffffffffffffffda RBX: 00007f5b049d5fa0 RCX: 00007f5b0474e159 [ 90.504386][ T5942] RDX: 00002000000002c0 RSI: 0000000000000001 RDI: 0000000000000002 [ 90.504401][ T5942] RBP: 00007f5b047e506b R08: 0000000000000000 R09: 0000000000000000 [ 90.504419][ T5942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.504435][ T5942] R13: 00007f5b049d6038 R14: 00007f5b049d5fa0 R15: 00007ffcff747fe8 [ 90.504469][ T5942] [ 90.538015][ T51] netdevsim netdevsim2 eth21: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.645645][ T414] hsr_slave_0: left promiscuous mode [ 90.654153][ T414] hsr_slave_1: left promiscuous mode [ 90.654692][ T414] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.654713][ T414] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.661574][ T414] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.661653][ T414] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.734841][ T414] veth1_macvtap: left promiscuous mode [ 90.734902][ T414] veth0_macvtap: left promiscuous mode [ 90.734948][ T414] veth1_vlan: left promiscuous mode [ 90.735018][ T414] veth0_vlan: left promiscuous mode [ 91.045416][ T5948] loop0: detected capacity change from 0 to 512 [ 91.115571][ T5948] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 91.117602][ T414] team0 (unregistering): Port device team_slave_1 removed [ 91.135219][ T414] team0 (unregistering): Port device team_slave_0 removed [ 91.155427][ T5948] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 91.170937][ T5948] EXT4-fs (loop0): orphan cleanup on readonly fs [ 91.219174][ T5948] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4223: comm syz.0.623: Allocating blocks 41-42 which overlap fs metadata [ 91.219213][ T5948] loop0: lost filesystem error report for type 5 error -117 [ 91.221988][ T5948] EXT4-fs (loop0): Remounting filesystem read-only [ 91.226496][ T5948] EXT4-fs (loop0): 1 truncate cleaned up [ 91.240575][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 91.240596][ C1] EXT4-fs (loop0): initial error at time 1790399766: ext4_mb_mark_diskspace_used:4223 [ 91.240617][ C1] EXT4-fs (loop0): last error at time 1790399766: ext4_mb_mark_diskspace_used:4223 [ 91.288440][ T31] netdevsim netdevsim2 eth22: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.288509][ T31] netdevsim netdevsim2 eth24: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.292308][ T5948] EXT4-fs (loop0): pa ffff888105df1310: logic 1, phys. 41, len 23 [ 91.313930][ T5948] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 91.387576][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 91.458771][ T5982] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 91.493702][ T414] IPVS: stop unused estimator thread 0... [ 91.558409][ T5907] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.558459][ T5907] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.558539][ T5907] bridge_slave_0: entered allmulticast mode [ 91.559100][ T5907] bridge_slave_0: entered promiscuous mode [ 91.560577][ T5907] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.560616][ T5907] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.560763][ T5907] bridge_slave_1: entered allmulticast mode [ 91.561310][ T5907] bridge_slave_1: entered promiscuous mode [ 91.580236][ T5907] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.583625][ T5907] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.605732][ T5907] team0: Port device team_slave_0 added [ 91.607851][ T5907] team0: Port device team_slave_1 added [ 91.643480][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.643569][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.643660][ T5907] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.646707][ T5907] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.646746][ T5907] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 91.646877][ T5907] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.737074][ T5907] hsr_slave_0: entered promiscuous mode [ 91.737514][ T5907] hsr_slave_1: entered promiscuous mode [ 91.737859][ T5907] debugfs: 'hsr0' already exists in 'hsr' [ 91.737872][ T5907] Cannot create hsr debugfs directory [ 91.850751][ T5999] loop9: detected capacity change from 0 to 512 [ 91.878885][ T5999] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 91.878944][ T5999] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.017951][ T51] Bluetooth: hci0: Frame reassembly failed (-84) [ 92.052657][ T5907] netdevsim netdevsim1 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.085192][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 92.085207][ T29] audit: type=1400 audit(1790399767.420:1052): avc: denied { write } for pid=6006 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.136395][ T5686] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 92.150278][ T5907] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.186909][ T29] audit: type=1400 audit(1790399767.520:1053): avc: denied { write } for pid=6025 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.227757][ T5907] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.243024][ T6028] netlink: 'syz.0.636': attribute type 1 has an invalid length. [ 92.268764][ T6028] bond1: entered promiscuous mode [ 92.268896][ T6028] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.300763][ T5907] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.321393][ T6028] macvtap1: entered allmulticast mode [ 92.344589][ T6028] bond1: (slave bridge0): making interface the new active one [ 92.344614][ T6028] bridge0: entered promiscuous mode [ 92.359758][ T6028] bond1: (slave bridge0): Enslaving as an active interface with an up link [ 92.432092][ T5907] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.449012][ T5907] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 92.450107][ T5907] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.451890][ T6041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.638'. [ 92.456809][ T5907] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 92.465256][ T5907] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.499550][ T5907] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 92.504317][ T29] audit: type=1400 audit(1790399767.840:1054): avc: denied { write } for pid=6036 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.511752][ T5907] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.549569][ T5907] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 92.570790][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.573113][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.573926][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.576807][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.613693][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.614583][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.639010][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.639300][ T29] audit: type=1400 audit(1790399767.980:1055): avc: denied { write } for pid=6059 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 92.642650][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.646538][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.676115][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.712014][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.712978][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.715302][ T6052] loop9: detected capacity change from 0 to 8192 [ 92.746057][ T5907] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.754554][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.756278][ T29] audit: type=1400 audit(1790399768.090:1056): avc: denied { create } for pid=6051 comm="syz.9.640" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 92.786622][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.802432][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.803531][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.804228][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.834480][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.834825][ T5907] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.835811][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.863868][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.866691][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.866723][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.892223][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.894675][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.894755][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.906460][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.928676][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.939846][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.942848][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.968013][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.968871][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.969738][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.970479][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.971317][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.974873][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.975634][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 92.976471][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.048810][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.049614][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.050237][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.050787][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.051570][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.052534][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.053458][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.055980][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.056741][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.066409][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.142766][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.155627][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.156657][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.166444][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.185041][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.185895][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.186708][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.213833][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.214399][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.215028][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.215733][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.216432][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.253505][ T6072] netlink: 'syz.9.643': attribute type 11 has an invalid length. [ 93.269067][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.274538][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.285726][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.286801][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.314330][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.315156][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.315931][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.316668][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.352520][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.353158][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.353684][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.354307][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.354879][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.355475][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.356094][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.356733][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.377817][ T6079] netlink: 164 bytes leftover after parsing attributes in process `syz.0.644'. [ 93.436753][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.446741][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.456637][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.466362][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.476049][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.485749][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.486605][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.505250][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.505816][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.506558][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.542120][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.543265][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.544147][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.544979][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.545679][ T6049] 9pnet_fd: p9_fd_create_tcp (6049): problem connecting socket to 127.0.0.1 [ 93.555710][ T29] audit: type=1400 audit(1790399768.890:1057): avc: denied { map } for pid=6084 comm="syz.9.645" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 93.555800][ T29] audit: type=1400 audit(1790399768.890:1058): avc: denied { execute } for pid=6084 comm="syz.9.645" path="/dev/sg0" dev="devtmpfs" ino=135 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 93.615873][ T29] audit: type=1400 audit(1790399768.940:1059): avc: denied { write } for pid=6064 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.684898][ T29] audit: type=1400 audit(1790399769.020:1060): avc: denied { write } for pid=6092 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.791894][ T5907] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.942471][ T5907] veth0_vlan: entered promiscuous mode [ 93.954013][ T5907] veth1_vlan: entered promiscuous mode [ 93.978453][ T29] audit: type=1400 audit(1790399769.320:1061): avc: denied { write } for pid=6105 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 93.981633][ T5907] veth0_macvtap: entered promiscuous mode [ 93.983713][ T5907] veth1_macvtap: entered promiscuous mode [ 94.025335][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.046134][ T5907] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.096783][ T4617] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 94.257943][ T108] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.258482][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.259104][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.259490][ T51] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.443898][ T6161] netlink: 4 bytes leftover after parsing attributes in process `syz.8.655'. [ 94.685040][ T3023] 8021q: adding VLAN 0 to HW filter on device eth21 [ 94.717835][ T6173] syzkaller0: entered promiscuous mode [ 94.717936][ T6173] syzkaller0: entered allmulticast mode [ 94.783736][ T6197] loop0: detected capacity change from 0 to 512 [ 94.784133][ T6197] EXT4-fs: dax option not supported [ 94.842513][ T6200] netlink: 164 bytes leftover after parsing attributes in process `syz.8.660'. [ 94.922503][ T6204] mmap: syz.0.675 (6204) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 95.024191][ T3023] 8021q: adding VLAN 0 to HW filter on device eth22 [ 95.132300][ T6226] intel_ish_ipc 0000:00:01.0: ISH: Failed to get PCI regions [ 95.132327][ T6226] intel_ish_ipc 0000:00:01.0: probe with driver intel_ish_ipc failed with error -22 [ 95.184968][ T6237] netlink: 164 bytes leftover after parsing attributes in process `syz.9.678'. [ 95.274997][ T6231] loop8: detected capacity change from 0 to 512 [ 95.293473][ T3023] 8021q: adding VLAN 0 to HW filter on device eth23 [ 95.315560][ T6231] EXT4-fs (loop8): feature flags set on rev 0 fs, running e2fsck is recommended [ 95.335288][ T6231] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 95.336315][ T6231] EXT4-fs (loop8): orphan cleanup on readonly fs [ 95.348797][ T6231] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:4223: comm syz.8.665: Allocating blocks 41-42 which overlap fs metadata [ 95.349155][ T6231] loop8: lost filesystem error report for type 5 error -117 [ 95.352918][ T6231] EXT4-fs (loop8): Remounting filesystem read-only [ 95.353156][ T6231] EXT4-fs (loop8): 1 truncate cleaned up [ 95.354186][ T6231] EXT4-fs (loop8): pa ffff888105df1310: logic 1, phys. 41, len 23 [ 95.355159][ T6231] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 95.494276][ T5093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.609211][ T6259] batman_adv: batadv0: Adding interface: dummy0 [ 95.609229][ T6259] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.609264][ T6259] batman_adv: batadv0: Interface activated: dummy0 [ 95.610671][ T6259] netlink: 'syz.0.673': attribute type 10 has an invalid length. [ 95.610690][ T6259] netlink: 40 bytes leftover after parsing attributes in process `syz.0.673'. [ 95.610748][ T6259] batadv0: entered promiscuous mode [ 95.610767][ T6259] batadv0: entered allmulticast mode [ 95.612716][ T6259] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 95.699946][ T3023] 8021q: adding VLAN 0 to HW filter on device eth24 [ 95.747231][ T6277] loop1: detected capacity change from 0 to 1024 [ 95.752214][ T6277] EXT4-fs: Ignoring removed orlov option [ 95.794451][ T6277] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.808916][ T6275] loop0: detected capacity change from 0 to 128 [ 95.847974][ T6275] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 95.848304][ T6275] System zones: 1-3, 19-19, 35-36 [ 95.871479][ T6275] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 95.875141][ T6275] ext4 filesystem being mounted at /162/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 96.449255][ T3300] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 96.627139][ T5907] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.715400][ T6338] loop8: detected capacity change from 0 to 512 [ 96.790087][ T6338] EXT4-fs error (device loop8): ext4_orphan_get:1403: inode #15: comm syz.8.687: iget: bad i_size value: 38620345925642 [ 96.790188][ T6338] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 96.794050][ T6338] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.687: couldn't read orphan inode 15 (err -117) [ 96.794330][ T6338] loop8: lost filesystem error report for type 5 error -117 [ 96.796426][ C0] EXT4-fs (loop8): error count since last fsck: 2 [ 96.796448][ C0] EXT4-fs (loop8): initial error at time 1790399772: ext4_orphan_get:1403: inode 15 [ 96.796496][ C0] EXT4-fs (loop8): last error at time 1790399772: ext4_orphan_get:1408 [ 96.869220][ T6358] tipc: New replicast peer: 172.20.20.187 [ 96.869474][ T6358] tipc: Enabled bearer , priority 10 [ 97.033869][ T6338] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.052932][ T6361] loop0: detected capacity change from 0 to 512 [ 97.069952][ T6361] EXT4-fs (loop0): invalid journal inode [ 97.070020][ T6361] EXT4-fs (loop0): can't get journal size [ 97.075115][ T6361] EXT4-fs (loop0): 1 truncate cleaned up [ 97.076188][ T6361] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.092740][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 97.092855][ T29] audit: type=1400 audit(1790399772.430:1091): avc: denied { write } for pid=6360 comm="syz.0.691" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.136650][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.139587][ T29] audit: type=1400 audit(1790399772.480:1092): avc: denied { write } for pid=6360 comm="syz.0.691" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.148343][ T29] audit: type=1400 audit(1790399772.490:1093): avc: denied { write } for pid=6360 comm="syz.0.691" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.205676][ T29] audit: type=1400 audit(1790399772.540:1094): avc: denied { write } for pid=6360 comm="syz.0.691" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.230743][ T29] audit: type=1400 audit(1790399772.570:1095): avc: denied { write } for pid=6360 comm="syz.0.691" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.234321][ T29] audit: type=1400 audit(1790399772.570:1096): avc: denied { write } for pid=6337 comm="syz.8.687" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.301700][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.338984][ T29] audit: type=1400 audit(1790399772.671:1097): avc: denied { write } for pid=6337 comm="syz.8.687" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 97.378707][ T29] audit: type=1400 audit(1790399772.721:1098): avc: denied { write } for pid=6366 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.382151][ T5093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.468945][ T29] audit: type=1400 audit(1790399772.811:1099): avc: denied { write } for pid=6391 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.537727][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.570695][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 97.596243][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 97.661732][ T29] audit: type=1400 audit(1790399773.001:1100): avc: denied { write } for pid=6398 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 97.694082][ T6408] loop9: detected capacity change from 0 to 512 [ 97.696007][ T6408] EXT4-fs: Ignoring removed nomblk_io_submit option [ 97.719339][ T6408] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 97.740743][ T6408] EXT4-fs (loop9): orphan cleanup on readonly fs [ 97.741483][ T6408] EXT4-fs (loop9): Cannot turn on journaled quota: type 0: error -2 [ 97.741683][ T6408] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -2 [ 97.775150][ T6408] EXT4-fs (loop9): 1 truncate cleaned up [ 97.801245][ T6408] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 97.852600][ T6424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.852943][ T6424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.853074][ T6424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.853215][ T6424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.853358][ T6424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.897791][ T5686] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.976727][ T6424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 97.976841][ T6424] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 98.388800][ T6459] loop0: detected capacity change from 0 to 764 [ 98.489911][ T6459] rock: corrupted directory entry. extent=32, offset=2044, size=237 [ 98.666657][ T6426] loop1: detected capacity change from 0 to 32768 [ 98.728084][ T6426] loop1: p1 p3 < > [ 98.890426][ T6494] loop1: detected capacity change from 0 to 512 [ 98.915085][ T6494] vfat: Unknown parameter '˙˙˙˙˙01777777777777777777777' [ 99.005352][ T3290] udevd[3290]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 99.012839][ T3539] udevd[3539]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 99.223295][ T6519] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.414303][ T5907] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.515840][ T6541] batman_adv: batadv0: Adding interface: dummy0 [ 99.515858][ T6541] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.515896][ T6541] batman_adv: batadv0: Interface activated: dummy0 [ 99.528854][ T6541] netlink: 'syz.9.723': attribute type 10 has an invalid length. [ 99.528972][ T6541] netlink: 40 bytes leftover after parsing attributes in process `syz.9.723'. [ 99.529040][ T6541] batadv0: entered promiscuous mode [ 99.529083][ T6541] batadv0: entered allmulticast mode [ 99.534711][ T6541] bridge0: port 3(batadv0) entered blocking state [ 99.534809][ T6541] bridge0: port 3(batadv0) entered disabled state [ 99.542778][ T6541] bridge0: port 3(batadv0) entered blocking state [ 99.542861][ T6541] bridge0: port 3(batadv0) entered forwarding state [ 99.723223][ T6552] netlink: 8 bytes leftover after parsing attributes in process `syz.9.725'. [ 99.723255][ T6552] bond0: option arp_validate: invalid value (256) [ 99.757806][ T31] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 99.757827][ T31] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 100.411575][ T6582] netlink: 20 bytes leftover after parsing attributes in process `syz.1.733'. [ 100.454109][ T6585] set_capacity_and_notify: 1 callbacks suppressed [ 100.454232][ T6585] loop9: detected capacity change from 0 to 128 [ 100.483240][ T6585] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 100.483691][ T6585] System zones: 1-3, 19-19, 35-36 [ 100.527829][ T6585] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 100.529508][ T6585] ext4 filesystem being mounted at /32/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 100.624770][ T5686] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 100.664389][ T5861] net_ratelimit: 15 callbacks suppressed [ 100.664405][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 100.794479][ T6594] sctp: [Deprecated]: syz.3.737 (pid 6594) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.794479][ T6594] Use struct sctp_sack_info instead [ 101.174870][ T6629] loop1: detected capacity change from 0 to 512 [ 101.307400][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.360425][ T6629] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.745: iget: bad i_size value: 38620345925642 [ 101.360695][ T6629] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 101.363704][ T6629] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.745: couldn't read orphan inode 15 (err -117) [ 101.363844][ T6629] loop1: lost filesystem error report for type 5 error -117 [ 101.366242][ C1] EXT4-fs (loop1): error count since last fsck: 2 [ 101.366271][ C1] EXT4-fs (loop1): initial error at time 1790399776: ext4_orphan_get:1403: inode 15 [ 101.367370][ C1] EXT4-fs (loop1): last error at time 1790399776: ext4_orphan_get:1408 [ 101.387597][ T6629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.589261][ T5907] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.631365][ T6670] netlink: 52 bytes leftover after parsing attributes in process `syz.1.752'. [ 101.634008][ T6670] tipc: Started in network mode [ 101.634096][ T6670] tipc: Node identity ac1414aa, cluster identity 4711 [ 101.634248][ T6670] tipc: New replicast peer: 172.20.20.187 [ 101.634495][ T6670] tipc: Enabled bearer , priority 10 [ 101.696574][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 101.828455][ T6679] netlink: 20 bytes leftover after parsing attributes in process `syz.3.754'. [ 102.011781][ T6675] 8021q: adding VLAN 0 to HW filter on device eth0 [ 102.024286][ T6675] 8021q: adding VLAN 0 to HW filter on device eth1 [ 102.049353][ T6675] 8021q: adding VLAN 0 to HW filter on device eth2 [ 102.079934][ T6675] 8021q: adding VLAN 0 to HW filter on device eth3 [ 102.265477][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 102.265494][ T29] audit: type=1400 audit(1790399777.601:1125): avc: denied { mount } for pid=6693 comm="syz.1.759" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 102.302357][ T29] audit: type=1400 audit(1790399777.641:1126): avc: denied { write } for pid=6693 comm="syz.1.759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 102.302914][ T6694] ieee802154 phy0 wpan0: encryption failed: -22 [ 102.422342][ T6700] Cannot find del_set index 4 as target [ 102.426207][ T6700] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 102.426550][ T6700] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 102.512626][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8881029dec00: rx timeout, send abort [ 102.519266][ T29] audit: type=1400 audit(1790399777.861:1127): avc: denied { read } for pid=2966 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 102.519357][ T29] audit: type=1400 audit(1790399777.861:1128): avc: denied { search } for pid=2966 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.519500][ T29] audit: type=1400 audit(1790399777.861:1129): avc: denied { write search } for pid=2966 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.519580][ T29] audit: type=1400 audit(1790399777.861:1130): avc: denied { add_name } for pid=2966 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 102.520180][ T29] audit: type=1400 audit(1790399777.861:1131): avc: denied { create } for pid=2966 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.520299][ T29] audit: type=1400 audit(1790399777.861:1132): avc: denied { append open } for pid=2966 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.520622][ T29] audit: type=1400 audit(1790399777.861:1133): avc: denied { getattr } for pid=2966 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 102.552741][ T6706] loop8: detected capacity change from 0 to 128 [ 102.567057][ T6706] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 102.567175][ T6706] System zones: 1-3, 19-19, 35-36 [ 102.572028][ T6706] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 102.590335][ T6706] ext4 filesystem being mounted at /47/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 102.615562][ T29] audit: type=1400 audit(1790399777.951:1134): avc: denied { write } for pid=6705 comm="syz.8.765" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 102.720711][ T5093] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 102.749228][ T3381] tipc: Node number set to 2886997162 [ 102.751893][ T3381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 102.888155][ T6717] xt_hashlimit: max too large, truncated to 1048576 [ 102.988913][ T6729] loop9: detected capacity change from 0 to 256 [ 103.012611][ C0] vxcan1: j1939_tp_rxtimer: 0xffff8881029dec00: abort rx timeout. Force session deactivation [ 103.544680][ T6765] loop9: detected capacity change from 0 to 512 [ 103.591354][ T6765] EXT4-fs (loop9): 1 truncate cleaned up [ 103.591953][ T6765] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.654904][ T5686] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.775672][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.035138][ T6777] loop9: detected capacity change from 0 to 512 [ 104.160518][ T6777] EXT4-fs (loop9): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 104.168921][ T6777] netlink: 'syz.9.787': attribute type 9 has an invalid length. [ 104.169037][ T6777] netlink: 399 bytes leftover after parsing attributes in process `syz.9.787'. [ 104.177294][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.205832][ T5686] EXT4-fs (loop9): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 104.263032][ T6793] loop9: detected capacity change from 0 to 128 [ 104.322154][ T6793] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 104.322253][ T6793] System zones: 1-3, 19-19, 35-36 [ 104.324657][ T6793] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 104.335773][ T954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.336051][ T6793] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 104.585520][ T6802] syzkaller0: entered promiscuous mode [ 104.585561][ T6802] syzkaller0: entered allmulticast mode [ 104.804764][ T6808] loop0: detected capacity change from 0 to 512 [ 104.816003][ T3381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 104.976283][ T6810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.093051][ T5686] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 105.147358][ T6812] batman_adv: batadv0: Interface deactivated: dummy0 [ 105.147381][ T6812] batman_adv: batadv0: Removing interface: dummy0 [ 105.181301][ T6812] bond0: (slave bond_slave_0): Releasing backup interface [ 105.191868][ T6812] bond0: (slave bond_slave_1): Releasing backup interface [ 105.218037][ T6812] team0: Failed to send options change via netlink (err -105) [ 105.218177][ T6812] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 105.218370][ T6812] team0: Port device team_slave_0 removed [ 105.241429][ T6812] team0: Failed to send options change via netlink (err -105) [ 105.241776][ T6812] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 105.262273][ T6812] team0: Port device team_slave_1 removed [ 105.272496][ T6812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.272523][ T6812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.308782][ T6812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.308806][ T6812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.323838][ T6812] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 105.326749][ T6817] team0: Failed to send options change via netlink (err -105) [ 105.326811][ T6817] team0: Mode changed to "activebackup" [ 105.600859][ T6827] ieee802154 phy0 wpan0: encryption failed: -22 [ 105.869946][ T3381] net_ratelimit: 1 callbacks suppressed [ 105.869962][ T3381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 105.894854][ T6849] FAULT_INJECTION: forcing a failure. [ 105.894854][ T6849] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 105.894897][ T6849] CPU: 1 UID: 0 PID: 6849 Comm: syz.0.814 Not tainted syzkaller #0 PREEMPT(lazy) [ 105.894937][ T6849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 105.894954][ T6849] Call Trace: [ 105.894962][ T6849] [ 105.894971][ T6849] __dump_stack+0x1d/0x30 [ 105.895004][ T6849] dump_stack_lvl+0x95/0xd0 [ 105.895106][ T6849] dump_stack+0x15/0x1b [ 105.895133][ T6849] should_fail_ex+0x262/0x280 [ 105.895166][ T6849] should_fail+0xb/0x20 [ 105.895218][ T6849] should_fail_usercopy+0x1a/0x20 [ 105.895253][ T6849] _copy_from_user+0x1c/0xb0 [ 105.895315][ T6849] __sys_sendto+0x1b5/0x470 [ 105.895370][ T6849] __x64_sys_sendto+0x76/0x90 [ 105.895436][ T6849] x64_sys_call+0x200c/0x2550 [ 105.895480][ T6849] do_syscall_64+0x112/0x360 [ 105.895541][ T6849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.895570][ T6849] RIP: 0033:0x7f62d164e159 [ 105.895607][ T6849] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.895647][ T6849] RSP: 002b:00007f62d00a7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 105.895667][ T6849] RAX: ffffffffffffffda RBX: 00007f62d18d5fa0 RCX: 00007f62d164e159 [ 105.895697][ T6849] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 105.895711][ T6849] RBP: 00007f62d16e506b R08: 0000200000000340 R09: 000000000000001c [ 105.895730][ T6849] R10: 0000000020008045 R11: 0000000000000246 R12: 0000000000000000 [ 105.895748][ T6849] R13: 00007f62d18d6038 R14: 00007f62d18d5fa0 R15: 00007ffd7d310bf8 [ 105.895770][ T6849] [ 106.168698][ T6852] loop1: detected capacity change from 0 to 512 [ 106.181491][ T6852] EXT4-fs (loop1): revision level too high, forcing read-only mode [ 106.181587][ T6852] EXT4-fs (loop1): orphan cleanup on readonly fs [ 106.181604][ T6852] EXT4-fs error (device loop1): ext4_orphan_get:1429: comm syz.1.816: bad orphan inode 15 [ 106.181683][ T6852] loop1: lost filesystem error report for type 5 error -117 [ 106.181831][ T6852] ext4_test_bit(bit=14, block=5) = 0 [ 106.182267][ T6852] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 106.222328][ T6852] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 7987 vs 220 free clusters [ 106.283434][ T5907] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.741047][ T6872] netlink: 44 bytes leftover after parsing attributes in process `syz.0.821'. [ 106.842737][ T6889] netlink: 24 bytes leftover after parsing attributes in process `syz.3.827'. [ 106.895580][ T3381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.858122][ T7015] xt_hashlimit: max too large, truncated to 1048576 [ 107.936147][ T3381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 107.981718][ T29] kauditd_printk_skb: 51 callbacks suppressed [ 107.981737][ T29] audit: type=1400 audit(1790399783.322:1186): avc: denied { bind } for pid=7021 comm="syz.1.842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 108.112070][ T7029] netlink: 44 bytes leftover after parsing attributes in process `syz.8.846'. [ 108.149052][ T7032] loop1: detected capacity change from 0 to 128 [ 108.188298][ T7032] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 108.188480][ T7032] System zones: 1-3, 19-19, 35-36 [ 108.197244][ T7032] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 108.206034][ T7032] ext4 filesystem being mounted at /33/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 108.270097][ T29] audit: type=1400 audit(1790399783.602:1187): avc: denied { write } for pid=7030 comm="syz.1.844" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 108.320712][ T7047] netlink: 'syz.3.851': attribute type 2 has an invalid length. [ 108.339707][ T5907] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 108.363980][ T7050] FAULT_INJECTION: forcing a failure. [ 108.363980][ T7050] name failslab, interval 1, probability 0, space 0, times 0 [ 108.364063][ T7050] CPU: 0 UID: 0 PID: 7050 Comm: syz.1.852 Not tainted syzkaller #0 PREEMPT(lazy) [ 108.364088][ T7050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 108.364101][ T7050] Call Trace: [ 108.364108][ T7050] [ 108.364141][ T7050] __dump_stack+0x1d/0x30 [ 108.364193][ T7050] dump_stack_lvl+0x95/0xd0 [ 108.364222][ T7050] dump_stack+0x15/0x1b [ 108.364249][ T7050] should_fail_ex+0x262/0x280 [ 108.364291][ T7050] ? x509_fabricate_name+0x3bd/0x4b0 [ 108.364312][ T7050] should_failslab+0x8c/0xb0 [ 108.364356][ T7050] __kmalloc_noprof+0xd0/0x4d0 [ 108.364397][ T7050] ? x509_fabricate_name+0x3bd/0x4b0 [ 108.364527][ T7050] x509_fabricate_name+0x3bd/0x4b0 [ 108.364549][ T7050] ? x509_note_OID+0x91/0xc0 [ 108.364632][ T7050] x509_note_subject+0x6e/0x80 [ 108.364660][ T7050] asn1_ber_decoder+0x11db/0x1490 [ 108.364699][ T7050] ? __kmalloc_cache_noprof+0x19b/0x400 [ 108.364735][ T7050] x509_cert_parse+0x11b/0x450 [ 108.364821][ T7050] x509_key_preparse+0x3c/0x420 [ 108.364913][ T7050] asymmetric_key_preparse+0x68/0xb0 [ 108.364956][ T7050] __key_create_or_update+0x2df/0x840 [ 108.365078][ T7050] key_create_or_update+0x42/0x60 [ 108.365115][ T7050] __se_sys_add_key+0x2a5/0x360 [ 108.365137][ T7050] __x64_sys_add_key+0x67/0x80 [ 108.365175][ T7050] x64_sys_call+0x1fa9/0x2550 [ 108.365210][ T7050] do_syscall_64+0x112/0x360 [ 108.365239][ T7050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.365304][ T7050] RIP: 0033:0x7f4700a4e159 [ 108.365320][ T7050] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.365339][ T7050] RSP: 002b:00007f46ff4a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 108.365405][ T7050] RAX: ffffffffffffffda RBX: 00007f4700cd5fa0 RCX: 00007f4700a4e159 [ 108.365424][ T7050] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 00002000000000c0 [ 108.365443][ T7050] RBP: 00007f4700ae506b R08: 0000000001889d89 R09: 0000000000000000 [ 108.365506][ T7050] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 108.365519][ T7050] R13: 00007f4700cd6038 R14: 00007f4700cd5fa0 R15: 00007ffca40753f8 [ 108.365541][ T7050] [ 108.977284][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.238677][ T7072] Set syz1 is full, maxelem 256 reached [ 109.295505][ T3399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.362690][ T29] audit: type=1326 audit(1790399784.702:1188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7086 comm="syz.1.869" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4700a4e159 code=0x7ffc0000 [ 109.363029][ T29] audit: type=1326 audit(1790399784.702:1189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7086 comm="syz.1.869" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4700a4e159 code=0x7ffc0000 [ 109.363182][ T29] audit: type=1326 audit(1790399784.702:1190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7086 comm="syz.1.869" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4700a4e159 code=0x7ffc0000 [ 109.364224][ T29] audit: type=1326 audit(1790399784.702:1191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7086 comm="syz.1.869" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f4700a4e159 code=0x7ffc0000 [ 109.421404][ T29] audit: type=1326 audit(1790399784.762:1192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7086 comm="syz.1.869" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4700a0e98e code=0x7ffc0000 [ 109.423186][ T29] audit: type=1326 audit(1790399784.762:1193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7086 comm="syz.1.869" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4700a0e98e code=0x7ffc0000 [ 109.427866][ T29] audit: type=1326 audit(1790399784.772:1194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7086 comm="syz.1.869" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4700a0e98e code=0x7ffc0000 [ 109.431667][ T29] audit: type=1326 audit(1790399784.772:1195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7086 comm="syz.1.869" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f4700a0e98e code=0x7ffc0000 [ 109.640627][ T7104] FAULT_INJECTION: forcing a failure. [ 109.640627][ T7104] name failslab, interval 1, probability 0, space 0, times 0 [ 109.640660][ T7104] CPU: 1 UID: 0 PID: 7104 Comm: syz.8.874 Not tainted syzkaller #0 PREEMPT(lazy) [ 109.640692][ T7104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 109.640709][ T7104] Call Trace: [ 109.640718][ T7104] [ 109.640788][ T7104] __dump_stack+0x1d/0x30 [ 109.640822][ T7104] dump_stack_lvl+0x95/0xd0 [ 109.640852][ T7104] dump_stack+0x15/0x1b [ 109.640891][ T7104] should_fail_ex+0x262/0x280 [ 109.640946][ T7104] ? bpf_test_init+0x86/0x130 [ 109.641063][ T7104] should_failslab+0x8c/0xb0 [ 109.641102][ T7104] __kmalloc_noprof+0xd0/0x4d0 [ 109.641135][ T7104] ? finish_task_switch+0x121/0x340 [ 109.641160][ T7104] ? bpf_test_init+0x86/0x130 [ 109.641275][ T7104] bpf_test_init+0x86/0x130 [ 109.641308][ T7104] bpf_prog_test_run_skb+0x271/0x11b0 [ 109.641340][ T7104] ? futex_unqueue+0xc5/0xf0 [ 109.641395][ T7104] ? __rcu_read_unlock+0x4e/0x70 [ 109.641431][ T7104] ? __fget_files+0x184/0x1c0 [ 109.641498][ T7104] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 109.641537][ T7104] bpf_prog_test_run+0x208/0x340 [ 109.641634][ T7104] __sys_bpf+0x8da/0xc30 [ 109.641668][ T7104] ? do_futex+0x300/0x460 [ 109.641738][ T7104] __x64_sys_bpf+0x69/0x80 [ 109.641767][ T7104] x64_sys_call+0xf26/0x2550 [ 109.641856][ T7104] do_syscall_64+0x112/0x360 [ 109.641885][ T7104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.641926][ T7104] RIP: 0033:0x7ff87c0fe159 [ 109.641942][ T7104] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 109.642007][ T7104] RSP: 002b:00007ff87ab57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 109.642036][ T7104] RAX: ffffffffffffffda RBX: 00007ff87c385fa0 RCX: 00007ff87c0fe159 [ 109.642056][ T7104] RDX: 0000000000000050 RSI: 00002000000002c0 RDI: 000000000000000a [ 109.642074][ T7104] RBP: 00007ff87c19506b R08: 0000000000000000 R09: 0000000000000000 [ 109.642116][ T7104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 109.642129][ T7104] R13: 00007ff87c386038 R14: 00007ff87c385fa0 R15: 00007ffc49b48968 [ 109.642148][ T7104] [ 110.015868][ T5861] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 110.871548][ T7172] FAULT_INJECTION: forcing a failure. [ 110.871548][ T7172] name failslab, interval 1, probability 0, space 0, times 0 [ 110.871578][ T7172] CPU: 1 UID: 0 PID: 7172 Comm: syz.9.891 Not tainted syzkaller #0 PREEMPT(lazy) [ 110.871636][ T7172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 110.871654][ T7172] Call Trace: [ 110.871716][ T7172] [ 110.871725][ T7172] __dump_stack+0x1d/0x30 [ 110.871753][ T7172] dump_stack_lvl+0x95/0xd0 [ 110.871784][ T7172] dump_stack+0x15/0x1b [ 110.871854][ T7172] should_fail_ex+0x262/0x280 [ 110.871889][ T7172] ? alloc_fdtable+0x8c/0x1d0 [ 110.871908][ T7172] should_failslab+0x8c/0xb0 [ 110.871946][ T7172] __kmalloc_cache_noprof+0x7a/0x400 [ 110.871982][ T7172] ? alloc_fdtable+0x8c/0x1d0 [ 110.872087][ T7172] ? kmem_cache_alloc_noprof+0x1f5/0x3f0 [ 110.872142][ T7172] alloc_fdtable+0x8c/0x1d0 [ 110.872167][ T7172] dup_fd+0x4ae/0x530 [ 110.872241][ T7172] __se_sys_close_range+0x10e/0x4e0 [ 110.872261][ T7172] ? xfd_validate_state+0x45/0xf0 [ 110.872293][ T7172] ? restore_fpregs_from_fpstate+0x61/0x110 [ 110.872318][ T7172] __x64_sys_close_range+0x43/0x50 [ 110.872456][ T7172] x64_sys_call+0x2198/0x2550 [ 110.872491][ T7172] do_syscall_64+0x112/0x360 [ 110.872514][ T7172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.872543][ T7172] RIP: 0033:0x7f5b0474e159 [ 110.872575][ T7172] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.872601][ T7172] RSP: 002b:00007f5b031a7028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 110.872628][ T7172] RAX: ffffffffffffffda RBX: 00007f5b049d5fa0 RCX: 00007f5b0474e159 [ 110.872647][ T7172] RDX: 0000000000000002 RSI: ffffffffffffffff RDI: ffffffffffffffff [ 110.872670][ T7172] RBP: 00007f5b047e506b R08: 0000000000000000 R09: 0000000000000000 [ 110.872683][ T7172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.872696][ T7172] R13: 00007f5b049d6038 R14: 00007f5b049d5fa0 R15: 00007ffcff747fe8 [ 110.872722][ T7172] [ 111.062483][ T5862] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.464402][ T7189] netlink: 36 bytes leftover after parsing attributes in process `syz.8.898'. [ 111.608744][ T3399] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 111.635757][ T7190] netlink: 'syz.0.896': attribute type 11 has an invalid length. [ 111.659941][ T7197] syzkaller0: entered promiscuous mode [ 111.659959][ T7197] syzkaller0: entered allmulticast mode [ 111.911695][ T7216] netlink: 'syz.1.904': attribute type 10 has an invalid length. [ 112.009650][ T7229] tipc: Failed to remove unknown binding: 66,0,0/4270731501:2025733818/2025733819 [ 112.015577][ T7229] tipc: Failed to remove unknown binding: 66,0,0/4270731501:2025733818/2025733819 [ 112.096342][ T1538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 112.122147][ T7216] team0: Device wg2 is of different type [ 112.499625][ T7259] loop8: detected capacity change from 0 to 1024 [ 112.499947][ T7259] EXT4-fs: Ignoring removed orlov option [ 112.539935][ T7259] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 112.908078][ T5093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.988544][ T7280] loop1: detected capacity change from 0 to 256 [ 113.022612][ T7280] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 113.032537][ T7280] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 113.111126][ T29] kauditd_printk_skb: 104 callbacks suppressed [ 113.111146][ T29] audit: type=1400 audit(1790399788.452:1300): avc: denied { write } for pid=7283 comm="syz.8.921" path="socket:[20970]" dev="sockfs" ino=20970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 113.145015][ T1538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 113.300986][ T7291] loop1: detected capacity change from 0 to 1024 [ 113.313265][ T7291] EXT4-fs: Ignoring removed nomblk_io_submit option [ 113.319559][ T7291] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 113.510046][ T7269] kexec: Could not allocate control_code_buffer [ 113.565219][ T5907] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.623730][ T7303] loop9: detected capacity change from 0 to 256 [ 113.639298][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.9.928'. [ 113.639321][ T7303] netlink: 12 bytes leftover after parsing attributes in process `syz.9.928'. [ 113.639425][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.9.928'. [ 113.673370][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.9.928'. [ 113.673394][ T7303] netlink: 12 bytes leftover after parsing attributes in process `syz.9.928'. [ 113.673441][ T7303] netlink: 8 bytes leftover after parsing attributes in process `syz.9.928'. [ 113.679071][ T108] netdevsim netdevsim9 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.679210][ T108] netdevsim netdevsim9 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.679390][ T108] netdevsim netdevsim9 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.679484][ T108] netdevsim netdevsim9 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 114.176465][ T1538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.459032][ T29] audit: type=1326 audit(1790399789.803:1301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.935" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4700a4e159 code=0x7ffc0000 [ 114.459540][ T29] audit: type=1326 audit(1790399789.803:1302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.935" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4700a4e159 code=0x7ffc0000 [ 114.459641][ T29] audit: type=1326 audit(1790399789.803:1303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.935" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4700a4e159 code=0x7ffc0000 [ 114.460442][ T29] audit: type=1326 audit(1790399789.803:1304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.935" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f4700a4e159 code=0x7ffc0000 [ 114.460800][ T29] audit: type=1326 audit(1790399789.803:1305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.935" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4700a4e159 code=0x7ffc0000 [ 114.461420][ T29] audit: type=1326 audit(1790399789.803:1306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.935" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4700a4e159 code=0x7ffc0000 [ 114.461572][ T29] audit: type=1326 audit(1790399789.803:1307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.935" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4700a4e159 code=0x7ffc0000 [ 114.462551][ T29] audit: type=1326 audit(1790399789.803:1308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.935" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f4700a4e159 code=0x7ffc0000 [ 114.464165][ T29] audit: type=1326 audit(1790399789.803:1309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7321 comm="syz.1.935" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4700a4e159 code=0x7ffc0000 [ 114.578215][ T7323] The dccp option matching is deprecated and scheduled to be removed in 2027. [ 114.578215][ T7323] Please contact the netfilter-devel mailing list or update your nftables rules. [ 114.700037][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 114.766285][ T7329] netlink: 'syz.1.939': attribute type 12 has an invalid length. [ 114.920808][ T7340] 9p: Bad value for 'wfdno' [ 115.215579][ T3381] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.403820][ T7373] loop8: detected capacity change from 0 to 128 [ 115.452393][ T7377] loop0: detected capacity change from 0 to 164 [ 115.455550][ T7377] iso9660: Unknown parameter '˙˙˙˙˙˙˙˙0xffffffffffffffff˙˙˙˙0xffffffffffffffff0xffffffffffffffff01777777777777777777777˙' [ 115.633601][ T7375] tipc: Resetting bearer [ 115.725531][ T108] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.725634][ T108] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.725701][ T108] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.725742][ T108] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.903356][ T7385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.903671][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 115.925469][ T7385] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.255262][ T1538] net_ratelimit: 3 callbacks suppressed [ 116.255327][ T1538] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.274341][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 116.307535][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'. [ 116.328708][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'. [ 116.352299][ T7406] loop8: detected capacity change from 0 to 512 [ 116.362903][ T7406] EXT4-fs: Ignoring removed oldalloc option [ 116.363624][ T7406] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 116.386562][ T7403] netlink: 8 bytes leftover after parsing attributes in process `syz.0.979'. [ 116.390810][ T7406] EXT4-fs (loop8): 1 truncate cleaned up [ 116.391303][ T7406] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.587949][ T7415] netlink: 'syz.0.974': attribute type 12 has an invalid length. [ 116.589125][ T5093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 116.724386][ T7423] loop0: detected capacity change from 0 to 1024 [ 116.733728][ T7423] EXT4-fs: Ignoring removed bh option [ 116.749333][ T7425] __nla_validate_parse: 2 callbacks suppressed [ 116.749352][ T7425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.980'. [ 116.749410][ T7425] netlink: 4 bytes leftover after parsing attributes in process `syz.3.980'. [ 116.749727][ T7425] netlink: 'syz.3.980': attribute type 4 has an invalid length. [ 116.749745][ T7425] netlink: 152 bytes leftover after parsing attributes in process `syz.3.980'. [ 116.750284][ T7425] .`: renamed from bond0 [ 116.769540][ T7423] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 116.815284][ T7429] netlink: 'syz.8.981': attribute type 1 has an invalid length. [ 116.836214][ T7429] 8021q: adding VLAN 0 to HW filter on device bond2 [ 116.884882][ T7429] bond2: (slave veth3): Enslaving as an active interface with a down link [ 116.889920][ T7429] bond2: (slave dummy0): making interface the new active one [ 116.891033][ T7429] dummy0: entered promiscuous mode [ 116.891154][ T7429] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 116.893333][ T7429] netlink: 'syz.8.981': attribute type 10 has an invalid length. [ 116.893349][ T7429] netlink: 40 bytes leftover after parsing attributes in process `syz.8.981'. [ 116.945637][ T7429] bond2: (slave dummy0): Releasing active interface [ 117.006515][ T7439] loop8: detected capacity change from 0 to 256 [ 117.119455][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.193312][ T7446] Cannot find set identified by id 0 to match [ 117.467519][ T7459] loop8: detected capacity change from 0 to 1024 [ 117.481359][ T7459] EXT4-fs (loop8): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 117.489166][ T7459] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.530778][ T7463] loop9: detected capacity change from 0 to 2048 [ 117.548431][ T7463] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 117.552307][ T7463] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters [ 117.552383][ T7463] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 15 with max blocks 1 with error 28 [ 117.552409][ T7463] EXT4-fs (loop9): This should not happen!! Data will be lost [ 117.552409][ T7463] [ 117.552421][ T7463] EXT4-fs (loop9): Total free blocks count 0 [ 117.552471][ T7463] EXT4-fs (loop9): Free/Dirty block details [ 117.552539][ T7463] EXT4-fs (loop9): free_blocks=2415919104 [ 117.552558][ T7463] EXT4-fs (loop9): dirty_blocks=16 [ 117.552575][ T7463] EXT4-fs (loop9): Block reservation details [ 117.552591][ T7463] EXT4-fs (loop9): i_reserved_data_blocks=1 [ 117.553701][ T7463] EXT4-fs (loop9): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 1 with error 28 [ 117.668533][ T7467] loop9: detected capacity change from 0 to 512 [ 117.668949][ T7467] msdos: Bad value for 'allow_utime' [ 117.730166][ T5093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.775381][ T954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 117.923780][ T7469] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 117.923810][ T7469] bridge0: received packet on bridge_slave_1 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 118.060371][ T7482] tipc: Failed to remove unknown binding: 66,0,0/2886997162:340634537/340634539 [ 118.060406][ T7482] tipc: Failed to remove unknown binding: 66,0,0/2886997162:340634537/340634538 [ 118.060674][ T7482] tipc: Failed to remove unknown binding: 66,0,0/2886997162:340634537/340634539 [ 118.060738][ T7482] tipc: Failed to remove unknown binding: 66,0,0/2886997162:340634537/340634538 [ 118.179039][ T7488] syzkaller0: entered promiscuous mode [ 118.179065][ T7488] syzkaller0: entered allmulticast mode [ 118.196370][ T29] kauditd_printk_skb: 50 callbacks suppressed [ 118.196395][ T29] audit: type=1400 audit(1790399793.533:1360): avc: denied { create } for pid=7483 comm="syz.1.1002" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_generic_socket permissive=1 [ 118.203508][ T29] audit: type=1400 audit(1790399793.543:1361): avc: denied { create } for pid=7483 comm="syz.1.1002" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 118.203535][ T29] audit: type=1400 audit(1790399793.543:1362): avc: denied { ioctl } for pid=7483 comm="syz.1.1002" path="socket:[21212]" dev="sockfs" ino=21212 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 118.203601][ T29] audit: type=1400 audit(1790399793.543:1363): avc: denied { write } for pid=7483 comm="syz.1.1002" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 118.203691][ T29] audit: type=1400 audit(1790399793.543:1364): avc: denied { nlmsg_write } for pid=7483 comm="syz.1.1002" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=netlink_route_socket permissive=1 [ 118.386943][ T29] audit: type=1400 audit(1790399793.733:1365): avc: denied { create } for pid=7493 comm="syz.9.1005" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 118.579670][ T7504] netlink: 20 bytes leftover after parsing attributes in process `syz.9.1008'. [ 118.643792][ T29] audit: type=1400 audit(1790399793.983:1366): avc: denied { firmware_load } for pid=7500 comm="syz.9.1008" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 118.694265][ T7512] loop0: detected capacity change from 0 to 256 [ 118.862312][ T7525] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1014'. [ 119.096854][ T29] audit: type=1326 audit(1790399794.443:1367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.1.1018" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4700a4e159 code=0x7ffc0000 [ 119.097164][ T29] audit: type=1326 audit(1790399794.443:1368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.1.1018" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4700a4e159 code=0x7ffc0000 [ 119.097204][ T29] audit: type=1326 audit(1790399794.443:1369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7532 comm="syz.1.1018" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4700a4e159 code=0x7ffc0000 [ 119.697010][ T7563] netlink: 'syz.1.1031': attribute type 2 has an invalid length. [ 119.702627][ T7563] 0: entered promiscuous mode [ 119.730657][ T7561] loop8: detected capacity change from 0 to 8192 [ 120.079409][ T7570] loop0: detected capacity change from 0 to 128 [ 120.267718][ T7588] loop0: detected capacity change from 0 to 1024 [ 120.270972][ T7588] EXT4-fs: Ignoring removed nomblk_io_submit option [ 120.288612][ T7588] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.387810][ T3300] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.823793][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 121.009776][ T7626] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.009815][ T7626] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.009944][ T7626] bridge_slave_0: entered allmulticast mode [ 121.010555][ T7626] bridge_slave_0: entered promiscuous mode [ 121.046869][ T7626] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.046908][ T7626] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.047005][ T7626] bridge_slave_1: entered allmulticast mode [ 121.047669][ T7626] bridge_slave_1: entered promiscuous mode [ 121.086734][ T7626] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.088113][ T7626] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.117946][ T7626] team0: Port device team_slave_0 added [ 121.119034][ T7626] team0: Port device team_slave_1 added [ 121.141309][ T7626] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.141328][ T7626] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.141356][ T7626] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.142131][ T7626] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.142148][ T7626] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 121.142186][ T7626] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.249156][ T7626] hsr_slave_0: entered promiscuous mode [ 121.249585][ T7626] hsr_slave_1: entered promiscuous mode [ 121.249821][ T7626] debugfs: 'hsr0' already exists in 'hsr' [ 121.249856][ T7626] Cannot create hsr debugfs directory [ 121.335114][ T7626] netdevsim netdevsim4 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.376896][ T7626] netdevsim netdevsim4 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.437133][ T7670] FAULT_INJECTION: forcing a failure. [ 121.437133][ T7670] name failslab, interval 1, probability 0, space 0, times 0 [ 121.437189][ T7670] CPU: 0 UID: 0 PID: 7670 Comm: syz.8.1054 Not tainted syzkaller #0 PREEMPT(lazy) [ 121.437215][ T7670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 121.437228][ T7670] Call Trace: [ 121.437300][ T7670] [ 121.437310][ T7670] __dump_stack+0x1d/0x30 [ 121.437423][ T7670] dump_stack_lvl+0x95/0xd0 [ 121.437454][ T7670] dump_stack+0x15/0x1b [ 121.437553][ T7670] should_fail_ex+0x262/0x280 [ 121.437595][ T7670] ? alloc_workqueue_va+0x61c/0x1630 [ 121.437631][ T7670] should_failslab+0x8c/0xb0 [ 121.437678][ T7670] __kmalloc_cache_node_noprof+0x81/0x420 [ 121.437723][ T7670] ? alloc_workqueue_va+0x61c/0x1630 [ 121.437841][ T7670] alloc_workqueue_va+0x61c/0x1630 [ 121.437885][ T7670] alloc_workqueue_noprof+0x84/0xb0 [ 121.437923][ T7670] ? timer_init_key+0x75/0x130 [ 121.438033][ T7670] __rds_conn_create+0xaa8/0x11d0 [ 121.438115][ T7670] rds_conn_create_outgoing+0x43/0x60 [ 121.438146][ T7670] rds_sendmsg+0xbf0/0x1580 [ 121.438240][ T7670] ? __pfx_rds_sendmsg+0x10/0x10 [ 121.438280][ T7670] ____sys_sendmsg+0x532/0x580 [ 121.438383][ T7670] ___sys_sendmsg+0x195/0x1e0 [ 121.438431][ T7670] __x64_sys_sendmsg+0xd4/0x160 [ 121.438467][ T7670] x64_sys_call+0x22ab/0x2550 [ 121.438558][ T7670] do_syscall_64+0x112/0x360 [ 121.438590][ T7670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.438642][ T7670] RIP: 0033:0x7ff87c0fe159 [ 121.438664][ T7670] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.438699][ T7670] RSP: 002b:00007ff87ab57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 121.438731][ T7670] RAX: ffffffffffffffda RBX: 00007ff87c385fa0 RCX: 00007ff87c0fe159 [ 121.438832][ T7670] RDX: 0000000000000040 RSI: 00002000000002c0 RDI: 0000000000000003 [ 121.438852][ T7670] RBP: 00007ff87c19506b R08: 0000000000000000 R09: 0000000000000000 [ 121.438871][ T7670] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.438889][ T7670] R13: 00007ff87c386038 R14: 00007ff87c385fa0 R15: 00007ffc49b48968 [ 121.438917][ T7670] [ 121.614594][ T7626] netdevsim netdevsim4 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.691130][ T7641] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 121.992255][ T7626] netdevsim netdevsim4 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.031569][ T7699] netlink: 36 bytes leftover after parsing attributes in process `syz.8.1059'. [ 122.104900][ T7711] netlink: 'syz.9.1062': attribute type 4 has an invalid length. [ 122.141369][ T7626] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 122.157249][ T7626] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 122.159397][ T7626] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 122.178070][ T7626] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 122.180594][ T7626] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 122.200250][ T7626] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 122.202892][ T7626] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 122.226010][ T7626] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 122.333221][ T7626] 8021q: adding VLAN 0 to HW filter on device bond0 [ 122.345296][ T7626] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.349538][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 122.349579][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 122.382454][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 122.382494][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.500998][ T7753] loop9: detected capacity change from 0 to 4096 [ 122.533384][ T7753] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 122.615746][ T7760] ================================================================== [ 122.615783][ T7760] BUG: KCSAN: data-race in bpf_obj_memcpy / bpf_obj_memcpy [ 122.615814][ T7760] [ 122.615820][ T7760] write to 0xffff888131dfa018 of 4866 bytes by task 7749 on cpu 1: [ 122.615840][ T7760] bpf_obj_memcpy+0x16a/0x190 [ 122.615865][ T7760] rhtab_map_update_elem+0xec/0xf40 [ 122.615903][ T7760] bpf_map_update_value+0x4ee/0x570 [ 122.615954][ T7760] generic_map_update_batch+0x4d7/0x700 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 122.615986][ T7760] bpf_map_do_batch+0x25b/0x380 [ 122.616010][ T7760] __sys_bpf+0xa8e/0xc30 [ 122.616032][ T7760] __x64_sys_bpf+0x69/0x80 [ 122.616054][ T7760] x64_sys_call+0xf26/0x2550 [ 122.616095][ T7760] do_syscall_64+0x112/0x360 [ 122.616114][ T7760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.616133][ T7760] [ 122.616138][ T7760] write to 0xffff888131dfa018 of 4866 bytes by task 7760 on cpu 0: [ 122.616152][ T7760] bpf_obj_memcpy+0x16a/0x190 [ 122.616173][ T7760] rhtab_map_update_elem+0xec/0xf40 [ 122.616202][ T7760] bpf_map_update_value+0x4ee/0x570 [ 122.616235][ T7760] generic_map_update_batch+0x4d7/0x700 [ 122.616273][ T7760] bpf_map_do_batch+0x25b/0x380 [ 122.616299][ T7760] __sys_bpf+0xa8e/0xc30 [ 122.616319][ T7760] __x64_sys_bpf+0x69/0x80 [ 122.616341][ T7760] x64_sys_call+0xf26/0x2550 [ 122.616370][ T7760] do_syscall_64+0x112/0x360 [ 122.616391][ T7760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.616415][ T7760] [ 122.616419][ T7760] Reported by Kernel Concurrency Sanitizer on: [ 122.616432][ T7760] CPU: 0 UID: 0 PID: 7760 Comm: syz.8.1070 Not tainted syzkaller #0 PREEMPT(lazy) [ 122.616461][ T7760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 122.616473][ T7760] ================================================================== [ 122.880518][ T7626] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 122.980737][ T5686] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 123.060126][ T7002] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.148361][ T7002] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.241654][ T7002] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.264785][ T29] kauditd_printk_skb: 240 callbacks suppressed [ 123.264806][ T29] audit: type=1400 audit(1790399798.604:1610): avc: denied { write } for pid=7809 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.308975][ T29] audit: type=1400 audit(1790399798.654:1611): avc: denied { write } for pid=7820 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.346321][ T7002] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.404473][ T29] audit: type=1400 audit(1790399798.754:1612): avc: denied { write } for pid=7822 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.446095][ T29] audit: type=1400 audit(1790399798.794:1613): avc: denied { write } for pid=7833 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.529606][ T7002] bond1 (unregistering): (slave vlan2): Releasing backup interface [ 123.531574][ T7002] bond0 (unregistering): Released all slaves [ 123.547884][ T7002] bond1 (unregistering): Released all slaves [ 123.551247][ T7002] bond2 (unregistering): (slave veth3): Releasing active interface [ 123.552764][ T7002] bond2 (unregistering): Released all slaves [ 123.580800][ T29] audit: type=1400 audit(1790399798.924:1614): avc: denied { write } for pid=7835 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.584716][ T7004] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.584864][ T7004] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.584971][ T7004] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.606255][ T7004] netdevsim netdevsim8 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.641023][ T7002] tipc: Disabling bearer [ 123.641145][ T7002] tipc: Left network mode [ 123.648411][ T29] audit: type=1400 audit(1790399798.994:1615): avc: denied { write } for pid=7846 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.675335][ T7002] hsr_slave_0: left promiscuous mode [ 123.675715][ T7002] hsr_slave_1: left promiscuous mode [ 123.677673][ T7002] veth1_macvtap: left promiscuous mode [ 123.677700][ T7002] veth0_macvtap: left promiscuous mode [ 123.677822][ T7002] veth1_vlan: left promiscuous mode [ 123.677867][ T7002] veth0_vlan: left promiscuous mode [ 123.770792][ T29] audit: type=1400 audit(1790399799.114:1616): avc: denied { write } for pid=7848 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.810378][ T29] audit: type=1400 audit(1790399799.154:1617): avc: denied { write } for pid=7859 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.854432][ T954] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 123.914449][ T29] audit: type=1400 audit(1790399799.264:1618): avc: denied { write } for pid=7861 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 123.954513][ T29] audit: type=1400 audit(1790399799.304:1619): avc: denied { write } for pid=7872 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 124.263370][ T3023] 8021q: adding VLAN 0 to HW filter on device eth1 [ 124.380685][ T3023] 8021q: adding VLAN 0 to HW filter on device eth2 [ 124.486148][ T3023] 8021q: adding VLAN 0 to HW filter on device eth3 [ 124.592414][ T3023] 8021q: adding VLAN 0 to HW filter on device eth4 [ 125.153612][ T7004] netdevsim netdevsim4 eth6: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.154376][ T7002] bridge_slave_1: left allmulticast mode [ 125.154402][ T7002] bridge_slave_1: left promiscuous mode [ 125.154499][ T7002] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.155157][ T7002] bridge_slave_0: left allmulticast mode [ 125.155180][ T7002] bridge_slave_0: left promiscuous mode [ 125.155259][ T7002] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.220137][ T7002] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 125.221287][ T7002] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 125.222263][ T7002] bond0 (unregistering): Released all slaves [ 125.240755][ T70] netdevsim netdevsim4 eth7: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.240912][ T70] netdevsim netdevsim4 eth8: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.241075][ T70] netdevsim netdevsim4 eth5: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.274052][ T7002] hsr_slave_0: left promiscuous mode [ 125.274453][ T7002] hsr_slave_1: left promiscuous mode [ 125.275154][ T7002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.275491][ T7002] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.342564][ T7002] team0 (unregistering): Port device team_slave_1 removed [ 125.350330][ T7002] team0 (unregistering): Port device team_slave_0 removed [ 125.416578][ T3023] 8021q: adding VLAN 0 to HW filter on device eth5 [ 125.526878][ T3023] 8021q: adding VLAN 0 to HW filter on device eth6 [ 125.635086][ T3023] 8021q: adding VLAN 0 to HW filter on device eth7 [ 125.742592][ T3023] 8021q: adding VLAN 0 to HW filter on device eth8 [ 126.892966][ T3386] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 129.932687][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog