last executing test programs: 7m22.839622796s ago: executing program 32 (id=202): r0 = gettid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000100)) timer_settime(0x0, 0x1, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_create_resource$futex(&(0x7f00000001c0)=0x1) r2 = syz_create_resource$futex(&(0x7f0000000200)) futex(r1, 0xb, 0x1, 0x0, r2, 0x0) futex(r1, 0xc, 0x1, 0x0, r2, 0x1) 7m5.276640381s ago: executing program 33 (id=350): unshare(0x28040680) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000580), 0x801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000005c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x8}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_bpf={{0x8}, {0xc, 0x2, [@TCA_BPF_FD={0x8, 0x6, r0}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x24048001}, 0x0) 6m51.016614719s ago: executing program 34 (id=499): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket(0x40000000015, 0x5, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x3, @loopback, 0xfffffffc}, 0x1c) close(r0) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x4c, r1, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x8, 0x8e}}]}, 0x4c}}, 0x0) 6m47.643237494s ago: executing program 35 (id=525): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc\x00', 0x1ff) perf_event_open(&(0x7f00000003c0)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x0, 0xb901b, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0xfffffffffffffffe, 0x200000000000f60e}, 0xb093, 0x800000, 0x2, 0x2, 0x9, 0x7, 0x0, 0x0, 0x0, 0x0, 0x484}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000000000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="2ff000fea0"], 0x0, 0xb, 0x0, 0x0, 0x41100, 0x6e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6m36.91945447s ago: executing program 7 (id=589): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000f40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c00500142603600e1208000f0000000401a80016001100014003000300036010fab94dcf5c0461c1d6900094007134cf6ee080", 0x52}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41) 6m36.634380199s ago: executing program 36 (id=589): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f0000000f40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) r2 = socket$kcm(0xa, 0x5, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080400007c09e8fe55a10a0015c00500142603600e1208000f0000000401a80016001100014003000300036010fab94dcf5c0461c1d6900094007134cf6ee080", 0x52}], 0x1}, 0x0) sendmsg$kcm(r2, &(0x7f0000000600)={&(0x7f0000000100)=@in={0x2, 0x4e21, @remote}, 0x80, &(0x7f0000000000)=[{&(0x7f00000006c0)='@', 0x1}], 0x1, &(0x7f0000000040)=[{0x18, 0x84, 0x0, 'r'}], 0x18}, 0x41) 6m15.649858543s ago: executing program 37 (id=643): syz_open_procfs(0x0, &(0x7f0000000040)='mounts\x00') r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x1) fchdir(r1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80242, 0x1d3) 5m46.130855938s ago: executing program 38 (id=1019): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='27', 0x2) lsetxattr$trusted_overlay_redirect(0x0, 0x0, 0x0, 0x0, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x149cc2, 0x1c0) fsetxattr(r1, &(0x7f0000000080)=@known='security.selinux\x00', &(0x7f0000000280)='\xbc\x1aO\x06Pc\xd5\xc7\x99\xbb\x9e\xc5\xe8?\x89s\x81\xde\fU\xe2\xb2\xc9\b\xec^t\xfa\x16\x94\x14Q`w\xea\x18\x9d\x15&\f\xf2\x98m\n\xa4\xf9\xa1\f\xd7%\xd3Z\xca\xf3\xae\xc7@L\x14\x1a0\xf5N\xef\xb5r\x91\rL\xb21X\x8b\x0f)\xd9\x92i\x01\x86\x15j\xcf\x02\xc9\x92\x01%\xd8\x91\x10\xd9f\xcb\xed\xee\x7fYjw\xf5\xd4L\xdd\x8d\x98\xbb\xe38\xf4\xc7\xdd\x1b\xb1\xe1\vb\x16V:\xb1v\xd3i\x0f\xfd\t\x00\xd4K\x15J\x97GD)\xadF.\xb9\xfa\x84\xa2DI(\xcd\x8d\x12\xbe\\\xee\xdc\x96\x9c\x17\xd9\x10\x9f\xc4\x9aX\xcb\x00\x00', 0xa5, 0x0) 5m21.782878494s ago: executing program 5 (id=1226): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000f80)='./proc\x00', &(0x7f0000000fc0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000001040)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, r0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f00000010c0)) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @empty}, 0x10) 5m21.448409719s ago: executing program 5 (id=1229): r0 = add_key$keyring(&(0x7f0000000280), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, r0) r2 = add_key$keyring(&(0x7f0000000440), &(0x7f0000000480)={'syz', 0x3}, 0x0, 0x0, r1) r3 = add_key$keyring(&(0x7f00000003c0), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, r2) r4 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) r5 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e44e4b3b5d2c132ce1595c85ab82fbe15703a2653b2b7d783bc965fac88b3a91f3f10317d1c67420063311f04765f02b4e1ccf07323402fc495c817dc2b8aca", 0x38}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000000)='asymmetric\x00', &(0x7f0000000040)=@keyring={'key_or_keyring:', r5}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f00000000c0)='asymmetric\x00', &(0x7f0000000280)=@chain={'key_or_keyring:', r4}) 5m21.14034668s ago: executing program 5 (id=1232): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) perf_event_open(&(0x7f0000000100)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x8) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000340)='./sys\x00', &(0x7f0000000380)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/class/net/dummy0/carrier\x00', 0x1, 0x0) write(r0, &(0x7f0000001640)='1', 0x1) 5m20.85058287s ago: executing program 5 (id=1236): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0xffffffff}, 0x10) sendto$inet6(r1, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x7a}, 0x39) 5m20.710902244s ago: executing program 5 (id=1238): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x35, &(0x7f0000000000)=0x8001, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000001c0)=ANY=[], 0x8) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000080)=ANY=[], 0x8) setsockopt$inet6_int(r0, 0x29, 0x3a, &(0x7f0000000040)=0x8, 0x4) recvmmsg(r0, &(0x7f0000009b40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a80)=""/4, 0x4}, 0x58}, {{0x0, 0x0, 0x0}, 0x5f000}], 0x2, 0x2, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 5m20.540283831s ago: executing program 5 (id=1241): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000ff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000028e000/0x2000)=nil, 0x0}, 0x68) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x11, 0x80803, 0x0) getegid() ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f0000000000)='(+\\.\x00', 0x2000, &(0x7f0000000100)={@_ha_fsid={[0x7ff, 0x4]}, {0xfe, 0xfffd, 0x3, 0x80000001}}, 0x10, &(0x7f0000000140), &(0x7f0000000180)=0x8}) write$P9_RXATTRCREATE(r1, 0x0, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b921", 0x10) 5m11.401767845s ago: executing program 8 (id=1297): prlimit64(0x0, 0xe, &(0x7f00000009c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000a00)=0x8) ioprio_set$pid(0x2, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a40)='./bus\x00', 0x40, 0x41) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./bus\x00', 0x1c1002, 0x116) write(r1, &(0x7f0000000ac0)="c7", 0x1) sendfile(r1, r0, 0x0, 0x7ffff000) 5m11.026903513s ago: executing program 8 (id=1300): socket$kcm(0x21, 0x7, 0x2) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x2, 0x10) socketpair(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, 0x0, &(0x7f0000000000)='GPL\x00', 0x5}, 0x94) perf_event_open(&(0x7f00000001c0)={0x0, 0x80, 0x1, 0x0, 0x4, 0xfd, 0x0, 0x0, 0x98629, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1010000, 0x2, @perf_bp={&(0x7f0000001540)}, 0x18800, 0x0, 0x20, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'ip6tnl0\x00', 0x200}) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89f1, &(0x7f0000000080)) 5m10.27783881s ago: executing program 8 (id=1306): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000011c0)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001200)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001280)={&(0x7f00000012c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x25dddbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}, {0x1, 0xd}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r3 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001300)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=@newtfilter={0x130, 0x2c, 0xf3f, 0x70fd2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r4, {0x7, 0xc}, {}, {0x7, 0xfff1}}, [@filter_kind_options=@f_u32={{0x8}, {0x104, 0x2, [@TCA_U32_CLASSID={0x8, 0x1, {0x1, 0xffff}}, @TCA_U32_SEL={0xf4, 0x5, {0x7, 0x1, 0xe, 0x6, 0xfff, 0x7374, 0x100, 0x0, [{0x6, 0x1, 0x2}, {0x2, 0x1, 0x0, 0x7}, {0x80000000, 0x1ff, 0x3, 0x6}, {0x3, 0x8, 0x0, 0x5}, {0x6, 0xb632, 0x9, 0x7fffffff}, {0x4, 0x7, 0x1, 0x6}, {0x9f33, 0x280000, 0x10, 0x3}, {0xebe4, 0x8, 0x7, 0xfffffff9}, {0x80000001, 0x7fffffff, 0x7, 0x9}, {0x66, 0xfffffffe, 0x7, 0x40}, {0x64, 0x300, 0x10000, 0xe}, {0xb93, 0x81, 0x8, 0xaf2}, {0x5, 0x0, 0x0, 0x3}, {0xfffffffe, 0x28, 0x6, 0x1}]}}, @TCA_U32_POLICE={0x4}]}}]}, 0x130}, 0x1, 0x0, 0x0, 0x20041090}, 0xc080) 5m9.927825045s ago: executing program 39 (id=1308): perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x400, 0x0, 0x7, 0x3, 0x6, 0x8001, 0x8001}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) pipe(0x0) r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000380)='./file0\x00', 0x804818, &(0x7f00000003c0)=ANY=[@ANYRES64=r0, @ANYRES32, @ANYRES32=0x0, @ANYRESHEX, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYBLOB="91156f62712814b49a095a3b11802840d5afbf5494fe15a50de44c5080456ecf73e895d0e95d2b9738f5c2f9141a2fe0243540cf7faf3a065ee17c6403c7b9d550cea8f851f24b4b107003687cc27c2908639ee4bf5469ee594225359e162d37a29f9327604c178af4866c3b851cb7d9fab7ea0f080e015d093b7ef91ff01fb2367f7fcef2fb197d5af62a8c1f1e8171dce3393d96c5666b1082d0a453426b16a9d539b68863346f2abb04cf448db1a4713281b7ff0da0b72f32c349be1a627c64a6", @ANYRES8=r0, @ANYBLOB="b209eb6ac758b26226e3afb394a796baf3c6ce63c6342fceeedece41257e82ae0c182b8db1d9bcee3c8cc711a99a1b9fe2152fc846cdf5b62cf323b61a14c81100aa81ab73f3ed2ef2c4ffd4000435582841d1ec94cab677ebe3c11acdffc890d218a41f668954cb9f57fa7f418649"], 0x2, 0x55e, &(0x7f0000000a80)="$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") setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ftruncate(r1, 0xc17a) 5m9.888753099s ago: executing program 8 (id=1311): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x8000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c02c, 0x200, 0x2000000, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x40000002) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8946, &(0x7f0000000040)={'dummy0\x00', @random='\x00\x00\x00\x00\x00 '}) 5m9.746902864s ago: executing program 8 (id=1312): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000400)=0x3, 0x4) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendto$inet(r0, &(0x7f00000004c0)="030b06e4bfaa295f13aef5b0984aa524e4c71bdf99df803c93e5a4e9ce4539c7a2935933d888fbb30fde4d4fe19c63aceafb79ea01cbd4b088312e61112e9479d2ae2ed5decb82451b5ab70974d8d09f92e7d6ce9d463ba1598542caed9dbcece0d1f2e4af38ac6c6ff4907a69bc62400b8272ca28ce020000002a96d088b78d48af47af29fda42f77eed243e74ca65d45ae0d3045d7736eb7543161a8a2d9f7134fed06510855223f05d6fc50ca93ae5773b040bd26d38a79387a9fba96ce3d659ad9e55ad0", 0xffffffffffffff94, 0x91, 0x0, 0xfffffffffffffe6a) recvfrom$inet(r0, &(0x7f00000005c0)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) connect$inet(r0, &(0x7f0000000600)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 5m9.221546148s ago: executing program 8 (id=1313): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffff, 0x2}, 0x6) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="8500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa1}, 0x94) pipe(0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffffffffffff, 0x200000000000000}, 0x38) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) 5m5.045260074s ago: executing program 40 (id=1241): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f00000ff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000002000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f000028e000/0x2000)=nil, 0x0}, 0x68) set_mempolicy(0x4005, &(0x7f0000000040)=0x1001, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r0 = socket(0x11, 0x80803, 0x0) getegid() ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f0000000000)='(+\\.\x00', 0x2000, &(0x7f0000000100)={@_ha_fsid={[0x7ff, 0x4]}, {0xfe, 0xfffd, 0x3, 0x80000001}}, 0x10, &(0x7f0000000140), &(0x7f0000000180)=0x8}) write$P9_RXATTRCREATE(r1, 0x0, 0x0) setsockopt(r0, 0x107, 0xd, &(0x7f00000000c0)="0000e20085c75c11a92614431ea3b921", 0x10) 4m54.048393907s ago: executing program 41 (id=1313): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0xffff, 0x2}, 0x6) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x40, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000340), 0x80000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1f, 0x2, &(0x7f0000000180)=ANY=[@ANYBLOB="8500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xaa1}, 0x94) pipe(0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffffffffffff, 0x200000000000000}, 0x38) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0}, 0x5}], 0x40001af, 0x12122, 0x0) 4m41.00045873s ago: executing program 7 (id=1360): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x9, 0x0, 0x0, 0x0, 0x6f}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0202000400"}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f39138e486dd6349080006"], 0xfdef) write$cgroup_devices(0xffffffffffffffff, 0x0, 0xa) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x5, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}, 0x1020, 0x0, 0x0, 0x3, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="0763707573740153646370750806"], 0x12) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000001440)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x4, &(0x7f0000000000)='%', 0x0, 0xd01, 0x80040000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 4m40.080094394s ago: executing program 7 (id=1472): socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x2b, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x40d0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x44090) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/sda\x00', 0x2, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r0, 0x401870cc, 0x0) 4m39.784598024s ago: executing program 7 (id=1474): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$bind(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x21a70d1, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000003c0)='\x00', 0x9801) move_mount(r0, &(0x7f0000000400)='.\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0) mount$bind(0x0, &(0x7f0000000480)='./file0/file0\x00', 0x0, 0x80000, 0x0) r1 = open_tree(r0, &(0x7f0000000540)='./file0\x00', 0x89901) mount_setattr(r0, &(0x7f0000000580)='.\x00', 0x9000, &(0x7f00000005c0)={0x0, 0x0, 0x80000, {r1}}, 0x20) 4m38.976652246s ago: executing program 7 (id=1480): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10000, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000340)={[{@nouid32}, {@nodiscard}, {@noquota}, {@orlov}, {@mblk_io_submit}]}, 0xfe, 0x255, &(0x7f0000000380)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='.\x00', 0x0, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000640)={0x0, 0x2904c, 0x3, 0x10003, '\x00', [{0x0, 0x5, 0x900, 0xffffffffffffffff, 0x0, 0xa}, {0xffffffff, 0x0, 0x7ff, 0xa}], ['\x00', '\x00', '\x00']}) 4m38.624491173s ago: executing program 7 (id=1485): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0xc9) write(r0, &(0x7f0000000200)='27', 0x2) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x294102, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f00000018c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) 4m38.385659237s ago: executing program 42 (id=1485): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./proc\x00', &(0x7f0000000180)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/thread-self/fail-nth\x00', 0x2, 0xc9) write(r0, &(0x7f0000000200)='27', 0x2) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, 0x0, 0x0) r1 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000600), 0x2, 0x0) openat$hwrng(0xffffffffffffff9c, 0x0, 0x294102, 0x0) ioctl$DM_DEV_CREATE(r1, 0xc138fd03, &(0x7f00000018c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) 4m29.407268803s ago: executing program 4 (id=1541): r0 = socket(0x1e, 0x5, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) listen(r0, 0x9) socket$netlink(0x10, 0x3, 0x8000000004) accept4$inet6(r0, 0x0, 0x0, 0x0) 4m26.227637478s ago: executing program 4 (id=1558): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x40241, 0x0) syz_open_procfs(0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000007c0)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000800)={'syzkaller1\x00', @random="d976f308c05c"}) write$tun(r0, &(0x7f0000000840)={@val={0x8, 0x800}, @val={0x7, 0x3, 0x3, 0x2, 0x14, 0x7}, @ipv4=@tcp={{0x5, 0x4, 0x0, 0x6, 0x38, 0x0, 0x0, 0x8, 0x2f, 0x0, @empty, @broadcast}, {{0x8100, 0x22eb, 0x41424344, 0x41424344, 0x0, 0x0, 0x9, 0x20, 0x9, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc, 0x8, 0x1, 0x8, 0x3, 0xe}, @window={0x3, 0x3, 0x2}]}}}}}, 0x46) 4m25.610507941s ago: executing program 4 (id=1561): socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff2000/0x3000)=nil, &(0x7f0000ff3000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7e, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x2, 0x20002f6}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0xffffff94) 4m25.186126344s ago: executing program 4 (id=1563): preadv(0xffffffffffffffff, 0x0, 0x0, 0x4f, 0x0) inotify_add_watch(0xffffffffffffffff, 0x0, 0x60000526) syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./bus\x00', 0x10, &(0x7f0000000340)={[{@dioread_lock}]}, 0x15, 0x7e5, &(0x7f0000000ac0)="$eJzs3ctrW9kZAPDvyvKjTlK7UGjSlaHQGoLlOnWTFrpI6aIUGgi06yZCVkxq2QqWHGJjSEMpdFNoQxeFdpN12qa7btuZ7cy/MLMZhiEhM+OESZjF4OHqEcu25MgZWZqJfz+49jn3oXO++zj3yPdwHcCxNZX+yESciYg/JxETjflJRAzXUtmIi/X1nm1tFtIpie3tX32U1NZ5urVZiJZtYnw8TjQypyPijT9EnM3sL7eyvrGUL5WKq438bHX5xmxlfWPm+nJ+sbhYXDk/Nz9/7sIPL4z2LtZP3t44+egvP//evy9++vtvPfjTm0lcjJONZa1x9MpUTNX3SQynu3CXn/W6sAFLBl0BXkl6aQ7Vr/I4ExPZGOl+2+xRVgwAODK3I2IbADhmEvd/ADhmmn8HeLq1WUin7duD/XtEvz3+aUSM1eNvPt+sL8k2ntmN1Z6Djj9Ndj3vSCJisgflT0XEP/77m3+mUxzRc0iAdn53JyKuTk412/+d9ifZN2ahrvsBGd9vJg4YHDC1J6/9g/75X9r/+dFO/2/n+su86P9Em/7PaJtr91VMxe4RJ/uv/8zDHhTTUdr/+8nwzti2Zy3xN0wONXKnan2+4eTa9VIxbdu+HhHTMTya5ufaf3xteNn0k8+e7JrbEnFr/+/ju7+9n5af/t5ZI/Mwu6fJXchX872IPfX4TsS3s+3iT14c/6RD//dyl2X84sd//HunZWn8abzNaXf8Rz+qbPtexHejffxNyUHjE8/P1k6H2eZJ0cZ/3vvbeKfyW49/OqXl178LnOp9sG2kx3/84Pgnk9bxmpXDl/HWvYn/d1rWOf6m9uf/SPLrWrp5Kd3KV6urcxEjyS/3zz+3s20z31w/jX/6O+2v/4PO//Q74dUu488++vBfL42/OWNf/A1jXRZ2SGn8C4c6/m0T6VfhDovypQfPloY6ld/d8Z9PE0PTjTndtH8da5ovlUZa1nnlHQcAAAAAAAAAAAAAAAAAAAAAAAAAh5CpvaQ0yeRepDOZXC5q/8P7mzGeKZUr1bPXymsrC/WXmU7G8GhE1F51OdHyPtS5xvvwm/lze/I/iIhvRMRfR79Wy+cK5dLCoIMHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIYTHf7/f+qD0frv5wOtIQBwJMZeusaTYl8qAgD0zcvv/xExevT1AAD6p6v7PwDwWnH/B4DjZywz6BoAAP02FpEddB0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4rV2+dCmdtp9vbRbS/MLN9bWl8s2ZhWJlKbe8VsgVyqs3covl8mKpmCuUl1s2fafd55XK5RvzsbJ2a7ZarFRnK+sbV5bLayvVK9eX84vFK8XhvkUGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN2rrG8s5Uul4mojcX88YvecPiWGGhXq5SfPnOx3FP1IbE/U99SXpT49T4ztnfP+zLunD9rq7r7TWOILJwbZKgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB8dXweAAD//9GqGUs=") open(&(0x7f0000001300)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000001340)=@loop={'/dev/loop', 0x0}, &(0x7f0000001380)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f00000013c0)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) creat(&(0x7f00000001c0)='./file0\x00', 0xecf86c37d53049cc) 4m24.608800733s ago: executing program 4 (id=1569): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./mnt\x00', 0x1ff) mount(&(0x7f00000002c0)=@filename='./dev/sda1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000340)='ext4\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x149000, 0x19a) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f00000003c0)={0x8, 0xffffffffffffffff, 0x3, 0x7ffb, 0xfeb, 0x2}) fchmodat(r0, &(0x7f0000000000)='./dev\x00', 0x100) 4m24.204408525s ago: executing program 4 (id=1571): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000780)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_pid(r0, &(0x7f0000000840), 0x12) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) 4m24.097750295s ago: executing program 43 (id=1571): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000500)='blkio.bfq.avg_queue_size\x00', 0x26e1, 0x0) close(r0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x1, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000580)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x20702, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000780)={'syzkaller0\x00', 0xca58c30f81b6079f}) write$cgroup_pid(r0, &(0x7f0000000840), 0x12) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) 4m15.999410543s ago: executing program 9 (id=1645): r0 = syz_open_dev$usbmon(&(0x7f0000000080), 0x7, 0x0) unshare(0x22020600) mremap$dontunmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x4000, 0x7, &(0x7f0000ffa000/0x2000)=nil) openat(0xffffffffffffffff, 0x0, 0x385842, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) ioctl$SG_IO(0xffffffffffffffff, 0x2285, 0x0) ioctl$MON_IOCQ_RING_SIZE(r0, 0x9205) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000040)={@ifindex, 0x5, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 4m15.819302651s ago: executing program 9 (id=1647): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_config_ext={0x7, 0x15}, 0x8, 0x8, 0x43a1bd76, 0x8, 0xb, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4400000000, 0xffffffffffffffff, 0x8) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x40000, 0x2) fcntl$notify(r0, 0x402, 0x8000000e) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x30) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40000, 0x0) fcntl$notify(r2, 0x402, 0x40000029) getdents(r2, 0x0, 0x0) 4m15.676996985s ago: executing program 9 (id=1649): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) sched_setattr(0x0, &(0x7f0000000180)={0x38, 0x0, 0x0, 0x0, 0x0, 0xb49, 0x10001, 0xfffffffffffffff7, 0x0, 0x3e}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000440), &(0x7f00000005c0)='./file0\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="71756965742c646f74732c6572726f72733d636f6e74696e75652c6e6f646f74732c636865636b3d72656c617865642c646f733178666c6f7070792c6e66732c646f74732c6e6f646f74732c0052bbde30ad1b84bbd4c68ac5df60afc617ca0829fb9a153080d7fe1db0f2c220c8"], 0xfd, 0x255, &(0x7f0000000840)="$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") r0 = creat(&(0x7f0000000ac0)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000b00)=0x0) io_submit(r1, 0x3b, &(0x7f0000000b40)=[&(0x7f0000000b80)={0x25, 0xe7030000, 0x0, 0x1, 0x0, r0, &(0x7f0000000bc0), 0x7b000}]) 4m14.154235411s ago: executing program 9 (id=1662): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000300)='./file0/../file0\x00', 0x0, 0x2151090, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) umount2(&(0x7f0000000000)='./file0\x00', 0x0) mount$tmpfs(0x0, 0x0, 0x0, 0xc00, 0x0) 4m13.856088182s ago: executing program 9 (id=1663): fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xa, 0x204031, 0xffffffffffffffff, 0xc9751000) r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0x1c) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000, 0x0, 0x2, 0x0, 0x0, 0x10000000}, 0x1c) sendmsg$tipc(r1, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x2, {0x41, 0x0, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2400c011}, 0x4000000) 4m13.651704372s ago: executing program 9 (id=1664): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000180)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x5b, 0x0, &(0x7f0000000dc0)="630b0086460491611533c9f7b986", 0x0, 0x10001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x1b) 4m13.259850672s ago: executing program 44 (id=1664): ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f0000000180)=r1}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x5b, 0x0, &(0x7f0000000dc0)="630b0086460491611533c9f7b986", 0x0, 0x10001ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x1b) 11.418303744s ago: executing program 6 (id=3952): socket$inet_tcp(0x2, 0x1, 0x0) socket$can_raw(0x1d, 0x3, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b78, &(0x7f0000000040)={0x0, 0xca72, 0xc000, 0x0, 0x20002fb}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x18, 0xfa00, {0x3, 0x0, 0x2, 0x9}}, 0x20) r1 = socket$inet(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 11.008996386s ago: executing program 6 (id=3958): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0x400454c9, 0xba98575a95aeb70d) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x1}, 0x0, 0x1, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) rseq(&(0x7f0000001280)={0x0, 0x0, 0x0, 0x5}, 0x20, 0x0, 0x0) sigaltstack(&(0x7f0000000000)={&(0x7f0000000280)=""/4124, 0x80000001, 0x101c}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 10.061602523s ago: executing program 6 (id=3964): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0x15, 0x8, 0x0, 0x2}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @generic={0xbf, 0x2, 0xa}, @generic={0x7, 0x2, 0x0, 0x0, 0xfffffff8}, @generic={0x85, 0x0, 0x0, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0xb, 0x7, 0x7ff, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 9.365248644s ago: executing program 6 (id=3968): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {}, {@nomblk_io_submit}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x469, &(0x7f0000002480)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f0000000340)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000580)='10', 0x2) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) fallocate(r0, 0x0, 0x0, 0x8ffff) 8.566065085s ago: executing program 6 (id=3971): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d33, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2}, 0x0, 0x7e1c, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xe, &(0x7f0000000940)=ANY=[@ANYBLOB="b702000000000080bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000001e6400000000000045040400010000001704000001000a00b7040000000100006a0af2fe00000000850000001a000000b70000000000000095000000000000008e17f199a68b061b93d83298a8cdda1ce784909b849d5550ad855dab54d8877a6db61d69f2ffcaa10350e11cb97ce8df1bc9a0c4eeceb9971e43405d621ffbc9b0d8ca56b50f0c010d631f6dbc8486bc5d5bf2ca8285056892db03cf1c62d57c08a90b189d190c341035de53a9a53608c10556e5734eb84049761451ce540c772e069f80cb201b2de17dfdb4b60939d5d6aed4062049b87e03e2cd18a77dda613e0c64497fcc059c062234d5595f6fbaa187b81d1106000000000f0000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7480884bd8000000000000000b91c61bd99dc89f12907af7dccd106cb937b450f859ce8292a79c3e40000b59b0fc46d6cec3c080a882add4e1179bd4a44f231a2d73148be4248cdc138408ba953df4aece69311687f4122073a236c3a32efa04137d46f0247d2638da3261c8162bb7c7824be6195a66d2e17e122040e11001131ce319045e5b3334e68475ac3f46aa2837f9004600daded9b19b35eebe52613c346e255421b23a278fd00004270b1cd5fc9aa2286ccca37db965d9dd366598f5ec993cb0cf127e2a46cfbdf63eea190d86a4d1b75ae98480100bd5828954a7d093a54f7e75b3753508ca3c41685d1e407315e59d626c23b3f89a926e9382966853774e7dd1f1a2177cdf2802237c177d543e8da47a01f05e113e53518270239b69c117e2637c31085f4d8a596b6edab26afaf6605b231199f38a6fc7eb83714387450ea18eafbace8eec18a4b2c442e7b88a7611c1283bec84e1715fb9f4fcaf52c08058fc4f21c0ad71adabdd850aed3eeec6eaab347bdf474e17b9aa345d1e6e3bb83f90230bdf53e7d0e5c3f914d905422b83f30936674ba8f0bffaf2305c0972df71fe5f4e01506471e897bced7798509e64df360d95f9a4099f86438ac2bbcbdbd1d9db21a1d5c065567fd70aae68096827fa5c2d9bd20292344c7dcf6241447cfbb05b5d0fdb4e08afbac5397b64aa369922ed7ed8918f97294b6854210d2b93aaf92159dbaa2f186d4a420c68d6baf1c31de4f0bf478bfd51bb1e96ea849a80ae5a89be7e38474c7aade344d68324f9e12a6b9770e6bd12ae69efffaee58040753701af84c2924c1b5aea1650f42c9ae9820a33095f062fb88313d035ea405515a61a4be64f9fa0985c5be592090cc48291004609fdac2ab6100000000000000a84570c7c00d647daf8af334050b61e9b2d3f0adad1d1ff47be19b8da2799e9ecef8efabe73f92dbd0760f8bbd9c590bd1371e2b5d9a2ea2190f5e4f5cd641cdfe5d89f84a368ef7e6ff1eacdc0ec9e97b8f9c9e314661ea0aa8a104008d188b66b3a4aedeed9df4238a08fc2fb1007233cc2c87fcaa0cccd8ec03444471c1dd660c87acc17bff740d199a7c0c52c63c0408b5158e0000000c275eedb02f141113cf2c55b2c08c2c68cc99d2bb5840fba332e1c82862ec9b90106248f81d32a47ac94ddee815dba8aeb5d3121cf247a81aef7805b020e9eec44cbe3055be69fe066824ba2292b9cdce41635fc00df96fb10a3a8cc60c4a76c65ebbb0640e0a29de94edf5cbefac1c5fa96e7080af804b22cabce10ea52f1018527f4aa39cdafa3eff63de2a7f50d042667820f6f86f276afb2b8134301e031351ee13013137e9d5cec0c84d7e3f82c6fd12eb98f9ea654bcb9ce59a2015183c6e65bb0537e611b830d74c30fb8207fca0990acdbb51e4e234026e00000000b3ebae3eb52c140953a350fcf0124b1a30b1afc29ea56f8413686d912eb8118d73ef9c6d3843ebcb555301c0205dd3bd9b1d742e334319c8979c322e92"], &(0x7f0000000f00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000f40), 0x0, 0x10, &(0x7f0000000f80)}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000fc0)={r0, 0x0, 0xe, 0xfffffffffffffead, &(0x7f0000001040)="3a173357f297c605804ab3828443", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, 0x0, &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x94) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x5) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0x1a, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd00000000", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8.000439203s ago: executing program 6 (id=3976): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000140)=0x4, 0x8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}], 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000001c0), &(0x7f0000000200)=0xff56) ptrace(0x10, r0) r2 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='/dev/\x1a\xa2\x92)?\x12', 0xfffffffffffffffe) request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, r2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x80000000, 0x0) 7.861951907s ago: executing program 45 (id=3976): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) set_mempolicy(0x4005, &(0x7f0000000140)=0x4, 0x8) r1 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000180)=[@in={0x2, 0x80, @dev={0xac, 0x14, 0x14, 0x12}}], 0x10) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000001c0), &(0x7f0000000200)=0xff56) ptrace(0x10, r0) r2 = request_key(&(0x7f0000000000)='id_legacy\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='/dev/\x1a\xa2\x92)?\x12', 0xfffffffffffffffe) request_key(&(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, r2) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r0, 0x0, 0x80000000, 0x0) 4.705079429s ago: executing program 2 (id=4003): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$lock(r0, 0x5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)="1400000034000b47564cb6281406000002000000", 0x14}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, r0, 0x35eb0000) r2 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, r0, 0x0) r3 = perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r2) mremap(&(0x7f00000df000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000106000/0x2000)=nil) 4.536820497s ago: executing program 2 (id=4004): perf_event_open(&(0x7f0000000a00)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x1}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x200000102ffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) capset(0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x454680) r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000840)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x610, &(0x7f0000000240)={[{@grpid}, {@grpquota}]}, 0x4, 0x500, &(0x7f0000000280)="$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") socket$kcm(0x1e, 0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001140)={0x6, 0x3, &(0x7f0000001200)=ANY=[@ANYBLOB="85ff000000000000000000000000000095"], &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2}, 0x94) 3.741464908s ago: executing program 2 (id=4005): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_bp={0x0, 0x8}, 0xc108, 0x1, 0xc, 0x6, 0x2b61, 0x4, 0xfffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$key(0xf, 0x3, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="220000000400000010000000", @ANYRES64=r0], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000200)=r1}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000240)={r1}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x3, 0x8, &(0x7f0000000340)=@framed={{0x18, 0x7, 0x0, 0x0, 0x1f00, 0x0, 0x0, 0x0, 0x8000}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_fd={0x18, 0x1, 0x1, 0x0, r2}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000380)='GPL\x00', 0x2, 0x0, 0x0, 0x41000}, 0x94) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x0, 0x4, 0x13, 0x80000001, 0x2e, @mcast1, @mcast2, 0x20, 0x40, 0xfffffe01, 0x1}}) 3.42574636s ago: executing program 2 (id=4007): sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000200)=[{0x6, 0x10, 0x0, 0x7fff7ffc}]}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) r0 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r0}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5, r0}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) futex_waitv(&(0x7f0000000640)=[{0x6, &(0x7f0000000680)=0x6, 0x2}], 0x1, 0x0, &(0x7f00000006c0)={0x77359400}, 0x1) 2.806699283s ago: executing program 0 (id=4008): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000040)=0x7) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_clone(0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x68040000) 2.802982054s ago: executing program 1 (id=4017): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0xfffffffd}, 0x1c) listen(r0, 0xfffffffe) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0xb, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000540)={0xa, 0x4e22, 0x7, @empty, 0x1fc}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x8, 0x6, "66f59e", 0x28, 0x6, 0xff, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @local, {[], {{0x4e22, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0xa, 0x80, 0x4, 0x0, 0x4, {[@md5sig={0x13, 0x12, "0681440e908315ac0cb825524e64a502"}]}}}}}}}}, 0x0) 2.482207997s ago: executing program 0 (id=4011): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000738000/0x4000)=nil, &(0x7f0000738000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000530000/0x3000)=nil, 0x0, 0x0, r0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x2, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) io_uring_enter(r1, 0x221c, 0x134d, 0x16, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0x1ff) shutdown(r0, 0x0) 2.469905558s ago: executing program 1 (id=4012): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x3, &(0x7f0000000100)=@framed, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x99ee}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000180)={r0, 0x0, 0x2d, 0x0, @val=@netfilter={0x2, 0x4, 0x600}}, 0x20) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000000300)=0x1, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000000340)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000380)='bridge0\x00', 0x10) connect$inet(r1, &(0x7f00000003c0)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000440), 0x4) 2.24850809s ago: executing program 1 (id=4014): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYRES32, @ANYBLOB, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e10000000000000000"], 0x50) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0xe61e218753f4dd34) getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000003f80)=ANY=[@ANYBLOB="18020000feffffff00000000000000008500000041000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000010400000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x44, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 2.102018765s ago: executing program 3 (id=4015): perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000a40)=@newqdisc={0x154, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x124, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0xf, 0x0, 0x0, 0x0, 0x1b}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}]}}]}, 0x154}}, 0x804) 2.047736631s ago: executing program 2 (id=4016): clock_adjtime(0x0, &(0x7f0000000080)={0x3ff, 0x0, 0x0, 0xc, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x800, 0x9, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x0, 0x0, 0x1003, 0x100000001, 0x2, 0x1ff, 0x0, 0x3, 0x4}) socket$inet6(0xa, 0x2, 0x3c) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x6, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000000e00)=""/102392, 0x18ff8) open_tree(0xffffffffffffff9c, 0x0, 0x8001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x2, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="891000000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x90) 1.437781753s ago: executing program 0 (id=4018): mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x174, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000180)={0x2, 0x3}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) setuid(0xee00) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) setsockopt(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000300)="11", 0x1) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 1.031674105s ago: executing program 0 (id=4019): socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x1000, 0x0, 0xffffffffffffffff, 0x4000000}, 0x50) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff3000/0x6000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x20) r0 = io_uring_setup(0x7f6, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x1bd}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xfff3}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 902.778198ms ago: executing program 1 (id=4020): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000180)={&(0x7f0000000000)=""/66, 0x328000, 0x1000, 0x0, 0x1}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x4000, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000340)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0), 0x1, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 894.566939ms ago: executing program 3 (id=4021): r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20c42, 0x63) write$P9_RLERRORu(r0, &(0x7f00000002c0)=ANY=[], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x1], 0x0, 0x0, 0x1, 0x1}}, 0x40) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 550.268784ms ago: executing program 0 (id=4022): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x11, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x1}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000001a00), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001a80)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r1, 0x1, 0x11, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) flock(0xffffffffffffffff, 0xb90a6240cb3f16b7) 540.657655ms ago: executing program 2 (id=4023): perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x4f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4000, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, @perf_config_ext={0x0, 0xc}, 0xf08, 0x8, 0xfffffffd, 0x8, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) perf_event_open(&(0x7f0000000c80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0, 0x3}, 0x3c84, 0x7f, 0x0, 0x0, 0x200000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) socket$key(0xf, 0x3, 0x2) socket$netlink(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$kcm(0xa, 0x2, 0x73) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0xc, 0x8, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b40)={r1, 0x3e8, 0xe80, 0x0, &(0x7f0000000bc0)="c1df07000000d30a298ee68886dd87", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 414.047118ms ago: executing program 3 (id=4024): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f00000000c0)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000014c0), 0xe8}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) newfstatat(0xffffffff0000005d, 0x0, 0x0, 0x1000) 360.938263ms ago: executing program 1 (id=4025): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7c, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x0, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {}, {0x0, 0xc}}}, 0x24}}, 0x4044000) r1 = socket$inet(0x2, 0x80001, 0x84) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000140)="1632800e13", 0x5}], 0x1) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 277.402452ms ago: executing program 3 (id=4026): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000d06000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ec9000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0x20000a, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x800, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff2}, {0xe, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 173.544022ms ago: executing program 1 (id=4027): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x20200, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}, 0x1, 0x0, 0x0, 0xc000}, 0x800) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newqdisc={0x3c, 0x24, 0xe0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x6}, {0xffff, 0xffff}, {0xfff3, 0xd064db0e491fa98f}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MEMORY={0x8, 0xa, 0x20842}]}}]}, 0x3c}}, 0x4044080) bind$packet(r0, &(0x7f0000000040)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @remote}, 0x14) sendto$inet6(r0, &(0x7f0000000800)="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", 0xfc13, 0x880, 0x0, 0xfffffffffffffef0) 100.78944ms ago: executing program 0 (id=4028): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xc8df, 0xc000, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x10, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xd}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x21, &(0x7f0000000000)=0xf, 0x4) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000480)={0x3ff, {{0x2, 0x4e22, @multicast2}}}, 0x90) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xee776000) 47.729765ms ago: executing program 3 (id=4029): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000002, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2581) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000100)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000140)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) 0s ago: executing program 3 (id=4030): syz_io_uring_setup(0x30da, &(0x7f0000000080)={0x0, 0x6968, 0x10000, 0x1, 0x2ca}, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x40042, 0x1) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff7000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}], 0x1}, 0x4) write$P9_RXATTRWALK(0xffffffffffffffff, &(0x7f0000000100)={0xf, 0x1f, 0x2, 0x2}, 0x51) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x7, 0x4}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xeb9c, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="02080000040000000100000009000100000000", @ANYRES32, @ANYBLOB='\x00\x00'], 0x48) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) kernel console output (not intermixed with test programs): 9 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 426.947683][T15939] RSP: 002b:00007f8676d07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 426.947725][T15939] RAX: ffffffffffffffda RBX: 00007f8678535fa0 RCX: 00007f86782af559 [ 426.947815][T15939] RDX: 000000000000007a RSI: 0000000000000084 RDI: 0000000000000003 [ 426.947835][T15939] RBP: 00007f8678346b50 R08: 0000200000000440 R09: 0000000000000000 [ 426.947856][T15939] R10: 0000200000000380 R11: 0000000000000246 R12: 0000000000000000 [ 426.947871][T15939] R13: 00007f8678536038 R14: 00007f8678535fa0 R15: 00007ffeec953208 [ 426.947894][T15939] [ 427.116949][T15943] rxe_eth0 speed is unknown, defaulting to 1000 [ 427.421667][ T3020] 8021q: adding VLAN 0 to HW filter on device eth14 [ 427.439983][T15943] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3375'. [ 427.581899][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 427.581985][ T29] audit: type=1326 audit(1793550375.419:3019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15962 comm="syz.3.3378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589869f559 code=0x7ffc0000 [ 427.587354][ T29] audit: type=1326 audit(1793550375.419:3020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15962 comm="syz.3.3378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589869f559 code=0x7ffc0000 [ 427.587416][ T29] audit: type=1326 audit(1793550375.419:3021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15962 comm="syz.3.3378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589869f559 code=0x7ffc0000 [ 427.590603][ T29] audit: type=1326 audit(1793550375.429:3022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15962 comm="syz.3.3378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f589869f559 code=0x7ffc0000 [ 427.603733][ T29] audit: type=1326 audit(1793550375.429:3023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15962 comm="syz.3.3378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589869f559 code=0x7ffc0000 [ 427.603892][ T29] audit: type=1326 audit(1793550375.429:3024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15962 comm="syz.3.3378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589869f559 code=0x7ffc0000 [ 427.620180][ T29] audit: type=1326 audit(1793550375.429:3025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15962 comm="syz.3.3378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589869f559 code=0x7ffc0000 [ 427.620400][ T29] audit: type=1326 audit(1793550375.429:3026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15962 comm="syz.3.3378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589869f559 code=0x7ffc0000 [ 427.627625][ T29] audit: type=1326 audit(1793550375.459:3027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15962 comm="syz.3.3378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f589869f559 code=0x7ffc0000 [ 427.646886][ T29] audit: type=1326 audit(1793550375.459:3028): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15962 comm="syz.3.3378" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589869f559 code=0x7ffc0000 [ 428.255578][ T3020] 8021q: adding VLAN 0 to HW filter on device eth15 [ 428.431466][T16004] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3388'. [ 428.832094][ T3020] 8021q: adding VLAN 0 to HW filter on device eth16 [ 428.833943][ T1913] bridge_slave_1: left allmulticast mode [ 428.833992][ T1913] bridge_slave_1: left promiscuous mode [ 428.834191][ T1913] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.851003][ T1913] bridge_slave_0: left allmulticast mode [ 428.851074][ T1913] bridge_slave_0: left promiscuous mode [ 428.851541][ T1913] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.946549][T16020] FAULT_INJECTION: forcing a failure. [ 428.946549][T16020] name failslab, interval 1, probability 0, space 0, times 0 [ 428.946651][T16020] CPU: 1 UID: 0 PID: 16020 Comm: syz.0.3399 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 428.946685][T16020] Tainted: [W]=WARN [ 428.946695][T16020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 428.946713][T16020] Call Trace: [ 428.946725][T16020] [ 428.946739][T16020] __dump_stack+0x1d/0x30 [ 428.946833][T16020] dump_stack_lvl+0x95/0xd0 [ 428.946859][T16020] dump_stack+0x15/0x1b [ 428.946890][T16020] should_fail_ex+0x259/0x270 [ 428.946993][T16020] ? __alloc_skb+0x2e0/0x6f0 [ 428.947030][T16020] should_failslab+0x8c/0xb0 [ 428.947088][T16020] kmem_cache_alloc_node_noprof+0x60/0x3e0 [ 428.947136][T16020] ? __alloc_skb+0x2e0/0x6f0 [ 428.947193][T16020] __alloc_skb+0x2e0/0x6f0 [ 428.947317][T16020] ? skb_put+0xa9/0xf0 [ 428.947362][T16020] tipc_buf_acquire+0x2c/0xb0 [ 428.947399][T16020] tipc_msg_build+0x741/0x950 [ 428.947447][T16020] __tipc_sendmsg+0x123f/0x1770 [ 428.947486][T16020] ? __pfx_woken_wake_function+0x10/0x10 [ 428.947531][T16020] ? __pfx_tipc_sendmsg+0x10/0x10 [ 428.947636][T16020] tipc_sendmsg+0x3e/0x60 [ 428.947675][T16020] sock_sendmsg+0x209/0x230 [ 428.947717][T16020] splice_to_socket+0x745/0xb00 [ 428.947811][T16020] ? __pfx_splice_to_socket+0x10/0x10 [ 428.947844][T16020] direct_splice_actor+0x153/0x270 [ 428.947939][T16020] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 428.948068][T16020] splice_direct_to_actor+0x2f5/0x680 [ 428.948102][T16020] ? __pfx_direct_splice_actor+0x10/0x10 [ 428.948132][T16020] do_splice_direct+0x119/0x1a0 [ 428.948164][T16020] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 428.948252][T16020] do_sendfile+0x37d/0x640 [ 428.948286][T16020] __x64_sys_sendfile64+0x105/0x150 [ 428.948318][T16020] x64_sys_call+0x1015/0x2550 [ 428.948355][T16020] do_syscall_64+0x112/0x360 [ 428.948487][T16020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 428.948523][T16020] RIP: 0033:0x7fbd9948f559 [ 428.948543][T16020] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 428.948564][T16020] RSP: 002b:00007fbd97ec6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 428.948647][T16020] RAX: ffffffffffffffda RBX: 00007fbd99716090 RCX: 00007fbd9948f559 [ 428.948669][T16020] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 428.948712][T16020] RBP: 00007fbd99526b50 R08: 0000000000000000 R09: 0000000000000000 [ 428.948744][T16020] R10: 000000008010002b R11: 0000000000000246 R12: 0000000000000000 [ 428.948760][T16020] R13: 00007fbd99716128 R14: 00007fbd99716090 R15: 00007ffd2cfbf948 [ 428.948810][T16020] [ 429.314455][T16022] loop2: detected capacity change from 0 to 4096 [ 429.315349][T16022] EXT4-fs: Ignoring removed orlov option [ 429.338939][T16022] EXT4-fs (loop2): invalid #clusters per group: 32768 [ 429.486196][ T1913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 429.701542][ T1913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 429.731807][ T1913] bond0 (unregistering): Released all slaves [ 429.862960][ T1913] tipc: Disabling bearer [ 429.863054][ T1913] tipc: Left network mode [ 430.083813][T16043] loop6: detected capacity change from 0 to 512 [ 430.101139][T16043] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 430.126120][T16043] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e002e018, mo2=0082] [ 430.126167][T16043] System zones: 0-2, 18-18, 34-34 [ 430.159808][T16043] EXT4-fs (loop6): 1 orphan inode deleted [ 430.160628][T16043] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 430.164318][T16043] ext4 filesystem being mounted at /346/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 430.166949][ T1913] hsr_slave_0: left promiscuous mode [ 430.213180][ T4376] EXT4-fs error (device loop6): ext4_release_dquot:7156: comm kworker/u8:19: Failed to release dquot type 1 [ 430.214142][ T1913] hsr_slave_1: left promiscuous mode [ 430.215747][ T1913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.215765][ T1913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.262429][ T1913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.262527][ T1913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.339681][ T1913] veth1_macvtap: left promiscuous mode [ 430.339715][ T1913] veth0_macvtap: left promiscuous mode [ 430.339764][ T1913] veth1_vlan: left promiscuous mode [ 430.339815][ T1913] veth0_vlan: left promiscuous mode [ 430.505016][T16055] loop1: detected capacity change from 0 to 128 [ 430.531120][T16055] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 430.539603][T16055] ext4 filesystem being mounted at /420/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 430.651507][T16059] loop0: detected capacity change from 0 to 128 [ 430.788610][ T8667] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 431.041259][T10537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 431.106311][ T1913] team0 (unregistering): Port device team_slave_1 removed [ 431.143256][ T1913] team0 (unregistering): Port device team_slave_0 removed [ 431.398351][T16083] loop0: detected capacity change from 0 to 512 [ 431.406998][T16083] vfat: Unknown parameter '01777777777777777777777' [ 431.744047][T16091] tipc: Disabling bearer [ 431.779098][T16091] team0 (unregistering): Port device bond2 removed [ 432.403331][T16105] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 432.403350][T16105] block device autoloading is deprecated and will be removed. [ 433.280393][T16120] loop0: detected capacity change from 0 to 1024 [ 433.313919][T16125] device-mapper: ioctl: Invalid ioctl structure: uuid LVM-syzg0, name , dev 934823bd92d7153d [ 433.330843][T16120] EXT4-fs: Ignoring removed bh option [ 433.351862][T16120] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 433.400367][T16120] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 433.441534][ T29] kauditd_printk_skb: 31 callbacks suppressed [ 433.441557][ T29] audit: type=1400 audit(1793550381.279:3059): avc: denied { write } for pid=16119 comm="syz.0.3424" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 433.605714][ T6526] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 433.678044][T16131] loop0: detected capacity change from 0 to 512 [ 433.680168][T16131] EXT4-fs: Ignoring removed mblk_io_submit option [ 433.701762][T16131] EXT4-fs (loop0): orphan cleanup on readonly fs [ 433.701791][T16131] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 433.737497][T16131] EXT4-fs error (device loop0): ext4_clear_blocks:893: inode #13: comm syz.0.3427: attempt to clear invalid blocks 2 len 1 [ 433.737652][T16131] loop0: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 433.737935][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 433.737960][ C1] EXT4-fs (loop0): initial error at time 1793550381: ext4_clear_blocks:893: inode 13 [ 433.738060][ C1] EXT4-fs (loop0): last error at time 1793550381: ext4_clear_blocks:893: inode 13 [ 433.744015][T16131] EXT4-fs (loop0): Remounting filesystem read-only [ 433.746375][T16131] EXT4-fs (loop0): 1 truncate cleaned up [ 433.757642][T16131] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 433.905317][ T6526] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 434.040846][T16140] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3430'. [ 434.327445][T16152] FAULT_INJECTION: forcing a failure. [ 434.327445][T16152] name failslab, interval 1, probability 0, space 0, times 0 [ 434.327514][T16152] CPU: 0 UID: 0 PID: 16152 Comm: syz.6.3434 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 434.327557][T16152] Tainted: [W]=WARN [ 434.327572][T16152] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 434.327622][T16152] Call Trace: [ 434.327634][T16152] [ 434.327648][T16152] __dump_stack+0x1d/0x30 [ 434.327696][T16152] dump_stack_lvl+0x95/0xd0 [ 434.327729][T16152] dump_stack+0x15/0x1b [ 434.327760][T16152] should_fail_ex+0x259/0x270 [ 434.327881][T16152] ? __alloc_skb+0x2e0/0x6f0 [ 434.327932][T16152] should_failslab+0x8c/0xb0 [ 434.328061][T16152] kmem_cache_alloc_node_noprof+0x60/0x3e0 [ 434.328192][T16152] ? __alloc_skb+0x2e0/0x6f0 [ 434.328286][T16152] __alloc_skb+0x2e0/0x6f0 [ 434.328338][T16152] ? skb_put+0xa9/0xf0 [ 434.328392][T16152] tipc_buf_acquire+0x2c/0xb0 [ 434.328479][T16152] tipc_msg_build+0x741/0x950 [ 434.328521][T16152] __tipc_sendmsg+0x123f/0x1770 [ 434.328596][T16152] ? __pfx_woken_wake_function+0x10/0x10 [ 434.328683][T16152] ? __pfx_tipc_sendmsg+0x10/0x10 [ 434.328719][T16152] tipc_sendmsg+0x3e/0x60 [ 434.328752][T16152] sock_sendmsg+0x209/0x230 [ 434.328849][T16152] splice_to_socket+0x745/0xb00 [ 434.328936][T16152] ? __pfx_splice_to_socket+0x10/0x10 [ 434.328974][T16152] direct_splice_actor+0x153/0x270 [ 434.329011][T16152] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 434.329099][T16152] splice_direct_to_actor+0x2f5/0x680 [ 434.329180][T16152] ? __pfx_direct_splice_actor+0x10/0x10 [ 434.329226][T16152] do_splice_direct+0x119/0x1a0 [ 434.329259][T16152] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 434.329358][T16152] do_sendfile+0x37d/0x640 [ 434.329453][T16152] __x64_sys_sendfile64+0x105/0x150 [ 434.329502][T16152] x64_sys_call+0x1015/0x2550 [ 434.329544][T16152] do_syscall_64+0x112/0x360 [ 434.329666][T16152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.329719][T16152] RIP: 0033:0x7fb23c0df559 [ 434.329749][T16152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 434.329783][T16152] RSP: 002b:00007fb23ab16028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 434.329885][T16152] RAX: ffffffffffffffda RBX: 00007fb23c366090 RCX: 00007fb23c0df559 [ 434.329913][T16152] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 434.329937][T16152] RBP: 00007fb23c176b50 R08: 0000000000000000 R09: 0000000000000000 [ 434.329962][T16152] R10: 000000008010002b R11: 0000000000000246 R12: 0000000000000000 [ 434.330060][T16152] R13: 00007fb23c366128 R14: 00007fb23c366090 R15: 00007ffe8800c008 [ 434.330096][T16152] [ 434.795387][T16160] loop1: detected capacity change from 0 to 128 [ 434.897459][T16166] loop0: detected capacity change from 0 to 1024 [ 434.940200][T16166] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 434.987490][T16162] rxe_eth0 speed is unknown, defaulting to 1000 [ 435.172039][T16174] FAULT_INJECTION: forcing a failure. [ 435.172039][T16174] name failslab, interval 1, probability 0, space 0, times 0 [ 435.172089][T16174] CPU: 0 UID: 0 PID: 16174 Comm: syz.1.3441 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 435.172136][T16174] Tainted: [W]=WARN [ 435.172150][T16174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 435.172213][T16174] Call Trace: [ 435.172227][T16174] [ 435.172242][T16174] __dump_stack+0x1d/0x30 [ 435.172283][T16174] dump_stack_lvl+0x95/0xd0 [ 435.172320][T16174] dump_stack+0x15/0x1b [ 435.172412][T16174] should_fail_ex+0x259/0x270 [ 435.172529][T16174] should_failslab+0x8c/0xb0 [ 435.172566][T16174] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 435.172666][T16174] ? mqueue_alloc_inode+0x34/0x50 [ 435.172692][T16174] ? mqueue_alloc_inode+0x34/0x50 [ 435.172727][T16174] ? __pfx_mqueue_fill_super+0x10/0x10 [ 435.172832][T16174] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 435.172956][T16174] mqueue_alloc_inode+0x34/0x50 [ 435.172997][T16174] alloc_inode+0x40/0x170 [ 435.173022][T16174] new_inode+0x1d/0xe0 [ 435.173047][T16174] ? __pfx_mqueue_fill_super+0x10/0x10 [ 435.173118][T16174] mqueue_fill_super+0x98/0x1e0 [ 435.173155][T16174] ? __pfx_mqueue_fill_super+0x10/0x10 [ 435.173271][T16174] get_tree_nodev+0x89/0x100 [ 435.173304][T16174] mqueue_get_tree+0x5d/0x80 [ 435.173330][T16174] vfs_get_tree+0x57/0x1d0 [ 435.173427][T16174] fc_mount_longterm+0x18/0xb0 [ 435.173472][T16174] mq_init_ns+0x2db/0x370 [ 435.173499][T16174] copy_ipcs+0x26d/0x460 [ 435.173534][T16174] create_new_namespaces+0x121/0x420 [ 435.173619][T16174] unshare_nsproxy_namespaces+0x115/0x150 [ 435.173662][T16174] ksys_unshare+0x3a3/0x690 [ 435.173702][T16174] __x64_sys_unshare+0x1f/0x30 [ 435.173777][T16174] x64_sys_call+0x1e33/0x2550 [ 435.173809][T16174] do_syscall_64+0x112/0x360 [ 435.173902][T16174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.173946][T16174] RIP: 0033:0x7f86782af559 [ 435.173970][T16174] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 435.174000][T16174] RSP: 002b:00007f8676d07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 435.174035][T16174] RAX: ffffffffffffffda RBX: 00007f8678535fa0 RCX: 00007f86782af559 [ 435.174128][T16174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000a000400 [ 435.174151][T16174] RBP: 00007f8678346b50 R08: 0000000000000000 R09: 0000000000000000 [ 435.174172][T16174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.174207][T16174] R13: 00007f8678536038 R14: 00007f8678535fa0 R15: 00007ffeec953208 [ 435.174234][T16174] [ 435.597658][ T6526] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 435.668523][T16186] netlink: 'syz.1.3449': attribute type 1 has an invalid length. [ 435.746999][T16188] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000 conventional PCI endpoint [ 435.803282][T16188] pci 0000:00:05.0: BAR 0 [mem 0xfe000000-0xfe7fffff] [ 435.804106][T16188] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 435.833491][T16188] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 435.833517][T16188] pci 0000:00:05.0: vgaarb: bridge control possible [ 435.833534][T16188] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 435.834795][T16188] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned [ 435.968405][ T29] audit: type=1326 audit(1793550383.799:3060): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16190 comm="syz.6.3446" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb23c0df559 code=0x0 [ 436.142074][T16186] 8021q: adding VLAN 0 to HW filter on device bond7 [ 436.189870][T16189] gretap2: entered promiscuous mode [ 436.216382][T16189] bond7: (slave gretap2): making interface the new active one [ 436.230451][T16189] bond7: (slave gretap2): Enslaving as an active interface with an up link [ 436.310410][T16200] loop2: detected capacity change from 0 to 512 [ 436.611216][T16207] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 436.677310][T16206] bio_check_eod: 70 callbacks suppressed [ 436.677333][T16206] syz.2.3450: attempt to access beyond end of device [ 436.677333][T16206] loop2: rw=2049, sector=640, nr_sectors = 80 limit=512 [ 436.698787][T16206] syz.2.3450: attempt to access beyond end of device [ 436.698787][T16206] loop2: rw=2049, sector=752, nr_sectors = 96 limit=512 [ 436.699125][T16206] syz.2.3450: attempt to access beyond end of device [ 436.699125][T16206] loop2: rw=2049, sector=912, nr_sectors = 32 limit=512 [ 436.699576][T16206] syz.2.3450: attempt to access beyond end of device [ 436.699576][T16206] loop2: rw=2049, sector=1008, nr_sectors = 32 limit=512 [ 436.699864][T16206] syz.2.3450: attempt to access beyond end of device [ 436.699864][T16206] loop2: rw=2049, sector=1104, nr_sectors = 32 limit=512 [ 436.700225][T16206] syz.2.3450: attempt to access beyond end of device [ 436.700225][T16206] loop2: rw=2049, sector=1232, nr_sectors = 32 limit=512 [ 436.700361][T16206] syz.2.3450: attempt to access beyond end of device [ 436.700361][T16206] loop2: rw=2049, sector=1360, nr_sectors = 32 limit=512 [ 436.700576][T16206] syz.2.3450: attempt to access beyond end of device [ 436.700576][T16206] loop2: rw=2049, sector=1488, nr_sectors = 32 limit=512 [ 436.700818][T16206] syz.2.3450: attempt to access beyond end of device [ 436.700818][T16206] loop2: rw=2049, sector=1616, nr_sectors = 32 limit=512 [ 436.701466][T16206] syz.2.3450: attempt to access beyond end of device [ 436.701466][T16206] loop2: rw=2049, sector=1712, nr_sectors = 32 limit=512 [ 437.557608][ T29] audit: type=1400 audit(1793550385.389:3061): avc: denied { listen } for pid=16222 comm="syz.6.3459" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 438.347039][ T29] audit: type=1400 audit(1793550386.179:3062): avc: denied { write } for pid=16236 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.508693][ T29] audit: type=1400 audit(1793550386.339:3063): avc: denied { write } for pid=16247 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 438.711541][T16255] loop1: detected capacity change from 0 to 512 [ 438.755293][T16255] EXT4-fs (loop1): 1 truncate cleaned up [ 438.756184][T16255] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 438.787762][ T29] audit: type=1400 audit(1793550386.619:3064): avc: denied { write } for pid=16253 comm="syz.1.3465" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 438.787813][ T29] audit: type=1400 audit(1793550386.619:3065): avc: denied { write } for pid=16253 comm="syz.1.3465" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 438.914997][T16266] EXT4-fs error (device loop1): ext4_validate_block_bitmap:445: comm syz.1.3465: bg 0: block 465: padding at end of block bitmap is not set [ 438.938715][T16266] EXT4-fs (loop1): Delayed block allocation failed for inode 13 at logical offset 2 with max blocks 2 with error 28 [ 438.938770][T16266] EXT4-fs (loop1): This should not happen!! Data will be lost [ 438.938770][T16266] [ 438.938797][T16266] EXT4-fs (loop1): Total free blocks count 0 [ 438.938818][T16266] EXT4-fs (loop1): Free/Dirty block details [ 438.938837][T16266] EXT4-fs (loop1): free_blocks=0 [ 438.938856][T16266] EXT4-fs (loop1): dirty_blocks=2 [ 438.938944][T16266] EXT4-fs (loop1): Block reservation details [ 438.938968][T16266] EXT4-fs (loop1): i_reserved_data_blocks=2 [ 439.022638][T16252] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 439.022673][T16252] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 439.040487][T16252] vhci_hcd vhci_hcd.0: Device attached [ 439.090969][T16269] vhci_hcd: connection closed [ 439.091458][ T4376] vhci_hcd vhci_hcd.2: stop threads [ 439.091489][ T4376] vhci_hcd vhci_hcd.2: release socket [ 439.091548][ T4376] vhci_hcd vhci_hcd.2: disconnect device [ 439.389883][ T29] audit: type=1400 audit(1793550387.229:3066): avc: denied { write } for pid=16257 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 439.552825][ T29] audit: type=1400 audit(1793550387.389:3067): avc: denied { write } for pid=16295 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 439.626884][T16297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3472'. [ 439.626951][T16297] netlink: 'syz.3.3472': attribute type 7 has an invalid length. [ 439.626973][T16297] netlink: 'syz.3.3472': attribute type 8 has an invalid length. [ 439.627014][T16297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3472'. [ 439.643301][T16297] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3472'. [ 439.643437][T16297] netlink: 'syz.3.3472': attribute type 7 has an invalid length. [ 439.643528][T16297] netlink: 'syz.3.3472': attribute type 8 has an invalid length. [ 439.643584][T16297] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3472'. [ 439.845535][ T8667] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.057550][T16322] netlink: 'syz.3.3479': attribute type 83 has an invalid length. [ 440.097667][ T29] audit: type=1400 audit(1793550387.929:3068): avc: denied { write } for pid=16299 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 440.158447][T16324] FAULT_INJECTION: forcing a failure. [ 440.158447][T16324] name failslab, interval 1, probability 0, space 0, times 0 [ 440.158527][T16324] CPU: 1 UID: 0 PID: 16324 Comm: syz.0.3480 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 440.158620][T16324] Tainted: [W]=WARN [ 440.158630][T16324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 440.158658][T16324] Call Trace: [ 440.158671][T16324] [ 440.158686][T16324] __dump_stack+0x1d/0x30 [ 440.158741][T16324] dump_stack_lvl+0x95/0xd0 [ 440.158840][T16324] dump_stack+0x15/0x1b [ 440.158873][T16324] should_fail_ex+0x259/0x270 [ 440.158916][T16324] ? alloc_workqueue_va+0x45d/0x15d0 [ 440.158967][T16324] should_failslab+0x8c/0xb0 [ 440.159003][T16324] __kmalloc_noprof+0xb6/0x4b0 [ 440.159043][T16324] ? alloc_workqueue_va+0x45d/0x15d0 [ 440.159085][T16324] alloc_workqueue_va+0x45d/0x15d0 [ 440.159188][T16324] alloc_workqueue_noprof+0x84/0xb0 [ 440.159262][T16324] nci_register_device+0x2f5/0x510 [ 440.159360][T16324] virtual_ncidev_open+0xca/0x130 [ 440.159473][T16324] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 440.159534][T16324] misc_open+0x1df/0x220 [ 440.159579][T16324] chrdev_open+0x2eb/0x3a0 [ 440.159604][T16324] do_dentry_open+0x496/0xa40 [ 440.159636][T16324] ? __pfx_chrdev_open+0x10/0x10 [ 440.159662][T16324] vfs_open_consume+0x46/0x1f0 [ 440.159702][T16324] path_openat+0xc16/0x11c0 [ 440.159820][T16324] do_file_open+0x16c/0x290 [ 440.159874][T16324] do_sys_openat2+0xa1/0x140 [ 440.160039][T16324] __x64_sys_openat+0xf2/0x120 [ 440.160081][T16324] x64_sys_call+0x1f72/0x2550 [ 440.160122][T16324] do_syscall_64+0x112/0x360 [ 440.160166][T16324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.160290][T16324] RIP: 0033:0x7fbd9948f559 [ 440.160319][T16324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 440.160356][T16324] RSP: 002b:00007fbd97ee7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 440.160509][T16324] RAX: ffffffffffffffda RBX: 00007fbd99715fa0 RCX: 00007fbd9948f559 [ 440.160534][T16324] RDX: 0000000000000002 RSI: 0000200000000800 RDI: ffffffffffffff9c [ 440.160557][T16324] RBP: 00007fbd99526b50 R08: 0000000000000000 R09: 0000000000000000 [ 440.160579][T16324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.160601][T16324] R13: 00007fbd99716038 R14: 00007fbd99715fa0 R15: 00007ffd2cfbf948 [ 440.160633][T16324] [ 440.431034][ T29] audit: type=1400 audit(1793550388.269:3069): avc: denied { write } for pid=16332 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 440.478859][T16336] netlink: 'syz.2.3482': attribute type 1 has an invalid length. [ 440.511150][T16336] 8021q: adding VLAN 0 to HW filter on device bond6 [ 440.591977][T16336] bond6: (slave geneve3): making interface the new active one [ 440.595717][T16336] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 440.760889][ T29] audit: type=1326 audit(1793550388.599:3070): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16349 comm="syz.6.3488" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23c0df559 code=0x7ffc0000 [ 440.761018][ T29] audit: type=1326 audit(1793550388.599:3071): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16349 comm="syz.6.3488" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23c0df559 code=0x7ffc0000 [ 440.764444][ T29] audit: type=1326 audit(1793550388.599:3072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16349 comm="syz.6.3488" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb23c0df559 code=0x7ffc0000 [ 441.032699][T16353] bond5: (slave ): Releasing active interface [ 441.098146][T16354] loop2: detected capacity change from 0 to 512 [ 441.152646][T16354] EXT4-fs error (device loop2): ext4_free_branches:1040: inode #11: comm syz.2.3489: invalid indirect mapped block 256 (level 2) [ 441.152689][T16354] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 441.158170][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 441.158194][ C1] EXT4-fs (loop2): initial error at time 1793550388: ext4_free_branches:1040: inode 11 [ 441.158247][ C1] EXT4-fs (loop2): last error at time 1793550388: ext4_free_branches:1040: inode 11 [ 441.236563][T16354] EXT4-fs (loop2): 2 truncates cleaned up [ 441.237667][T16354] EXT4-fs (loop2): mounted filesystem 00000000-0000-00a1-0000-000000000000 r/w without journal. Quota mode: writeback. [ 441.312726][T16353] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 441.475673][T10059] EXT4-fs (loop2): unmounting filesystem 00000000-0000-00a1-0000-000000000000. [ 441.575129][T16371] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 441.575157][T16371] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 441.575235][T16371] vhci_hcd vhci_hcd.0: Device attached [ 441.667027][T16375] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3496'. [ 441.685973][T16372] vhci_hcd: connection closed [ 441.686386][ T1913] vhci_hcd vhci_hcd.2: stop threads [ 441.686411][ T1913] vhci_hcd vhci_hcd.2: release socket [ 441.686477][ T1913] vhci_hcd vhci_hcd.2: disconnect device [ 441.928661][T16393] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3504'. [ 442.030289][T16396] loop1: detected capacity change from 0 to 512 [ 442.049403][T16396] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e01c, mo2=0002] [ 442.049620][T16396] System zones: 1-12 [ 442.051038][T16396] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #12: comm syz.1.3505: missing EA_INODE flag [ 442.051174][T16396] loop1: lost file I/O error report for ino 12 type 5 pos 0x0 len 0x0 error -117 [ 442.061014][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 442.061055][ C1] EXT4-fs (loop1): initial error at time 1793550389: ext4_xattr_inode_iget:437: inode 12 [ 442.061119][ C1] EXT4-fs (loop1): last error at time 1793550389: ext4_xattr_inode_iget:437: inode 12 [ 442.122487][T16396] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.3505: error while reading EA inode 12 err=-117 [ 442.122532][T16396] loop1: lost filesystem error report for type 5 error -117 [ 442.141295][T16396] EXT4-fs (loop1): 1 orphan inode deleted [ 442.146466][T16396] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.167285][T16400] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3506'. [ 442.183607][T16400] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3506'. [ 442.184311][T16400] bridge0: left promiscuous mode [ 442.205400][T16400] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3506'. [ 442.286790][ T8667] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.397858][T16405] FAULT_INJECTION: forcing a failure. [ 442.397858][T16405] name failslab, interval 1, probability 0, space 0, times 0 [ 442.397920][T16405] CPU: 0 UID: 0 PID: 16405 Comm: syz.2.3508 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 442.397965][T16405] Tainted: [W]=WARN [ 442.397979][T16405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 442.397999][T16405] Call Trace: [ 442.398076][T16405] [ 442.398087][T16405] __dump_stack+0x1d/0x30 [ 442.398132][T16405] dump_stack_lvl+0x95/0xd0 [ 442.398163][T16405] dump_stack+0x15/0x1b [ 442.398195][T16405] should_fail_ex+0x259/0x270 [ 442.398237][T16405] should_failslab+0x8c/0xb0 [ 442.398322][T16405] __kvmalloc_node_noprof+0x14f/0x5b0 [ 442.398373][T16405] ? alloc_fdtable+0x115/0x1d0 [ 442.398406][T16405] ? alloc_fdtable+0x115/0x1d0 [ 442.398527][T16405] alloc_fdtable+0x115/0x1d0 [ 442.398621][T16405] dup_fd+0x56a/0x5f0 [ 442.398657][T16405] ? copy_fs_struct+0x31/0x110 [ 442.398726][T16405] ? pv_queued_spin_unlock_traced+0x2d/0xb0 [ 442.398816][T16405] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 442.398872][T16405] unshare_fd+0x7d/0xd0 [ 442.398904][T16405] ksys_unshare+0x318/0x690 [ 442.398966][T16405] __x64_sys_unshare+0x1f/0x30 [ 442.399008][T16405] x64_sys_call+0x1e33/0x2550 [ 442.399045][T16405] do_syscall_64+0x112/0x360 [ 442.399170][T16405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.399206][T16405] RIP: 0033:0x7f482855f559 [ 442.399275][T16405] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 442.399299][T16405] RSP: 002b:00007f4826fb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 442.399412][T16405] RAX: ffffffffffffffda RBX: 00007f48287e5fa0 RCX: 00007f482855f559 [ 442.399437][T16405] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020400 [ 442.399458][T16405] RBP: 00007f48285f6b50 R08: 0000000000000000 R09: 0000000000000000 [ 442.399499][T16405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 442.399514][T16405] R13: 00007f48287e6038 R14: 00007f48287e5fa0 R15: 00007ffd5899a248 [ 442.399539][T16405] [ 442.459361][T16405] loop2: detected capacity change from 0 to 128 [ 442.480300][T16405] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 442.510067][T16405] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 442.595395][T16408] loop6: detected capacity change from 0 to 512 [ 442.674323][T16410] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3510'. [ 442.674396][T16410] tipc: Invalid UDP bearer configuration [ 442.674412][T16410] tipc: Enabling of bearer rejected, failed to enable media [ 442.676107][T16408] EXT4-fs error (device loop6): ext4_orphan_get:1404: inode #15: comm syz.6.3511: iget: bad i_size value: 38620345925642 [ 442.676151][T16408] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 442.677951][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 442.677977][ C0] EXT4-fs (loop6): initial error at time 1793550390: ext4_orphan_get:1404: inode 15 [ 442.678023][ C0] EXT4-fs (loop6): last error at time 1793550390: ext4_orphan_get:1404: inode 15 [ 442.724612][T16408] EXT4-fs error (device loop6): ext4_orphan_get:1409: comm syz.6.3511: couldn't read orphan inode 15 (err -117) [ 442.724809][T16408] loop6: lost filesystem error report for type 5 error -117 [ 442.746285][T16408] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 442.783097][T16407] TC_ACT_REPEAT abuse ? [ 442.838161][ T53] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 442.972279][T16423] loop2: detected capacity change from 0 to 128 [ 443.114013][T16433] loop1: detected capacity change from 0 to 512 [ 443.114933][T16433] ext4: Unknown parameter 'fowner>00000000000000000000' [ 443.296390][T10537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.469350][T16452] loop1: detected capacity change from 0 to 512 [ 443.510520][T16452] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.510633][T16452] ext4 filesystem being mounted at /447/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 443.704608][T16465] loop0: detected capacity change from 0 to 1024 [ 443.711389][T16465] EXT4-fs: Ignoring removed i_version option [ 443.732003][T16465] EXT4-fs (loop0): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 443.762756][ T29] kauditd_printk_skb: 162 callbacks suppressed [ 443.762781][ T29] audit: type=1400 audit(1793550391.589:3235): avc: denied { write } for pid=16464 comm="syz.0.3526" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 443.764255][ T8667] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 443.812805][ T29] audit: type=1400 audit(1793550391.649:3236): avc: denied { write } for pid=16464 comm="syz.0.3526" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 443.933005][ T6526] EXT4-fs (loop0): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 443.995033][ T29] audit: type=1400 audit(1793550391.829:3237): avc: denied { write } for pid=16460 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.042118][ T29] audit: type=1400 audit(1793550391.879:3238): avc: denied { connect } for pid=16484 comm="syz.1.3530" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 444.241627][ T29] audit: type=1400 audit(1793550392.079:3239): avc: denied { write } for pid=16490 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.773698][ T29] audit: type=1400 audit(1793550392.609:3240): avc: denied { getopt } for pid=16514 comm="syz.2.3537" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 444.799502][ T29] audit: type=1400 audit(1793550392.639:3241): avc: denied { name_bind } for pid=16514 comm="syz.2.3537" src=20005 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 444.919940][T16511] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 445.140776][ T29] audit: type=1400 audit(1793550392.979:3242): avc: denied { write } for pid=16499 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.236203][ T29] audit: type=1400 audit(1793550393.069:3243): avc: denied { write } for pid=16525 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 445.493074][ T29] audit: type=1326 audit(1793550393.329:3244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16532 comm="syz.1.3540" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f86782af559 code=0x7ffc0000 [ 445.674304][T16544] veth0_to_hsr: Caught tx_queue_len zero misconfig [ 445.693762][T16544] __nla_validate_parse: 1 callbacks suppressed [ 445.693783][T16544] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3543'. [ 445.693846][T16544] netlink: 6 bytes leftover after parsing attributes in process `syz.6.3543'. [ 445.812273][T16546] loop1: detected capacity change from 0 to 512 [ 445.815028][T16546] ext4: Unknown parameter 'fowner>00000000000000000000' [ 446.038597][T16556] loop2: detected capacity change from 0 to 2048 [ 446.073386][T16556] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.124654][T16556] EXT4-fs error (device loop2): ext4_ext_precache:648: inode #2: comm syz.2.3548: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4) [ 446.125432][T16556] EXT4-fs (loop2): Remounting filesystem read-only [ 446.340247][T10059] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 446.582294][T16585] loop2: detected capacity change from 0 to 164 [ 446.601110][T16585] rock: directory entry would overflow storage [ 446.601127][T16585] rock: sig=0x66, size=4, remaining=3 [ 447.339419][T16609] rxe_eth0 speed is unknown, defaulting to 1000 [ 447.505616][T16613] loop2: detected capacity change from 0 to 512 [ 447.545482][T16613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 447.545582][T16613] ext4 filesystem being mounted at /358/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 447.738585][T10059] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.178513][T16629] loop2: detected capacity change from 0 to 512 [ 448.194650][T16630] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3568'. [ 448.243186][T16629] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 448.243428][T16629] ext4 filesystem being mounted at /361/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 448.419079][T16637] FAULT_INJECTION: forcing a failure. [ 448.419079][T16637] name failslab, interval 1, probability 0, space 0, times 0 [ 448.419126][T16637] CPU: 0 UID: 0 PID: 16637 Comm: syz.1.3571 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 448.419250][T16637] Tainted: [W]=WARN [ 448.419262][T16637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 448.419286][T16637] Call Trace: [ 448.419299][T16637] [ 448.419314][T16637] __dump_stack+0x1d/0x30 [ 448.419424][T16637] dump_stack_lvl+0x95/0xd0 [ 448.419470][T16637] dump_stack+0x15/0x1b [ 448.419571][T16637] should_fail_ex+0x259/0x270 [ 448.419605][T16637] ? __io_uring_add_tctx_node+0xea/0x3c0 [ 448.419640][T16637] should_failslab+0x8c/0xb0 [ 448.419716][T16637] __kmalloc_cache_noprof+0x5d/0x3e0 [ 448.419752][T16637] ? __io_uring_add_tctx_node+0xea/0x3c0 [ 448.419790][T16637] __io_uring_add_tctx_node+0xea/0x3c0 [ 448.419860][T16637] io_uring_create+0x3e1/0x4f0 [ 448.419909][T16637] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 448.419952][T16637] __x64_sys_io_uring_setup+0x31/0x40 [ 448.420055][T16637] x64_sys_call+0x1fbf/0x2550 [ 448.420096][T16637] do_syscall_64+0x112/0x360 [ 448.420193][T16637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 448.420240][T16637] RIP: 0033:0x7f86782af559 [ 448.420266][T16637] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 448.420295][T16637] RSP: 002b:00007f8676d06fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 448.420406][T16637] RAX: ffffffffffffffda RBX: 0000200000002240 RCX: 00007f86782af559 [ 448.420430][T16637] RDX: 0000000000000000 RSI: 0000200000002240 RDI: 0000000000003f6f [ 448.420493][T16637] RBP: 00007f8678346b50 R08: 0000000000000000 R09: 0000000000000000 [ 448.420509][T16637] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 448.420536][T16637] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffeec953208 [ 448.420566][T16637] [ 448.645647][T10059] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 448.855459][ T29] kauditd_printk_skb: 36 callbacks suppressed [ 448.855484][ T29] audit: type=1400 audit(1793550652.687:3281): avc: denied { connect } for pid=16642 comm="syz.2.3573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 448.921072][T16649] SELinux: Context OPcǙ?s U^tQ`w& m [ 448.921072][T16649] %Z@L0NrL1X)ْijɒ%ؑfYjwLݍ8 bV:vi is not valid (left unmapped). [ 448.922586][ T29] audit: type=1400 audit(1793550652.757:3282): avc: denied { relabelto } for pid=16647 comm="syz.1.3577" name="bus" dev="tmpfs" ino=2477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=BC1A4F065063D5C799BB9EC5E83F897381DE0C55E2B2C908EC5E74FA169414516077EA189D15260CF2986D0AA4F9A10CD725D35ACAF3AEC7404C141A30F54EEFB572910D4CB231588B0F29D992690186156ACF02C9920125D89110D966CBEDEE7F596A77F5D44CDD8D98BBE338F4C7DD1BB1E10B6216563AB176D3690FFD09 [ 448.922870][ T29] audit: type=1400 audit(1793550652.757:3283): avc: denied { associate } for pid=16647 comm="syz.1.3577" name="bus" dev="tmpfs" ino=2477 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=BC1A4F065063D5C799BB9EC5E83F897381DE0C55E2B2C908EC5E74FA169414516077EA189D15260CF2986D0AA4F9A10CD725D35ACAF3AEC7404C141A30F54EEFB572910D4CB231588B0F29D992690186156ACF02C9920125D89110D966CBEDEE7F596A77F5D44CDD8D98BBE338F4C7DD1BB1E10B6216563AB176D3690FFD09 [ 449.101456][ T29] audit: type=1400 audit(1793550652.927:3284): avc: denied { unlink } for pid=8667 comm="syz-executor" name="bus" dev="tmpfs" ino=2477 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon=BC1A4F065063D5C799BB9EC5E83F897381DE0C55E2B2C908EC5E74FA169414516077EA189D15260CF2986D0AA4F9A10CD725D35ACAF3AEC7404C141A30F54EEFB572910D4CB231588B0F29D992690186156ACF02C9920125D89110D966CBEDEE7F596A77F5D44CDD8D98BBE338F4C7DD1BB1E10B6216563AB176D3690FFD09 [ 449.341230][ T29] audit: type=1400 audit(1793550653.177:3285): avc: denied { nlmsg_tty_audit } for pid=16656 comm="syz.1.3580" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 449.807781][T16665] ip_tables: iptables: counters copy to user failed while replacing table [ 450.065442][T16671] FAULT_INJECTION: forcing a failure. [ 450.065442][T16671] name failslab, interval 1, probability 0, space 0, times 0 [ 450.065508][T16671] CPU: 0 UID: 0 PID: 16671 Comm: syz.2.3586 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 450.065597][T16671] Tainted: [W]=WARN [ 450.065608][T16671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 450.065668][T16671] Call Trace: [ 450.065678][T16671] [ 450.065689][T16671] __dump_stack+0x1d/0x30 [ 450.065751][T16671] dump_stack_lvl+0x95/0xd0 [ 450.065789][T16671] dump_stack+0x15/0x1b [ 450.065860][T16671] should_fail_ex+0x259/0x270 [ 450.065912][T16671] ? __io_uring_add_tctx_node+0xea/0x3c0 [ 450.065943][T16671] should_failslab+0x8c/0xb0 [ 450.065978][T16671] __kmalloc_cache_noprof+0x5d/0x3e0 [ 450.066101][T16671] ? __io_uring_add_tctx_node+0xea/0x3c0 [ 450.066187][T16671] __io_uring_add_tctx_node+0xea/0x3c0 [ 450.066241][T16671] io_uring_create+0x3e1/0x4f0 [ 450.066277][T16671] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 450.066315][T16671] __x64_sys_io_uring_setup+0x31/0x40 [ 450.066408][T16671] x64_sys_call+0x1fbf/0x2550 [ 450.066451][T16671] do_syscall_64+0x112/0x360 [ 450.066496][T16671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.066584][T16671] RIP: 0033:0x7f482855f559 [ 450.066604][T16671] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.066662][T16671] RSP: 002b:00007f4826fb6fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 450.066697][T16671] RAX: ffffffffffffffda RBX: 0000200000002240 RCX: 00007f482855f559 [ 450.066726][T16671] RDX: 0000000000000000 RSI: 0000200000002240 RDI: 0000000000003f6f [ 450.066743][T16671] RBP: 00007f48285f6b50 R08: 0000000000000000 R09: 0000000000000000 [ 450.066758][T16671] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 450.066853][T16671] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd5899a248 [ 450.066878][T16671] [ 450.436001][T16674] FAULT_INJECTION: forcing a failure. [ 450.436001][T16674] name failslab, interval 1, probability 0, space 0, times 0 [ 450.436049][T16674] CPU: 1 UID: 0 PID: 16674 Comm: syz.2.3587 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 450.436120][T16674] Tainted: [W]=WARN [ 450.436151][T16674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 450.436224][T16674] Call Trace: [ 450.436234][T16674] [ 450.436245][T16674] __dump_stack+0x1d/0x30 [ 450.436276][T16674] dump_stack_lvl+0x95/0xd0 [ 450.436312][T16674] dump_stack+0x15/0x1b [ 450.436402][T16674] should_fail_ex+0x259/0x270 [ 450.436445][T16674] ? dst_alloc+0xbd/0x100 [ 450.436473][T16674] should_failslab+0x8c/0xb0 [ 450.436542][T16674] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 450.436612][T16674] ? dst_alloc+0xbd/0x100 [ 450.436645][T16674] ? __pfx_ip6_dst_gc+0x10/0x10 [ 450.436684][T16674] dst_alloc+0xbd/0x100 [ 450.436798][T16674] ip6_create_rt_rcu+0x15e/0x330 [ 450.436843][T16674] ip6_pol_route_lookup+0xebc/0x1050 [ 450.436889][T16674] ? ring_buffer_unlock_commit+0x3cc/0x450 [ 450.436924][T16674] ? __trace_event_discard_commit+0x58/0x70 [ 450.437037][T16674] ? __pfx_ip6_pol_route_lookup+0x10/0x10 [ 450.437129][T16674] fib6_rule_lookup+0x40b/0x4c0 [ 450.437189][T16674] ? __pfx_ip6_pol_route_lookup+0x10/0x10 [ 450.437231][T16674] ? trace_event_raw_event_kmalloc+0xb7/0x110 [ 450.437285][T16674] rt6_lookup+0xbe/0x120 [ 450.437330][T16674] ipv6_sock_ac_join+0x350/0x5f0 [ 450.437408][T16674] do_ipv6_setsockopt+0x191d/0x1d30 [ 450.437541][T16674] ? __rcu_read_unlock+0x4e/0x70 [ 450.437642][T16674] ? avc_has_perm_noaudit+0xac/0x160 [ 450.437734][T16674] ? selinux_netlbl_socket_setsockopt+0x20d/0x2f0 [ 450.437829][T16674] ipv6_setsockopt+0x59/0x130 [ 450.437908][T16674] tcp_setsockopt+0x98/0xb0 [ 450.437954][T16674] sock_common_setsockopt+0x69/0x80 [ 450.437996][T16674] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 450.438043][T16674] __sys_setsockopt+0x184/0x200 [ 450.438153][T16674] __x64_sys_setsockopt+0x64/0x80 [ 450.438191][T16674] x64_sys_call+0x248f/0x2550 [ 450.438238][T16674] do_syscall_64+0x112/0x360 [ 450.438288][T16674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.438347][T16674] RIP: 0033:0x7f482855f559 [ 450.438366][T16674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 450.438404][T16674] RSP: 002b:00007f4826fb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 450.438500][T16674] RAX: ffffffffffffffda RBX: 00007f48287e5fa0 RCX: 00007f482855f559 [ 450.438521][T16674] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000004 [ 450.438540][T16674] RBP: 00007f48285f6b50 R08: 0000000000000014 R09: 0000000000000000 [ 450.438563][T16674] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 450.438579][T16674] R13: 00007f48287e6038 R14: 00007f48287e5fa0 R15: 00007ffd5899a248 [ 450.438687][T16674] [ 451.386621][ T29] audit: type=1326 audit(1793550655.217:3286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16686 comm="syz.2.3593" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482855f559 code=0x7ffc0000 [ 451.387364][ T29] audit: type=1326 audit(1793550655.217:3287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16686 comm="syz.2.3593" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482855f559 code=0x7ffc0000 [ 451.387563][ T29] audit: type=1326 audit(1793550655.217:3288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16686 comm="syz.2.3593" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f482855f559 code=0x7ffc0000 [ 451.388093][ T29] audit: type=1326 audit(1793550655.217:3289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16686 comm="syz.2.3593" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f482855f559 code=0x7ffc0000 [ 451.466823][ T29] audit: type=1326 audit(1793550655.307:3290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16686 comm="syz.2.3593" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f482851fd8e code=0x7ffc0000 [ 452.083513][T16708] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3599'. [ 452.170741][T16708] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3599'. [ 452.339821][T16715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3602'. [ 452.339868][T16715] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3602'. [ 452.479373][T16719] FAULT_INJECTION: forcing a failure. [ 452.479373][T16719] name failslab, interval 1, probability 0, space 0, times 0 [ 452.479417][T16719] CPU: 1 UID: 0 PID: 16719 Comm: syz.6.3603 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 452.479458][T16719] Tainted: [W]=WARN [ 452.479468][T16719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 452.479525][T16719] Call Trace: [ 452.479537][T16719] [ 452.479551][T16719] __dump_stack+0x1d/0x30 [ 452.479584][T16719] dump_stack_lvl+0x95/0xd0 [ 452.479664][T16719] dump_stack+0x15/0x1b [ 452.479731][T16719] should_fail_ex+0x259/0x270 [ 452.479807][T16719] ? __register_sysctl_table+0x52/0xbe0 [ 452.479863][T16719] should_failslab+0x8c/0xb0 [ 452.479961][T16719] __kmalloc_noprof+0xb6/0x4b0 [ 452.480000][T16719] ? __register_sysctl_table+0x52/0xbe0 [ 452.480043][T16719] __register_sysctl_table+0x52/0xbe0 [ 452.480138][T16719] ? sysctl_core_net_init+0x3d/0x530 [ 452.480167][T16719] ? __kmalloc_node_track_caller_noprof+0x45b/0x4d0 [ 452.480341][T16719] ? sysctl_core_net_init+0x3d/0x530 [ 452.480374][T16719] register_net_sysctl_sz+0x118/0x190 [ 452.480411][T16719] sysctl_core_net_init+0x4c7/0x530 [ 452.480535][T16719] ops_init+0x22a/0x2e0 [ 452.480580][T16719] setup_net+0x9f/0x230 [ 452.480621][T16719] copy_net_ns+0x339/0x490 [ 452.480654][T16719] create_new_namespaces+0x1f6/0x420 [ 452.480696][T16719] unshare_nsproxy_namespaces+0x115/0x150 [ 452.480732][T16719] ksys_unshare+0x3a3/0x690 [ 452.480769][T16719] __x64_sys_unshare+0x1f/0x30 [ 452.480839][T16719] x64_sys_call+0x1e33/0x2550 [ 452.480878][T16719] do_syscall_64+0x112/0x360 [ 452.480989][T16719] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.481020][T16719] RIP: 0033:0x7fb23c0df559 [ 452.481091][T16719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 452.481123][T16719] RSP: 002b:00007fb23ab37028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 452.481215][T16719] RAX: ffffffffffffffda RBX: 00007fb23c365fa0 RCX: 00007fb23c0df559 [ 452.481306][T16719] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 452.481325][T16719] RBP: 00007fb23c176b50 R08: 0000000000000000 R09: 0000000000000000 [ 452.481404][T16719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.481425][T16719] R13: 00007fb23c366038 R14: 00007fb23c365fa0 R15: 00007ffe8800c008 [ 452.481454][T16719] [ 452.904617][T16725] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3605'. [ 452.904651][T16725] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3605'. [ 452.904724][T16725] netlink: 1 bytes leftover after parsing attributes in process `syz.6.3605'. [ 453.147812][T16727] netlink: 'syz.6.3606': attribute type 1 has an invalid length. [ 453.249639][T16727] 8021q: adding VLAN 0 to HW filter on device bond7 [ 453.270799][T16727] bond6: (slave bond7): making interface the new active one [ 453.283519][T16727] bond6: (slave bond7): Enslaving as an active interface with an up link [ 453.353261][T16727] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3606'. [ 453.373644][T16730] bond6: (slave gretap2): Enslaving as a backup interface with an up link [ 453.375261][T16727] 8021q: adding VLAN 0 to HW filter on device bond6 [ 453.665602][T16738] netlink: 'syz.2.3608': attribute type 2 has an invalid length. [ 453.665665][T16738] netlink: 'syz.2.3608': attribute type 2 has an invalid length. [ 453.665681][T16738] netlink: 'syz.2.3608': attribute type 2 has an invalid length. [ 453.665702][T16738] netlink: 'syz.2.3608': attribute type 1 has an invalid length. [ 454.248197][ T29] kauditd_printk_skb: 55 callbacks suppressed [ 454.248221][ T29] audit: type=1400 audit(1793550658.087:3346): avc: denied { write } for pid=16756 comm="syz.1.3617" name="urandom" dev="devtmpfs" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 454.305828][T16749] loop2: detected capacity change from 0 to 1024 [ 454.336804][T16749] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869) [ 454.337009][T16749] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 454.343691][T16749] jbd2_journal_init_inode: Cannot locate journal superblock [ 454.343731][T16749] EXT4-fs (loop2): Could not load journal inode [ 454.436543][T16761] loop6: detected capacity change from 0 to 128 [ 454.785817][T16775] loop0: detected capacity change from 0 to 512 [ 454.855442][T16775] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 454.855573][T16775] ext4 filesystem being mounted at /585/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 454.901430][ T29] audit: type=1400 audit(1793550658.737:3347): avc: denied { write } for pid=16774 comm="syz.0.3626" name="/" dev="loop0" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 455.088326][ T6526] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 455.127932][T16788] netlink: 'syz.6.3631': attribute type 1 has an invalid length. [ 455.201018][T16788] bond8: entered promiscuous mode [ 455.201606][T16788] 8021q: adding VLAN 0 to HW filter on device bond8 [ 455.241401][T16792] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 455.241446][T16792] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 455.241485][T16792] bond8: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 455.322897][T16788] bond8: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 455.322933][T16788] bond8: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 455.496198][T16810] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 455.617182][ T29] audit: type=1400 audit(1793550659.447:3348): avc: denied { read } for pid=16817 comm="syz.1.3640" name="autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 455.617285][ T29] audit: type=1400 audit(1793550659.447:3349): avc: denied { open } for pid=16817 comm="syz.1.3640" path="/dev/autofs" dev="devtmpfs" ino=91 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 455.744558][T16824] loop0: detected capacity change from 0 to 128 [ 455.763746][T16822] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3644'. [ 455.783639][T16824] bio_check_eod: 98 callbacks suppressed [ 455.785882][T16824] syz.0.3647: attempt to access beyond end of device [ 455.785882][T16824] loop0: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 455.809056][T16824] syz.0.3647: attempt to access beyond end of device [ 455.809056][T16824] loop0: rw=8390657, sector=158, nr_sectors = 2 limit=128 [ 455.809094][T16824] Buffer I/O error on dev loop0, logical block 79, lost async page write [ 455.809126][T16824] syz.0.3647: attempt to access beyond end of device [ 455.809126][T16824] loop0: rw=8390657, sector=160, nr_sectors = 2 limit=128 [ 455.809187][T16824] Buffer I/O error on dev loop0, logical block 80, lost async page write [ 455.809331][T16824] syz.0.3647: attempt to access beyond end of device [ 455.809331][T16824] loop0: rw=2049, sector=162, nr_sectors = 16 limit=128 [ 455.810386][T16824] syz.0.3647: attempt to access beyond end of device [ 455.810386][T16824] loop0: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 455.814857][T16824] syz.0.3647: attempt to access beyond end of device [ 455.814857][T16824] loop0: rw=8390657, sector=182, nr_sectors = 2 limit=128 [ 455.815074][T16824] Buffer I/O error on dev loop0, logical block 91, lost async page write [ 455.815152][T16824] syz.0.3647: attempt to access beyond end of device [ 455.815152][T16824] loop0: rw=8390657, sector=184, nr_sectors = 2 limit=128 [ 455.815188][T16824] Buffer I/O error on dev loop0, logical block 92, lost async page write [ 455.855398][T16824] syz.0.3647: attempt to access beyond end of device [ 455.855398][T16824] loop0: rw=2049, sector=202, nr_sectors = 6 limit=128 [ 455.856791][T16824] syz.0.3647: attempt to access beyond end of device [ 455.856791][T16824] loop0: rw=8390657, sector=206, nr_sectors = 2 limit=128 [ 455.880721][T16824] Buffer I/O error on dev loop0, logical block 103, lost async page write [ 455.880827][T16824] syz.0.3647: attempt to access beyond end of device [ 455.880827][T16824] loop0: rw=8390657, sector=208, nr_sectors = 2 limit=128 [ 455.880917][T16824] Buffer I/O error on dev loop0, logical block 104, lost async page write [ 455.952853][T16824] Buffer I/O error on dev loop0, logical block 107, lost async page write [ 455.952892][T16824] Buffer I/O error on dev loop0, logical block 108, lost async page write [ 456.026320][T16824] Buffer I/O error on dev loop0, logical block 119, lost async page write [ 456.026351][T16824] Buffer I/O error on dev loop0, logical block 120, lost async page write [ 456.029913][T16829] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.030028][T16829] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.081669][T16834] loop2: detected capacity change from 0 to 512 [ 456.096559][T16834] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 456.096578][T16834] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 456.136298][T16834] EXT4-fs (loop2): 1 truncate cleaned up [ 456.137077][T16834] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 456.170583][T16829] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.170731][T16829] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.283194][T16829] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 456.283296][T16829] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 456.494198][ T32] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.494246][ T32] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.549742][ T1913] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.549789][ T1913] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.576949][ T1913] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.576992][ T1913] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.602999][ T1913] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.603034][ T1913] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.761353][T10059] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 456.779782][ T29] audit: type=1400 audit(1793550660.617:3350): avc: denied { write } for pid=16840 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.057473][ T29] audit: type=1400 audit(1793550660.887:3351): avc: denied { write } for pid=16871 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 457.275034][T16884] loop6: detected capacity change from 0 to 128 [ 457.395661][T16889] loop1: detected capacity change from 0 to 512 [ 457.436485][T16889] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 457.443940][T16889] ext4 filesystem being mounted at /480/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.480324][T16889] mmap: syz.1.3666 (16889): VmData 29134848 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data. [ 457.532754][ T8667] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 457.600860][T16899] FAULT_INJECTION: forcing a failure. [ 457.600860][T16899] name failslab, interval 1, probability 0, space 0, times 0 [ 457.600928][T16899] CPU: 1 UID: 0 PID: 16899 Comm: syz.1.3669 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 457.601009][T16899] Tainted: [W]=WARN [ 457.601018][T16899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 457.601035][T16899] Call Trace: [ 457.601084][T16899] [ 457.601097][T16899] __dump_stack+0x1d/0x30 [ 457.601135][T16899] dump_stack_lvl+0x95/0xd0 [ 457.601224][T16899] dump_stack+0x15/0x1b [ 457.601256][T16899] should_fail_ex+0x259/0x270 [ 457.601294][T16899] ? do_getname+0x2e/0x1c0 [ 457.601374][T16899] should_failslab+0x8c/0xb0 [ 457.601415][T16899] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 457.601457][T16899] ? do_getname+0x2e/0x1c0 [ 457.601490][T16899] do_getname+0x2e/0x1c0 [ 457.601540][T16899] getname_flags+0x1d/0x30 [ 457.601563][T16899] path_setxattrat+0x21a/0x320 [ 457.601606][T16899] __x64_sys_setxattr+0x6e/0x90 [ 457.601645][T16899] x64_sys_call+0xf6c/0x2550 [ 457.601758][T16899] do_syscall_64+0x112/0x360 [ 457.601805][T16899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.601876][T16899] RIP: 0033:0x7f86782af559 [ 457.601901][T16899] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 457.601930][T16899] RSP: 002b:00007f8676d07028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 457.601965][T16899] RAX: ffffffffffffffda RBX: 00007f8678535fa0 RCX: 00007f86782af559 [ 457.602030][T16899] RDX: 0000200000000300 RSI: 00002000000002c0 RDI: 0000000000000000 [ 457.602050][T16899] RBP: 00007f8678346b50 R08: 0000000000000001 R09: 0000000000000000 [ 457.602068][T16899] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 457.602086][T16899] R13: 00007f8678536038 R14: 00007f8678535fa0 R15: 00007ffeec953208 [ 457.602112][T16899] [ 457.820232][T16893] rxe_eth0 speed is unknown, defaulting to 1000 [ 457.862220][T16903] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 457.862275][T16903] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 457.862349][T16903] vhci_hcd vhci_hcd.0: Device attached [ 457.889999][T16903] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(5) [ 457.890032][T16903] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 457.890226][T16903] vhci_hcd vhci_hcd.0: Device attached [ 457.924083][T16903] loop1: detected capacity change from 0 to 512 [ 457.925878][T16903] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 457.925898][T16903] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 457.963762][T16903] EXT4-fs (loop1): 1 truncate cleaned up [ 457.977782][T16903] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 458.099224][T13265] usb 3-1: new high-speed USB device number 2 using vhci_hcd [ 458.106014][T16906] vhci_hcd: connection closed [ 458.106302][T16904] vhci_hcd: connection reset by peer [ 458.106658][ T1913] vhci_hcd vhci_hcd.1: stop threads [ 458.106744][ T1913] vhci_hcd vhci_hcd.1: release socket [ 458.106785][ T1913] vhci_hcd vhci_hcd.1: disconnect device [ 458.106962][ T1913] vhci_hcd vhci_hcd.1: stop threads [ 458.107033][ T1913] vhci_hcd vhci_hcd.1: release socket [ 458.107054][ T1913] vhci_hcd vhci_hcd.1: disconnect device [ 458.205543][T16917] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3675'. [ 458.344806][ T29] audit: type=1400 audit(1793550662.177:3352): avc: denied { read write } for pid=16922 comm="syz.6.3677" name="usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 458.344987][ T29] audit: type=1400 audit(1793550662.177:3353): avc: denied { open } for pid=16922 comm="syz.6.3677" path="/dev/usbmon1" dev="devtmpfs" ino=143 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 458.454783][ T29] audit: type=1400 audit(1793550662.287:3354): avc: denied { ioctl } for pid=16922 comm="syz.6.3677" path="/dev/usbmon1" dev="devtmpfs" ino=143 ioctlcmd=0x4018920a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 458.555913][T16934] tipc: Enabled bearer , priority 0 [ 458.557245][T16934] tipc: Disabling bearer [ 458.578672][T16932] loop0: detected capacity change from 0 to 512 [ 458.625348][T16932] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 458.625379][T16932] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 458.625497][T16932] System zones: 0-1, 15-15, 18-18, 34-34 [ 458.626004][T16932] EXT4-fs (loop0): orphan cleanup on readonly fs [ 458.626085][T16932] EXT4-fs error (device loop0): ext4_quota_enable:7307: comm syz.0.3680: Bad quota inum: 768, type: 0 [ 458.626126][T16932] loop0: lost filesystem error report for type 5 error -117 [ 458.628313][T16932] EXT4-fs warning (device loop0): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-117, ino=768). Please run e2fsck to fix. [ 458.628357][T16932] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 458.705660][T16932] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 458.756264][ T29] audit: type=1400 audit(1793550662.587:3355): avc: denied { read } for pid=16930 comm="syz.0.3680" name="file2" dev="loop0" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 458.803645][ T8667] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 458.984557][ T6526] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.292750][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 459.292821][ T29] audit: type=1400 audit(1793550663.127:3357): avc: denied { bind } for pid=16952 comm="syz.6.3688" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 459.383895][ T29] audit: type=1326 audit(1793550663.217:3358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16964 comm="syz.1.3690" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f86782af559 code=0x0 [ 459.611902][ T29] audit: type=1400 audit(1793550663.447:3359): avc: denied { write } for pid=16948 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 459.884878][ T29] audit: type=1400 audit(1793550663.717:3360): avc: denied { write } for pid=16984 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 460.812294][ T29] audit: type=1400 audit(1793550664.647:3361): avc: denied { write } for pid=16989 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 461.134883][ T29] audit: type=1400 audit(1793550664.967:3362): avc: denied { write } for pid=17025 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 461.866950][T17042] netlink: 104 bytes leftover after parsing attributes in process `syz.3.3709'. [ 462.073836][T17044] rxe_eth0 speed is unknown, defaulting to 1000 [ 462.152738][T17045] rxe_eth0 speed is unknown, defaulting to 1000 [ 463.198314][T13265] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 463.352340][T17059] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3715'. [ 463.581051][ T29] audit: type=1400 audit(1793550667.417:3363): avc: denied { mount } for pid=17064 comm="syz.2.3717" name="/" dev="securityfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 463.693145][ T29] audit: type=1400 audit(1793550667.527:3364): avc: denied { unmount } for pid=10059 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 463.902365][T17051] loop1: detected capacity change from 0 to 512 [ 463.941680][T17051] EXT4-fs error (device loop1): ext4_iget_extra_inode:6027: inode #15: comm syz.1.3712: corrupted in-inode xattr: invalid ea_ino [ 463.941716][T17051] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 463.942370][T17051] EXT4-fs error (device loop1): ext4_orphan_get:1409: comm syz.1.3712: couldn't read orphan inode 15 (err -117) [ 463.942399][T17051] loop1: lost filesystem error report for type 5 error -117 [ 463.947074][T17051] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 464.120123][T17082] tipc: Started in network mode [ 464.120203][T17082] tipc: Node identity ac1414aa, cluster identity 4711 [ 464.120339][T17082] tipc: New replicast peer: 172.20.20.187 [ 464.120775][T17082] tipc: Enabled bearer , priority 10 [ 465.238688][T13265] tipc: Node number set to 2886997162 [ 465.372909][T17086] synth uevent: /bus/acpi: unknown uevent action string [ 466.164361][ T8667] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.331030][T17098] loop2: detected capacity change from 0 to 512 [ 466.381186][T17098] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 466.381306][T17098] ext4 filesystem being mounted at /399/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 466.426875][T17102] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 466.444499][T17098] batman_adv: batadv0: Adding interface: veth0 [ 466.444517][T17098] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 466.444611][T17098] batman_adv: batadv0: Interface activated: veth0 [ 466.491551][T17107] TCP: TCP_TX_DELAY enabled [ 466.506861][T17098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.506891][T17098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.523043][T17098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.523118][T17098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.542548][T17098] batman_adv: batadv0: Interface deactivated: veth0 [ 466.542574][T17098] batman_adv: batadv0: Removing interface: veth0 [ 466.769149][T10059] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.018470][T17136] tipc: Can't bind to reserved service type 1 [ 467.432133][T13265] rxe_eth0 speed is unknown, defaulting to 1000 [ 467.809654][T13265] kernel read not supported for file inotify (pid: 13265 comm: kworker/0:12) [ 467.953080][ T29] audit: type=1400 audit(1793550671.787:3365): avc: denied { write } for pid=17149 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.061206][ T29] audit: type=1400 audit(1793550671.897:3366): avc: denied { write } for pid=17188 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.642350][ T29] audit: type=1400 audit(1793550672.477:3367): avc: denied { write } for pid=17197 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 468.748241][ T29] audit: type=1400 audit(1793550672.577:3368): avc: denied { write } for pid=17232 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 469.076785][T17259] bridge0: entered promiscuous mode [ 469.087764][T17259] macvlan0: entered promiscuous mode [ 469.091232][T17259] ip6tnl1: entered promiscuous mode [ 469.091443][T17259] gretap2: entered promiscuous mode [ 469.094712][T17259] veth10: entered promiscuous mode [ 469.096210][T17259] veth11: entered promiscuous mode [ 469.097040][T17259] netdevsim netdevsim0 eth0: entered promiscuous mode [ 469.097578][T17259] netdevsim netdevsim0 eth1: entered promiscuous mode [ 469.097695][T17259] netdevsim netdevsim0 eth2: entered promiscuous mode [ 469.097791][T17259] netdevsim netdevsim0 eth3: entered promiscuous mode [ 469.127436][ T29] audit: type=1400 audit(1793550672.957:3369): avc: denied { write } for pid=17243 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 469.178213][T17259] syztnl1: entered promiscuous mode [ 469.178332][T17259] syztnl0: entered promiscuous mode [ 469.178957][T17259] sit4: entered promiscuous mode [ 469.180933][T17259] vxlan0: entered promiscuous mode [ 469.183070][T17259] batman_adv: batadv0: Interface deactivated: gretap3 [ 469.187461][T17259] gretap3: entered promiscuous mode [ 469.234291][T17259] bridge5: entered promiscuous mode [ 469.257808][T17259] bridge6: entered promiscuous mode [ 469.298583][ T4383] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.298649][ T4383] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.298701][ T4383] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.298805][ T4383] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.362806][ T29] audit: type=1400 audit(1793550673.197:3370): avc: denied { write } for pid=17262 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 469.595076][T17272] rxe_eth0 speed is unknown, defaulting to 1000 [ 470.245391][T17291] TC_ACT_REPEAT abuse ? [ 470.388167][T17295] netlink: 'syz.6.3788': attribute type 1 has an invalid length. [ 470.446371][T17295] 8021q: adding VLAN 0 to HW filter on device bond9 [ 470.458800][T17299] bond9: entered promiscuous mode [ 470.488648][T17299] bond9 (unregistering): left promiscuous mode [ 470.489390][T17299] bond9 (unregistering): Released all slaves [ 470.649667][T17303] loop6: detected capacity change from 0 to 512 [ 470.651242][T17303] vfat: Unknown parameter '01777777777777777777777' [ 470.876211][T17312] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3794'. [ 470.910622][T17312] vlan3: entered promiscuous mode [ 471.028604][T17189] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 471.265051][T17320] loop6: detected capacity change from 0 to 8 [ 471.299305][T17320] loop6: detected capacity change from 8 to 7 [ 471.300018][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.300069][ C0] buffer_io_error: 38 callbacks suppressed [ 471.300088][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 471.300382][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.300443][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 471.300514][T17320] loop6: unable to read partition table [ 471.300587][T17320] loop_reread_partitions: partition scan of loop6 ([{BѷMܾ`*Z5]z(Ť4+hGpXgm [ 471.300587][T17320] .BL_se) failed (rc=-5) [ 471.314843][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.315063][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 471.316483][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.316549][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 471.319938][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.320007][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 471.320985][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.321086][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 471.322175][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.322427][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 471.411217][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.411359][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 471.424792][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.424931][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 471.429925][ C0] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 471.430245][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 471.670196][T17325] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3799'. [ 472.077612][T17343] ip_tables: iptables: counters copy to user failed while replacing table [ 472.101180][T17341] TC_ACT_REPEAT abuse ? [ 472.427357][T17350] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 472.427443][T17350] block device autoloading is deprecated and will be removed. [ 472.871103][T17377] loop6: detected capacity change from 0 to 128 [ 472.875214][T17377] FAT-fs (loop6): bogus sectors per cluster 0 [ 472.875243][T17377] FAT-fs (loop6): Can't find a valid FAT filesystem [ 472.971785][T17381] loop1: detected capacity change from 0 to 128 [ 473.062986][T17384] loop6: detected capacity change from 0 to 128 [ 473.075060][T17384] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 473.088989][T17384] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 473.090830][T17384] ext2 filesystem being mounted at /441/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 473.138971][T10537] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 473.308118][T17393] FAULT_INJECTION: forcing a failure. [ 473.308118][T17393] name failslab, interval 1, probability 0, space 0, times 0 [ 473.308162][T17393] CPU: 1 UID: 0 PID: 17393 Comm: syz.6.3827 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 473.308204][T17393] Tainted: [W]=WARN [ 473.308218][T17393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 473.308319][T17393] Call Trace: [ 473.308329][T17393] [ 473.308343][T17393] __dump_stack+0x1d/0x30 [ 473.308382][T17393] dump_stack_lvl+0x95/0xd0 [ 473.308423][T17393] dump_stack+0x15/0x1b [ 473.308456][T17393] should_fail_ex+0x259/0x270 [ 473.308559][T17393] ? __kernfs_new_node+0x70/0x440 [ 473.308660][T17393] should_failslab+0x8c/0xb0 [ 473.308707][T17393] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 473.308752][T17393] ? __kernfs_new_node+0x70/0x440 [ 473.308869][T17393] __kernfs_new_node+0x70/0x440 [ 473.308904][T17393] ? __rcu_read_unlock+0x4e/0x70 [ 473.309010][T17393] ? up_write+0x19/0x60 [ 473.309095][T17393] ? kernfs_link_sibling+0x2f5/0x320 [ 473.309133][T17393] ? __rcu_read_unlock+0x4e/0x70 [ 473.309173][T17393] kernfs_new_node+0x107/0x140 [ 473.309290][T17393] __kernfs_create_file+0x4b/0x180 [ 473.309344][T17393] ? __pfx_dev_attr_show+0x10/0x10 [ 473.309394][T17393] ? __pfx_dev_attr_store+0x10/0x10 [ 473.309437][T17393] sysfs_add_file_mode_ns+0x132/0x1b0 [ 473.309475][T17393] internal_create_group+0x43e/0x9e0 [ 473.309507][T17393] ? kernfs_put+0x25e/0x2c0 [ 473.309566][T17393] sysfs_create_groups+0x3f/0xf0 [ 473.309602][T17393] device_add_attrs+0xf2/0x3f0 [ 473.309638][T17393] device_add+0x37a/0x790 [ 473.309683][T17393] netdev_register_kobject+0x127/0x240 [ 473.309715][T17393] register_netdevice+0xc68/0x13f0 [ 473.309761][T17393] register_vlan_dev+0x21d/0x470 [ 473.309827][T17393] vlan_newlink+0x32a/0x370 [ 473.309869][T17393] ? __pfx_vlan_newlink+0x10/0x10 [ 473.309906][T17393] rtnl_newlink_create+0x1e4/0x4a0 [ 473.309954][T17393] ? security_capable+0x7b/0x90 [ 473.310010][T17393] ? netlink_ns_capable+0x86/0xa0 [ 473.310045][T17393] rtnl_newlink+0x1255/0x1510 [ 473.310093][T17393] ? ring_buffer_unlock_commit+0x3cc/0x450 [ 473.310136][T17393] ? trace_buffer_unlock_commit_regs+0x115/0x310 [ 473.310166][T17393] ? __rcu_read_unlock+0x4e/0x70 [ 473.310196][T17393] ? avc_has_perm_noaudit+0xac/0x160 [ 473.310280][T17393] ? cred_has_capability+0x224/0x2a0 [ 473.310317][T17393] ? selinux_capable+0x31/0x40 [ 473.310356][T17393] ? security_capable+0x7b/0x90 [ 473.310452][T17393] ? ns_capable+0x80/0xb0 [ 473.310488][T17393] ? __pfx_rtnl_newlink+0x10/0x10 [ 473.310519][T17393] rtnetlink_rcv_msg+0x64b/0x720 [ 473.310555][T17393] netlink_rcv_skb+0x11e/0x220 [ 473.310648][T17393] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 473.310686][T17393] rtnetlink_rcv+0x1c/0x30 [ 473.310761][T17393] netlink_unicast+0x665/0x740 [ 473.310847][T17393] netlink_sendmsg+0x5ef/0x740 [ 473.310884][T17393] ? __pfx_netlink_sendmsg+0x10/0x10 [ 473.310916][T17393] ____sys_sendmsg+0x54a/0x590 [ 473.310943][T17393] ___sys_sendmsg+0x195/0x1e0 [ 473.311045][T17393] __x64_sys_sendmsg+0xd4/0x160 [ 473.311081][T17393] x64_sys_call+0x22ab/0x2550 [ 473.311116][T17393] do_syscall_64+0x112/0x360 [ 473.311177][T17393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.311213][T17393] RIP: 0033:0x7fb23c0df559 [ 473.311239][T17393] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.311313][T17393] RSP: 002b:00007fb23ab37028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 473.311386][T17393] RAX: ffffffffffffffda RBX: 00007fb23c365fa0 RCX: 00007fb23c0df559 [ 473.311411][T17393] RDX: 0000000008000002 RSI: 0000200000000340 RDI: 0000000000000005 [ 473.311434][T17393] RBP: 00007fb23c176b50 R08: 0000000000000000 R09: 0000000000000000 [ 473.311457][T17393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.311486][T17393] R13: 00007fb23c366038 R14: 00007fb23c365fa0 R15: 00007ffe8800c008 [ 473.311612][T17393] [ 473.673081][ T29] audit: type=1400 audit(1793550677.507:3371): avc: denied { unmount } for pid=8667 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 473.839587][ T29] audit: type=1326 audit(1793550677.677:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17402 comm="syz.3.3832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589869f559 code=0x7ffc0000 [ 473.840337][ T29] audit: type=1326 audit(1793550677.677:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17402 comm="syz.3.3832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589869f559 code=0x7ffc0000 [ 473.840604][ T29] audit: type=1326 audit(1793550677.677:3374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17402 comm="syz.3.3832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589869f559 code=0x7ffc0000 [ 473.841559][ T29] audit: type=1326 audit(1793550677.677:3375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17402 comm="syz.3.3832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f589869f559 code=0x7ffc0000 [ 473.843290][ T29] audit: type=1326 audit(1793550677.677:3376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17402 comm="syz.3.3832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589869f559 code=0x7ffc0000 [ 473.844060][ T29] audit: type=1326 audit(1793550677.677:3377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17402 comm="syz.3.3832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589869f559 code=0x7ffc0000 [ 473.844360][ T29] audit: type=1326 audit(1793550677.677:3378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17402 comm="syz.3.3832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589869f559 code=0x7ffc0000 [ 473.844640][ T29] audit: type=1326 audit(1793550677.677:3379): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17402 comm="syz.3.3832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f589869f559 code=0x7ffc0000 [ 473.844919][ T29] audit: type=1326 audit(1793550677.677:3380): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17402 comm="syz.3.3832" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f589869f559 code=0x7ffc0000 [ 474.372585][T17417] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3836'. [ 475.041056][T17435] ip_tables: iptables: counters copy to user failed while replacing table [ 475.169273][T17441] loop2: detected capacity change from 0 to 512 [ 475.211361][T17441] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a066c018, mo2=0002] [ 475.211469][T17441] System zones: 1-12 [ 475.216712][T17441] EXT4-fs error (device loop2): ext4_orphan_get:1430: comm syz.2.3844: bad orphan inode 3388997647 [ 475.216750][T17441] loop2: lost filesystem error report for type 5 error -117 [ 475.217899][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 475.217926][ C1] EXT4-fs (loop2): initial error at time 1793550679: ext4_orphan_get:1430 [ 475.217967][ C1] EXT4-fs (loop2): last error at time 1793550679: ext4_orphan_get:1430 [ 475.275304][T17441] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 475.330748][T17437] loop0: detected capacity change from 0 to 2048 [ 475.463953][T17437] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.946190][ T6526] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 475.948455][T10059] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.205044][T17461] loop6: detected capacity change from 0 to 512 [ 476.288670][T17461] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 476.288852][T17461] ext4 filesystem being mounted at /449/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 476.923347][T10537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 477.095577][T17482] syzkaller0: entered promiscuous mode [ 477.095609][T17482] syzkaller0: entered allmulticast mode [ 477.913902][T17509] rxe_eth0 speed is unknown, defaulting to 1000 [ 477.914473][T17514] netlink: 'syz.2.3870': attribute type 12 has an invalid length. [ 477.980740][T17517] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3871'. [ 478.055969][T17518] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 479.211026][ T29] kauditd_printk_skb: 151 callbacks suppressed [ 479.211052][ T29] audit: type=1400 audit(1793550683.047:3532): avc: denied { mount } for pid=17546 comm="syz.0.3882" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 479.779572][ T29] audit: type=1400 audit(1793550683.617:3533): avc: denied { unmount } for pid=6526 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 479.923240][T17551] usb usb7: usbfs: process 17551 (syz.0.3883) did not claim interface 0 before use [ 480.329932][ T4373] rpcbind: server 127.0.0.1 not responding, timed out [ 480.464528][T17560] loop0: detected capacity change from 0 to 164 [ 481.068389][T17568] loop1: detected capacity change from 0 to 256 [ 481.069099][T17568] vfat: Unknown parameter 'uni_xrrors' [ 481.515796][T17584] loop0: detected capacity change from 0 to 512 [ 481.533300][T17584] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 481.561383][T17584] EXT4-fs (loop0): 1 truncate cleaned up [ 481.562186][T17584] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 482.141058][ T6526] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.260118][T17614] syz.2.3907: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0 [ 482.260307][T17614] CPU: 0 UID: 0 PID: 17614 Comm: syz.2.3907 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 482.260425][T17614] Tainted: [W]=WARN [ 482.260435][T17614] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 482.260451][T17614] Call Trace: [ 482.260506][T17614] [ 482.260521][T17614] __dump_stack+0x1d/0x30 [ 482.260628][T17614] dump_stack_lvl+0x95/0xd0 [ 482.260663][T17614] dump_stack+0x15/0x1b [ 482.260745][T17614] warn_alloc+0x146/0x1c0 [ 482.260857][T17614] ? ring_buffer_event_data+0x68/0xa0 [ 482.260909][T17614] __vmalloc_node_range_noprof+0xa3/0x10e0 [ 482.260961][T17614] ? trace_event_buffer_commit+0x174/0x590 [ 482.261000][T17614] ? xskq_create+0x38/0x160 [ 482.261164][T17614] ? trace_event_raw_event_kmalloc+0xb7/0x110 [ 482.261210][T17614] ? xskq_create+0x38/0x160 [ 482.261265][T17614] ? __kmalloc_cache_noprof+0x314/0x3e0 [ 482.261343][T17614] xskq_create+0xea/0x160 [ 482.261371][T17614] ? xsk_init_queue+0x70/0xb0 [ 482.261443][T17614] xsk_init_queue+0x70/0xb0 [ 482.261592][T17614] xsk_setsockopt+0x471/0x640 [ 482.261628][T17614] ? __pfx_xsk_setsockopt+0x10/0x10 [ 482.261693][T17614] __sys_setsockopt+0x184/0x200 [ 482.261864][T17614] __x64_sys_setsockopt+0x64/0x80 [ 482.261988][T17614] x64_sys_call+0x248f/0x2550 [ 482.262119][T17614] do_syscall_64+0x112/0x360 [ 482.262196][T17614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.262263][T17614] RIP: 0033:0x7f482855f559 [ 482.262282][T17614] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 482.262304][T17614] RSP: 002b:00007f4826fb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 482.262375][T17614] RAX: ffffffffffffffda RBX: 00007f48287e5fa0 RCX: 00007f482855f559 [ 482.262398][T17614] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000006 [ 482.262415][T17614] RBP: 00007f48285f6b50 R08: 0000000000000004 R09: 0000000000000000 [ 482.262494][T17614] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 482.262515][T17614] R13: 00007f48287e6038 R14: 00007f48287e5fa0 R15: 00007ffd5899a248 [ 482.262546][T17614] [ 482.287393][T17614] Mem-Info: [ 482.287434][T17614] active_anon:11840 inactive_anon:1995 isolated_anon:0 [ 482.287434][T17614] active_file:16478 inactive_file:16799 isolated_file:0 [ 482.287434][T17614] unevictable:0 dirty:264 writeback:0 [ 482.287434][T17614] slab_reclaimable:3355 slab_unreclaimable:27453 [ 482.287434][T17614] mapped:29570 shmem:561 pagetables:5408 [ 482.287434][T17614] sec_pagetables:0 bounce:0 [ 482.287434][T17614] kernel_misc_reclaimable:0 [ 482.287434][T17614] free:1836559 free_pcp:3812 free_cma:0 [ 482.287636][T17614] Node 0 active_anon:47360kB inactive_anon:7980kB active_file:65912kB inactive_file:67196kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:118280kB dirty:1056kB writeback:0kB shmem:2244kB kernel_stack:5600kB pagetables:21632kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 482.288405][T17614] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 482.303581][T17614] lowmem_reserve[]: 0 2877 7856 7856 [ 482.303808][T17614] Node 0 DMA32 free:2943716kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2946500kB mlocked:0kB bounce:0kB free_pcp:2784kB local_pcp:0kB free_cma:0kB [ 482.313093][T17614] lowmem_reserve[]: 0 0 4978 4978 [ 482.313295][T17614] Node 0 Normal free:4387160kB boost:0kB min:7192kB low:12288kB high:17384kB reserved_highatomic:0kB free_highatomic:0kB active_anon:47360kB inactive_anon:7980kB active_file:65912kB inactive_file:67196kB unevictable:0kB writepending:1056kB zspages:0kB present:5242880kB managed:5098212kB mlocked:0kB bounce:0kB free_pcp:12448kB local_pcp:8784kB free_cma:0kB [ 482.319508][T17614] lowmem_reserve[]: 0 0 0 0 [ 482.319685][T17614] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 482.330660][T17614] Node 0 DMA32: 3*4kB (M) 1*8kB (M) 3*16kB (M) 3*32kB (M) 1*64kB (M) 2*128kB (M) 3*256kB (M) 3*512kB (M) 2*1024kB (M) 1*2048kB (M) 717*4096kB (UM) = 2943716kB [ 482.354007][T17614] Node 0 Normal: 1946*4kB (UME) 1576*8kB (UME) 1010*16kB (UME) 601*32kB (UME) 256*64kB (UME) 135*128kB (UME) 34*256kB (UME) 35*512kB (UME) 29*1024kB (UM) 9*2048kB (UM) 1031*4096kB (UM) = 4387176kB [ 482.384763][T17614] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 482.385739][T17614] 33833 total pagecache pages [ 482.385780][T17614] 5 pages in swap cache [ 482.385813][T17614] Free swap = 124976kB [ 482.385845][T17614] Total swap = 124996kB [ 482.385877][T17614] 2097051 pages RAM [ 482.385910][T17614] 0 pages HighMem/MovableOnly [ 482.385950][T17614] 82033 pages reserved [ 482.837114][T17633] loop2: detected capacity change from 0 to 512 [ 482.868768][T17633] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 482.868789][T17633] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 482.868871][T17633] System zones: 0-1, 15-15, 18-18, 34-34 [ 482.869158][T17633] EXT4-fs (loop2): orphan cleanup on readonly fs [ 482.869174][T17633] EXT4-fs error (device loop2): ext4_quota_enable:7307: comm syz.2.3915: Bad quota inum: 768, type: 0 [ 482.869197][T17633] loop2: lost filesystem error report for type 5 error -117 [ 482.871610][T17633] EXT4-fs warning (device loop2): ext4_enable_quotas:7355: Failed to enable quota tracking (type=0, err=-117, ino=768). Please run e2fsck to fix. [ 482.871641][T17633] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 482.877203][T17633] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 483.086935][T10059] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.236782][T17652] loop6: detected capacity change from 0 to 512 [ 483.251255][T17652] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 483.269567][T17652] EXT4-fs (loop6): 1 truncate cleaned up [ 483.274625][T17652] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 483.322297][T17652] EXT4-fs error (device loop6): ext4_free_branches:1040: inode #13: comm syz.6.3921: invalid indirect mapped block 4294901760 (level 0) [ 483.323389][T17652] EXT4-fs error (device loop6): ext4_free_branches:1040: inode #13: comm syz.6.3921: invalid indirect mapped block 2185560079 (level 0) [ 483.324644][T17652] EXT4-fs error (device loop6): ext4_free_branches:1040: inode #13: comm syz.6.3921: invalid indirect mapped block 65535 (level 2) [ 483.399215][T17652] EXT4-fs error (device loop6): __ext4_get_inode_loc:5733: comm syz.6.3921: Invalid inode table block 0 in block_group 0 [ 483.402434][T17652] EXT4-fs error (device loop6) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 483.405970][T17652] EXT4-fs error (device loop6): ext4_splice_branch:479: inode #13: comm syz.6.3921: mark_inode_dirty error [ 483.407103][T17652] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.3921: bg 0: block 60: invalid block bitmap [ 483.407694][T17652] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 483.420654][T17652] EXT4-fs error (device loop6): __ext4_get_inode_loc:5733: comm syz.6.3921: Invalid inode table block 0 in block_group 0 [ 483.435524][T17652] EXT4-fs error (device loop6) in ext4_reserve_inode_write:7459: Corrupt filesystem [ 483.555337][T10537] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 483.665046][T17659] loop6: detected capacity change from 0 to 256 [ 483.677794][T17659] vfat: Unknown parameter 'uni_xrrors' [ 485.047640][T17674] rxe_eth0 speed is unknown, defaulting to 1000 [ 485.139203][T17678] rxe_eth0 speed is unknown, defaulting to 1000 [ 485.381063][T17681] loop6: detected capacity change from 0 to 256 [ 485.395323][T17681] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 485.423061][T17681] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 485.445427][T17683] netlink: 'syz.1.3932': attribute type 1 has an invalid length. [ 485.445449][T17683] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3932'. [ 485.707296][T17697] tipc: New replicast peer: 172.20.20.187 [ 485.719725][T17697] tipc: Enabled bearer , priority 10 [ 485.973601][T17708] loop6: detected capacity change from 0 to 164 [ 486.053318][T17708] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet. [ 486.447148][ T29] audit: type=1400 audit(1793550690.277:3534): avc: denied { getopt } for pid=17727 comm="syz.3.3954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 486.787740][T17740] bond6: entered promiscuous mode [ 486.818139][T13265] tipc: Node number set to 3661598194 [ 488.579819][T17766] loop6: detected capacity change from 0 to 512 [ 488.611973][T17766] EXT4-fs: Ignoring removed nomblk_io_submit option [ 488.627098][T17766] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 488.646702][T17766] EXT4-fs (loop6): 1 truncate cleaned up [ 488.647432][T17766] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.724915][T17766] FAULT_INJECTION: forcing a failure. [ 488.724915][T17766] name failslab, interval 1, probability 0, space 0, times 0 [ 488.724973][T17766] CPU: 1 UID: 0 PID: 17766 Comm: syz.6.3968 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 488.725055][T17766] Tainted: [W]=WARN [ 488.725071][T17766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 488.725093][T17766] Call Trace: [ 488.725106][T17766] [ 488.725197][T17766] __dump_stack+0x1d/0x30 [ 488.725234][T17766] dump_stack_lvl+0x95/0xd0 [ 488.725267][T17766] dump_stack+0x15/0x1b [ 488.725332][T17766] should_fail_ex+0x259/0x270 [ 488.725417][T17766] ? ext4_mb_new_blocks+0x2e0/0x1fa0 [ 488.725481][T17766] should_failslab+0x8c/0xb0 [ 488.725555][T17766] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 488.725708][T17766] ? ext4_mb_new_blocks+0x2e0/0x1fa0 [ 488.725744][T17766] ext4_mb_new_blocks+0x2e0/0x1fa0 [ 488.725856][T17766] ? trace_event_raw_event_ext4__map_blocks_enter+0x150/0x1d0 [ 488.725916][T17766] ? ext4_get_branch+0x306/0x380 [ 488.726015][T17766] ext4_ind_map_blocks+0xc2e/0x15e0 [ 488.726146][T17766] ext4_map_create_blocks+0x8a/0x390 [ 488.726192][T17766] ext4_map_blocks+0x8a9/0xff0 [ 488.726338][T17766] ext4_convert_inline_data_nolock+0x195/0x5d0 [ 488.726380][T17766] ext4_convert_inline_data+0x2bd/0x360 [ 488.726454][T17766] ext4_fallocate+0x163/0x320 [ 488.726485][T17766] vfs_fallocate+0x3ac/0x400 [ 488.726570][T17766] __x64_sys_fallocate+0x7a/0xd0 [ 488.726674][T17766] x64_sys_call+0x1e1d/0x2550 [ 488.726707][T17766] do_syscall_64+0x112/0x360 [ 488.726822][T17766] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 488.726857][T17766] RIP: 0033:0x7fb23c0df559 [ 488.726882][T17766] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 488.726911][T17766] RSP: 002b:00007fb23ab37028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 488.727022][T17766] RAX: ffffffffffffffda RBX: 00007fb23c365fa0 RCX: 00007fb23c0df559 [ 488.727045][T17766] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 488.727062][T17766] RBP: 00007fb23c176b50 R08: 0000000000000000 R09: 0000000000000000 [ 488.727083][T17766] R10: 000000000008ffff R11: 0000000000000246 R12: 0000000000000000 [ 488.727104][T17766] R13: 00007fb23c366038 R14: 00007fb23c365fa0 R15: 00007ffe8800c008 [ 488.727133][T17766] [ 489.156752][T10537] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 489.157598][T10537] EXT4-fs error (device loop6): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 489.265712][T17775] FAULT_INJECTION: forcing a failure. [ 489.265712][T17775] name failslab, interval 1, probability 0, space 0, times 0 [ 489.265758][T17775] CPU: 1 UID: 0 PID: 17775 Comm: syz.0.3972 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 489.265819][T17775] Tainted: [W]=WARN [ 489.265829][T17775] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 489.265896][T17775] Call Trace: [ 489.265916][T17775] [ 489.265928][T17775] __dump_stack+0x1d/0x30 [ 489.265962][T17775] dump_stack_lvl+0x95/0xd0 [ 489.265991][T17775] dump_stack+0x15/0x1b [ 489.266092][T17775] should_fail_ex+0x259/0x270 [ 489.266137][T17775] ? start_sync_thread+0x4e2/0x1790 [ 489.266343][T17775] should_failslab+0x8c/0xb0 [ 489.266379][T17775] __kmalloc_noprof+0xb6/0x4b0 [ 489.266428][T17775] ? full_name_hash+0x92/0xe0 [ 489.266520][T17775] ? start_sync_thread+0x4e2/0x1790 [ 489.266594][T17775] start_sync_thread+0x4e2/0x1790 [ 489.266626][T17775] ? cred_has_capability+0x224/0x2a0 [ 489.266686][T17775] ? selinux_capable+0x31/0x40 [ 489.266717][T17775] ? should_fail_ex+0xdb/0x270 [ 489.266842][T17775] ? sized_strscpy+0x121/0x1a0 [ 489.266953][T17775] do_ip_vs_set_ctl+0x313/0xab0 [ 489.267029][T17775] nf_setsockopt+0x199/0x1b0 [ 489.267152][T17775] ip_setsockopt+0x102/0x110 [ 489.267211][T17775] tcp_setsockopt+0x98/0xb0 [ 489.267314][T17775] sock_common_setsockopt+0x69/0x80 [ 489.267391][T17775] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 489.267449][T17775] __sys_setsockopt+0x184/0x200 [ 489.267543][T17775] __x64_sys_setsockopt+0x64/0x80 [ 489.267594][T17775] x64_sys_call+0x248f/0x2550 [ 489.267632][T17775] do_syscall_64+0x112/0x360 [ 489.267707][T17775] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.267741][T17775] RIP: 0033:0x7fbd9948f559 [ 489.267782][T17775] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 489.267808][T17775] RSP: 002b:00007fbd97ee7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 489.267905][T17775] RAX: ffffffffffffffda RBX: 00007fbd99715fa0 RCX: 00007fbd9948f559 [ 489.267928][T17775] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000004 [ 489.267949][T17775] RBP: 00007fbd99526b50 R08: 0000000000000018 R09: 0000000000000000 [ 489.267970][T17775] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 489.267991][T17775] R13: 00007fbd99716038 R14: 00007fbd99715fa0 R15: 00007ffd2cfbf948 [ 489.268059][T17775] [ 489.549372][T11330] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.552770][ T4373] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.610177][ T4373] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.694465][ T4373] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.700165][T17782] loop0: detected capacity change from 0 to 512 [ 489.786330][ T4373] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 489.805043][T17782] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 489.816810][T17782] ext4 filesystem being mounted at /651/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 489.884555][T17782] batman_adv: batadv0: Adding interface: veth0 [ 489.884614][T17782] batman_adv: batadv0: The MTU of interface veth0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 489.884658][T17782] batman_adv: batadv0: Interface activated: veth0 [ 489.967641][T17782] batman_adv: batadv0: Removing interface: gretap1 [ 489.987717][T17782] batman_adv: batadv0: Removing interface: gretap3 [ 490.009312][T17782] batman_adv: batadv0: Interface deactivated: veth0 [ 490.009347][T17782] batman_adv: batadv0: Removing interface: veth0 [ 490.278528][ T4373] batman_adv: batadv0: Interface deactivated: gretap1 [ 490.322976][ T6526] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 490.487422][ T4373] batman_adv: batadv0: Removing interface: gretap1 [ 490.509884][ T4373] bond6 (unregistering): (slave gretap2): Releasing backup interface [ 490.544490][ T4373] bond3 (unregistering): (slave geneve2): Releasing active interface [ 490.580651][T17809] loop1: detected capacity change from 0 to 512 [ 490.624554][ T4373] bond0 (unregistering): Released all slaves [ 490.636246][T17809] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 490.636437][T17809] ext4 filesystem being mounted at /539/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 490.672174][ T4373] bond1 (unregistering): Released all slaves [ 490.676663][ T4373] bond2 (unregistering): Released all slaves [ 490.706414][ T4373] bond3 (unregistering): Released all slaves [ 490.732121][ T4373] bond4 (unregistering): (slave veth3): Releasing backup interface [ 490.755570][ T4373] bond4 (unregistering): Released all slaves [ 490.767649][ T4373] bond5 (unregistering): Released all slaves [ 490.782009][ T4373] bond6 (unregistering): (slave bond7): Releasing backup interface [ 490.802143][ T4373] bond6 (unregistering): Released all slaves [ 490.813979][ T4373] bond7 (unregistering): Released all slaves [ 490.824609][ T4373] bond8 (unregistering): Released all slaves [ 490.927469][T17803] rxe_eth0 speed is unknown, defaulting to 1000 [ 490.935889][ T4373] tipc: Disabling bearer [ 490.936006][ T4373] tipc: Left network mode [ 491.009003][ T8667] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.264421][ T29] audit: type=1400 audit(1793550695.097:3535): avc: denied { write } for pid=17819 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.391507][T17844] loop1: detected capacity change from 0 to 512 [ 491.402999][T17844] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 491.403046][T17844] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 491.442833][ T29] audit: type=1400 audit(1793550695.277:3536): avc: denied { write } for pid=17845 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 491.446188][T17844] EXT4-fs (loop1): 1 truncate cleaned up [ 491.499266][T17844] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 491.586886][ T4373] hsr_slave_0: left promiscuous mode [ 491.599567][ T4373] hsr_slave_1: left promiscuous mode [ 491.638948][ T8667] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.751421][T17857] loop2: detected capacity change from 0 to 164 [ 491.753942][T17857] iso9660: Bad value for 'check' [ 491.965920][ T29] audit: type=1400 audit(1793550695.797:3537): avc: denied { read } for pid=17864 comm="syz.2.3999" name="kcore" dev="proc" ino=4026532042 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 491.965973][ T29] audit: type=1400 audit(1793550695.797:3538): avc: denied { open } for pid=17864 comm="syz.2.3999" path="/443/proc_mnt/kcore" dev="proc" ino=4026532042 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1 [ 492.126967][ T3020] 8021q: adding VLAN 0 to HW filter on device eth17 [ 492.127794][T17856] FAULT_INJECTION: forcing a failure. [ 492.127794][T17856] name failslab, interval 1, probability 0, space 0, times 0 [ 492.149668][T17856] CPU: 0 UID: 0 PID: 17856 Comm: syz.1.3995 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 492.149719][T17856] Tainted: [W]=WARN [ 492.149745][T17856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 492.149767][T17856] Call Trace: [ 492.149780][T17856] [ 492.149795][T17856] __dump_stack+0x1d/0x30 [ 492.149901][T17856] dump_stack_lvl+0x95/0xd0 [ 492.149926][T17856] dump_stack+0x15/0x1b [ 492.150004][T17856] should_fail_ex+0x259/0x270 [ 492.150054][T17856] ? security_sk_alloc+0x52/0x120 [ 492.150115][T17856] should_failslab+0x8c/0xb0 [ 492.150157][T17856] __kmalloc_noprof+0xb6/0x4b0 [ 492.150251][T17856] ? security_sk_alloc+0x52/0x120 [ 492.150371][T17856] ? kmem_cache_alloc_noprof+0x30d/0x3d0 [ 492.150418][T17856] security_sk_alloc+0x52/0x120 [ 492.150464][T17856] sk_prot_alloc+0xc2/0x180 [ 492.150609][T17856] sk_alloc+0x34/0x3e0 [ 492.150697][T17856] inet_create+0x3cb/0x790 [ 492.150789][T17856] __sock_create+0x2e5/0x580 [ 492.150946][T17856] sock_create_kern+0x38/0x50 [ 492.150976][T17856] start_sync_thread+0x899/0x1790 [ 492.151014][T17856] ? __pfx_sync_thread_master+0x10/0x10 [ 492.151110][T17856] ? should_fail_ex+0xdb/0x270 [ 492.151189][T17856] do_ip_vs_set_ctl+0x313/0xab0 [ 492.151233][T17856] nf_setsockopt+0x199/0x1b0 [ 492.151343][T17856] ip_setsockopt+0x102/0x110 [ 492.151384][T17856] tcp_setsockopt+0x98/0xb0 [ 492.151428][T17856] sock_common_setsockopt+0x69/0x80 [ 492.151465][T17856] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 492.151498][T17856] __sys_setsockopt+0x184/0x200 [ 492.151552][T17856] __x64_sys_setsockopt+0x64/0x80 [ 492.151604][T17856] x64_sys_call+0x248f/0x2550 [ 492.151646][T17856] do_syscall_64+0x112/0x360 [ 492.151776][T17856] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.151882][T17856] RIP: 0033:0x7f86782af559 [ 492.151911][T17856] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 492.151936][T17856] RSP: 002b:00007f8676d07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 492.151971][T17856] RAX: ffffffffffffffda RBX: 00007f8678535fa0 RCX: 00007f86782af559 [ 492.152035][T17856] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000004 [ 492.152051][T17856] RBP: 00007f8678346b50 R08: 0000000000000018 R09: 0000000000000000 [ 492.152138][T17856] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 492.152207][T17856] R13: 00007f8678536038 R14: 00007f8678535fa0 R15: 00007ffeec953208 [ 492.152240][T17856] [ 492.154966][T17856] IPVS: Error during creation of socket; terminating [ 492.163942][T17795] rxe_eth0 speed is unknown, defaulting to 1000 [ 493.107648][ T29] audit: type=1400 audit(1793550696.937:3539): avc: denied { write } for pid=17870 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 493.207945][T17795] bridge0: port 1(bridge_slave_0) entered blocking state [ 493.208047][T17795] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.208604][T17795] bridge_slave_0: entered allmulticast mode [ 493.218898][T17795] bridge_slave_0: entered promiscuous mode [ 493.242645][T17795] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.242772][T17795] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.246650][T17795] bridge_slave_1: entered allmulticast mode [ 493.257789][T17795] bridge_slave_1: entered promiscuous mode [ 493.320871][T17894] loop2: detected capacity change from 0 to 512 [ 493.343251][ T29] audit: type=1400 audit(1793550697.177:3540): avc: denied { write } for pid=17895 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 493.416252][T17894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 493.416377][T17894] ext4 filesystem being mounted at /446/qY3aK supports timestamps until 2038-01-19 (0x7fffffff) [ 493.526439][T17795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.578619][T17795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.587115][ T3020] 8021q: adding VLAN 0 to HW filter on device eth18 [ 493.654842][T17795] team0: Port device team_slave_0 added [ 493.669966][T17795] team0: Port device team_slave_1 added [ 493.711918][T17795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.711937][T17795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.711985][T17795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.717507][T17795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 493.717530][T17795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 493.717569][T17795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.841396][T17795] hsr_slave_0: entered promiscuous mode [ 493.843393][T17795] hsr_slave_1: entered promiscuous mode [ 493.844610][T17795] debugfs: 'hsr0' already exists in 'hsr' [ 493.844630][T17795] Cannot create hsr debugfs directory [ 493.974279][T10059] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 494.289093][T17910] FAULT_INJECTION: forcing a failure. [ 494.289093][T17910] name failslab, interval 1, probability 0, space 0, times 0 [ 494.289150][T17910] CPU: 1 UID: 0 PID: 17910 Comm: syz.1.4006 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 494.289198][T17910] Tainted: [W]=WARN [ 494.289214][T17910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 494.289236][T17910] Call Trace: [ 494.289248][T17910] [ 494.289263][T17910] __dump_stack+0x1d/0x30 [ 494.289341][T17910] dump_stack_lvl+0x95/0xd0 [ 494.289376][T17910] dump_stack+0x15/0x1b [ 494.289410][T17910] should_fail_ex+0x259/0x270 [ 494.289454][T17910] should_failslab+0x8c/0xb0 [ 494.289562][T17910] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 494.289610][T17910] ? __d_alloc+0x34/0x320 [ 494.289650][T17910] ? __d_alloc+0x34/0x320 [ 494.289692][T17910] __d_alloc+0x34/0x320 [ 494.289809][T17910] ? d_alloc_pseudo+0x13/0x80 [ 494.289932][T17910] d_alloc_pseudo+0x1e/0x80 [ 494.289973][T17910] alloc_path_pseudo+0xa4/0x140 [ 494.290075][T17910] alloc_file_pseudo+0x55/0x120 [ 494.290185][T17910] anon_inode_getfile+0xa0/0x120 [ 494.290257][T17910] do_epoll_create+0x1c1/0x290 [ 494.290291][T17910] __x64_sys_epoll_create+0x35/0x60 [ 494.290356][T17910] x64_sys_call+0x1a01/0x2550 [ 494.290523][T17910] do_syscall_64+0x112/0x360 [ 494.290576][T17910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.290685][T17910] RIP: 0033:0x7f86782af559 [ 494.290768][T17910] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 494.290790][T17910] RSP: 002b:00007f8676d07028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d5 [ 494.290838][T17910] RAX: ffffffffffffffda RBX: 00007f8678535fa0 RCX: 00007f86782af559 [ 494.290862][T17910] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000200004 [ 494.290889][T17910] RBP: 00007f8678346b50 R08: 0000000000000000 R09: 0000000000000000 [ 494.290923][T17910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.290938][T17910] R13: 00007f8678536038 R14: 00007f8678535fa0 R15: 00007ffeec953208 [ 494.290969][T17910] [ 494.635101][ T29] audit: type=1400 audit(1793550698.467:3541): avc: denied { write } for pid=17907 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 494.734137][ T29] audit: type=1400 audit(1793550698.567:3542): avc: denied { write } for pid=17922 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 494.800068][ T3020] 8021q: adding VLAN 0 to HW filter on device eth19 [ 494.954297][T17926] geneve2: entered promiscuous mode [ 495.002332][T17929] rxe_eth0 speed is unknown, defaulting to 1000 [ 495.082075][T17932] rxe_eth0 speed is unknown, defaulting to 1000 [ 495.322726][T17938] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4010'. [ 495.425984][ T29] audit: type=1400 audit(1793550699.257:3543): avc: denied { write } for pid=17931 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.521676][T17795] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 495.544652][T17952] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=17952 comm=syz.3.4013 [ 495.644176][ T29] audit: type=1400 audit(1793550699.477:3544): avc: denied { write } for pid=17955 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 495.787609][T17795] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 496.595934][ T3020] 8021q: adding VLAN 0 to HW filter on device eth20 [ 496.607477][T17795] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 496.667431][T17795] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 496.689195][T17795] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 496.795608][T17795] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 496.806775][T17795] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 496.892368][T17795] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 497.282416][T17993] syz.0.4022(17993): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 497.578157][T17795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.607591][T18006] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4027'. [ 497.678250][T17795] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.730026][ T5294] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.730241][ T5294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.756611][T18013] ================================================================== [ 497.756650][T18013] BUG: KCSAN: data-race in __set_task_comm / strlen [ 497.756684][T18013] [ 497.756693][T18013] write to 0xffff888105a22a58 of 13 bytes by task 18015 on cpu 0: [ 497.756713][T18013] __set_task_comm+0x78/0x180 [ 497.756742][T18013] io_wq_worker+0x140/0xc80 [ 497.756786][T18013] ret_from_fork+0x146/0x330 [ 497.756852][T18013] ret_from_fork_asm+0x1a/0x30 [ 497.756882][T18013] [ 497.756890][T18013] read to 0xffff888105a22a58 of 1 bytes by task 18013 on cpu 1: [ 497.756910][T18013] strlen+0x19/0x40 [ 497.756928][T18013] trace_event_raw_event_sched_stat_runtime+0x5a/0x150 [ 497.756980][T18013] update_se+0x14f/0x3b0 [ 497.757012][T18013] update_curr+0x1e/0x210 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 497.757035][T18013] enqueue_task_fair+0x77/0x850 [ 497.757056][T18013] ttwu_do_activate+0xa7/0x230 [ 497.757086][T18013] try_to_wake_up+0x3f1/0x660 [ 497.757115][T18013] __queue_work+0x7fb/0xd10 [ 497.757149][T18013] queue_work_on+0xa9/0x140 [ 497.757174][T18013] io_ring_ctx_wait_and_kill+0x18d/0x1d0 [ 497.757209][T18013] io_uring_release+0x2c/0x40 [ 497.757240][T18013] __fput+0x286/0x610 [ 497.757265][T18013] fput_close_sync+0xad/0x190 [ 497.757292][T18013] filp_close_sync+0x27/0x40 [ 497.757318][T18013] __se_sys_close_range+0x915/0xa00 [ 497.757345][T18013] __x64_sys_close_range+0x43/0x50 [ 497.757371][T18013] x64_sys_call+0x2198/0x2550 [ 497.757400][T18013] do_syscall_64+0x112/0x360 [ 497.757432][T18013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.757458][T18013] [ 497.757464][T18013] value changed: 0x73 -> 0x69 [ 497.757478][T18013] [ 497.757484][T18013] Reported by Kernel Concurrency Sanitizer on: [ 497.757507][T18013] CPU: 1 UID: 0 PID: 18013 Comm: syz.3.4030 Tainted: G W syzkaller #0 PREEMPT(lazy) [ 497.757542][T18013] Tainted: [W]=WARN [ 497.757552][T18013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 497.757568][T18013] ================================================================== [ 497.844356][ T29] audit: type=1400 audit(1793550957.660:3545): avc: denied { write } for pid=3284 comm="syz-executor" path="pipe:[2701]" dev="pipefs" ino=2701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 497.997441][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.997479][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.061824][ T29] audit: type=1400 audit(1793550957.900:3546): avc: denied { write } for pid=17991 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.135349][ T29] audit: type=1400 audit(1793550957.970:3547): avc: denied { write } for pid=18022 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.422501][ T29] audit: type=1400 audit(1793550958.260:3548): avc: denied { write } for pid=18025 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.522138][ T6526] syz_tun (unregistering): left allmulticast mode [ 498.621947][ T29] audit: type=1400 audit(1793550958.460:3549): avc: denied { write } for pid=18040 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.892849][ T29] audit: type=1400 audit(1793550958.730:3550): avc: denied { write } for pid=18042 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.007595][ T29] audit: type=1400 audit(1793550958.840:3551): avc: denied { write } for pid=18053 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.080130][ T4376] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.080199][ T4376] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.166116][ T4376] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.166166][ T4376] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.243722][ T4376] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.243773][ T4376] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.295862][ T29] audit: type=1400 audit(1793550959.130:3552): avc: denied { write } for pid=18056 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.330696][ T4376] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 499.330776][ T4376] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.381398][ T29] audit: type=1400 audit(1793550959.220:3553): avc: denied { write } for pid=18067 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.589172][ T29] audit: type=1400 audit(1793550959.430:3554): avc: denied { write } for pid=18069 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.904030][ T4376] bond1 (unregistering): (slave bridge0): Releasing backup interface [ 499.904084][ T4376] bridge0 (unregistering): left promiscuous mode [ 499.944313][ T4376] bond4 (unregistering): (slave bridge1): Releasing backup interface [ 499.944355][ T4376] bridge1 (unregistering): left promiscuous mode [ 499.944438][ T4376] bridge1 (unregistering): left allmulticast mode [ 499.989487][ T4376] bond0 (unregistering): Released all slaves [ 499.996897][ T4376] bond1 (unregistering): Released all slaves [ 500.011495][ T4376] bond2 (unregistering): Released all slaves [ 500.015803][ T4376] bond3 (unregistering): Released all slaves [ 500.041785][ T4376] bond4 (unregistering): Released all slaves [ 500.046160][ T4376] bond5 (unregistering): Released all slaves [ 500.057023][ T4376] bond6 (unregistering): Released all slaves [ 500.140907][ T4376] tipc: Disabling bearer [ 500.140985][ T4376] tipc: Left network mode [ 500.251579][ T4376] hsr_slave_1: left promiscuous mode [ 500.296604][ T4376] veth1_macvtap: left promiscuous mode [ 500.296655][ T4376] veth0_macvtap: left promiscuous mode [ 500.686018][ T4376] IPVS: stop unused estimator thread 0... [ 501.163020][ T4376] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.163082][ T4376] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.202202][ T4376] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.202274][ T4376] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.252616][ T4376] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.252664][ T4376] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.293052][ T4376] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.293116][ T4376] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.362912][ T4376] bridge_slave_1: left allmulticast mode [ 501.363087][ T4376] bridge_slave_1: left promiscuous mode [ 501.363206][ T4376] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.367006][ T4376] bridge_slave_0: left allmulticast mode [ 501.367029][ T4376] bridge_slave_0: left promiscuous mode [ 501.367198][ T4376] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.410804][ T4376] bridge_slave_1: left allmulticast mode [ 501.410836][ T4376] bridge_slave_1: left promiscuous mode [ 501.411006][ T4376] bridge0: port 2(bridge_slave_1) entered disabled state [ 501.413375][ T4376] bridge_slave_0: left allmulticast mode [ 501.413420][ T4376] bridge_slave_0: left promiscuous mode [ 501.413642][ T4376] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.635656][ T4376] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 501.651833][ T4376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.656239][ T4376] bond0 (unregistering): Released all slaves [ 501.709531][ T4376] bond6 (unregistering): (slave geneve3): Releasing active interface [ 501.717055][ T4376] bond4 (unregistering): (slave geneve2): Releasing active interface [ 501.774667][ T4376] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 501.779265][ T4376] bond0 (unregistering): Released all slaves [ 501.793661][ T4376] bond1 (unregistering): (slave bond2): Releasing backup interface [ 501.796004][ T4376] bond1 (unregistering): Released all slaves [ 501.813077][ T4376] bond2 (unregistering): Released all slaves [ 501.823803][ T4376] bond3 (unregistering): (slave veth5): Releasing backup interface [ 501.836327][ T4376] bond3 (unregistering): Released all slaves [ 501.852599][ T4376] bond4 (unregistering): Released all slaves [ 501.857476][ T4376] bond5 (unregistering): (slave lo): Releasing backup interface [ 501.861142][ T4376] bond5 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 501.879158][ T4376] bond5 (unregistering): Released all slaves [ 501.893772][ T4376] bond6 (unregistering): Released all slaves [ 501.954225][ T4376] tipc: Disabling bearer [ 501.954695][ T4376] tipc: Left network mode [ 502.085296][ T4376] hsr_slave_0: left promiscuous mode [ 502.086736][ T4376] hsr_slave_1: left promiscuous mode [ 502.092443][ T4376] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.101971][ T4376] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.123427][ T4376] hsr_slave_0: left promiscuous mode [ 502.124792][ T4376] hsr_slave_1: left promiscuous mode [ 502.165208][ T4376] veth1_macvtap: left promiscuous mode [ 502.165301][ T4376] veth0_macvtap: left promiscuous mode [ 502.165390][ T4376] veth1_vlan: left promiscuous mode [ 502.165490][ T4376] veth0_vlan: left promiscuous mode [ 502.331813][ T4376] team0 (unregistering): Port device team_slave_1 removed [ 502.340873][ T4376] team0 (unregistering): Port device team_slave_0 removed [ 502.461923][ T4376] team0 (unregistering): Port device team_slave_1 removed [ 502.470052][ T4376] team0 (unregistering): Port device team_slave_0 removed [ 502.523916][ T3020] 8021q: adding VLAN 0 to HW filter on device eth9 [ 502.773580][ T3020] 8021q: adding VLAN 0 to HW filter on device eth10 [ 502.942569][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 502.942588][ T29] audit: type=1400 audit(1793550962.780:3574): avc: denied { write } for pid=18205 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.001130][ T29] audit: type=1400 audit(1793550962.840:3575): avc: denied { write } for pid=18216 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.045077][ T3020] 8021q: adding VLAN 0 to HW filter on device eth11 [ 503.202939][ T29] audit: type=1400 audit(1793550963.040:3576): avc: denied { write } for pid=18219 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.259344][ T29] audit: type=1400 audit(1793550963.100:3577): avc: denied { write } for pid=18230 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.302097][ T3020] 8021q: adding VLAN 0 to HW filter on device eth12 [ 503.460273][ T29] audit: type=1400 audit(1793550963.300:3578): avc: denied { write } for pid=18233 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.514663][ T29] audit: type=1400 audit(1793550963.350:3579): avc: denied { write } for pid=18244 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.563086][ T3020] 8021q: adding VLAN 0 to HW filter on device eth21 [ 503.720433][ T29] audit: type=1400 audit(1793550963.560:3580): avc: denied { write } for pid=18247 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.773971][ T29] audit: type=1400 audit(1793550963.610:3581): avc: denied { write } for pid=18258 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.823861][ T3020] 8021q: adding VLAN 0 to HW filter on device eth22 [ 503.985975][ T29] audit: type=1400 audit(1793550963.820:3582): avc: denied { write } for pid=18261 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 504.039528][ T29] audit: type=1400 audit(1793550963.880:3583): avc: denied { write } for pid=18272 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 504.083728][ T3020] 8021q: adding VLAN 0 to HW filter on device eth23 [ 504.313378][ T3020] 8021q: adding VLAN 0 to HW filter on device eth24 [ 504.541491][ T3020] 8021q: adding VLAN 0 to HW filter on device eth25 [ 504.766235][ T3020] 8021q: adding VLAN 0 to HW filter on device eth26 [ 504.990810][ T3020] 8021q: adding VLAN 0 to HW filter on device eth27 [ 505.215163][ T3020] 8021q: adding VLAN 0 to HW filter on device eth28