last executing test programs: 1m58.207768371s ago: executing program 3 (id=70): capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x7, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0xfffffffb}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1200}, {0x3, 0x3, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0x41}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {0x7, 0x1, 0xb, 0x4, 0xa, 0x20}, {}, {}, {0x18, 0x8, 0x2, 0x0, r0}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f00000002c0)='GPL\x00', 0x6, 0x0, 0x0, 0x40f00, 0x46, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x2) 1m58.055624128s ago: executing program 3 (id=73): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x4, @perf_bp={0x0, 0x1}, 0x10fec8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x5, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) bind$bt_hci(r0, 0x0, 0x0) getitimer(0x1, &(0x7f00000003c0)) 1m57.987376691s ago: executing program 3 (id=76): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000180)=ANY=[], 0x3a) 1m57.862958787s ago: executing program 3 (id=79): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x214802, &(0x7f0000000980)={[{@nojournal_checksum}, {@nombcache}, {@barrier}, {@norecovery}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@nodelalloc}, {@usrquota}, {@noauto_da_alloc}, {@bh}, {@init_itable}]}, 0xff, 0x551, &(0x7f0000000cc0)="$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") open(&(0x7f0000000040)='./bus\x00', 0x400141042, 0x2a) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x14, 0xd, "ef359f413bb9386ff7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e7376b7a5ff537ed73ac58818d78c660e677df8dc905b90242b7c528a076d2f6a00400", "036c5bc6780820d1cbf7966d61fdcf335263bd9b0abdc2542ded71038259ca171ce1a311ef545032d71e14ef3dc177e9b48b001d00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) 1m57.686601216s ago: executing program 3 (id=82): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000540)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000200)={r2, @in={{0x2, 0x4e24, @broadcast}}, [0x2, 0x0, 0x33d4, 0x4, 0x7fff, 0x9, 0x0, 0x2, 0xe43, 0x9, 0x400, 0x4, 0x5b, 0x9]}, &(0x7f0000000300)=0x100) 1m57.384087781s ago: executing program 3 (id=86): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4805}, 0x4) 1m57.353973642s ago: executing program 32 (id=86): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x3}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000001c0)={0x8000042, 0x3}, 0x10) sendmsg$tipc(r0, &(0x7f00000000c0)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4805}, 0x4) 1m21.814268703s ago: executing program 1 (id=947): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r0, &(0x7f0000000000)='7', 0x1) unshare(0x6e040080) 1m21.6652243s ago: executing program 1 (id=959): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc55a, 0x1, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) add_key(&(0x7f0000000040)='ceph\x00', 0x0, &(0x7f0000001100)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e6de20661afc8c0a300d06092a864886f70d01010b0543f5c2052855080030343132303006035504030c294365727469666963617465207665726966", 0x5a, 0xfffffffffffffffe) socket$inet(0x2, 0x3, 0x8d) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000a00)='vers\x00', &(0x7f0000000b00)='4.0\x00', 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000200)}], 0x1, 0x6) 1m21.502798098s ago: executing program 1 (id=952): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000140), 0x10) sendmsg$can_bcm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000000000", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) read(r0, &(0x7f00000028c0)=""/4080, 0xff0) 1m21.45559987s ago: executing program 1 (id=954): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x200088e, &(0x7f0000000140)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@resuid}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@init_itable}, {@quota}, {@nogrpid}]}, 0x3, 0x448, &(0x7f0000000780)="$eJzs279vG1UcAPDv2UlKf5FQlR/9AQQKoghImrSUDixFIDGAhARDGUOSVqVuA02QaFVBQKiMqBITC2LnL2CCBQETEivsqFKEsrQwGZ19lziO7capE6fx5yOd+57vue/79d2z392LA+hZw+lDErEnIv6MiMFqdWWD4eo/txevTf67eG0yiXL57X+SSrtbi9cm86b563bnlb6IwhdJHGrQ7+yVqxcmSqXpy1l9dO7iB6OzV66+cP7ixLnpc9OXxk+dOnF87KWT4y92JM80r1sHP5k5fOD1d2+8OXnmxnu/fp/k+dfl0SHDrXY+XS53uLvu2ltTTvq6GAhtKVaHafRXxv9gFGP54A3Ga593NThgQ5XL5fJDzXfPl4FtLIluRwB0R/5Fn17/5tsmTT22hIXT1QugNO/b2Vbd0xeFrE1/3fVtJw1HxJn5/75Nt9iY+xAAACv8mM5/nm80/ytE7X2h+7M1lKGIeCAi9kXEyYjYHxEPRlTaPhwRj7TZf/0iyer5T+HmuhJbo4XTH8bL2drWyvlfPvuLoWJW21vJvz85e740fSx7T45G/460Ptaij59e/eOrZvtq53/plvafzwWzOG727Vj5mqmJuYm7ybnWwmcRB/sa5Z8srQQkEXEgIg6us4/zxTjcbN+d82+hA+tM5e8inqke//moyz+XtF6fHL0vStPHRvOzYrXffr/+VrP+7yr/DkiP/66G5/9S/kNJ7XrtbDv/+zfPpo/X//qy6TXNes//geSd5REaER9PzM1dHosYSN6oBl37/Hhdu/Hl9mn+R480Hv/7YvmdOBRROYkfjYjHIuLxLPYnIuLJiDjS4l345ZWn3l9//hsrzX+qreO/XBiI+mcaF4oXfv5hRadD7eSfHv8TldLR7Jm1fP6tJa52z2YAAAC4VxUiYk8khZGlcqEwMlL9G/79satQmpmde+7szEeXpqq/ERiK/kJ+p2uw5n7oWHZZn9fH6+rHs/vGXxd3VuojkzOlqW4nDz1ud5Pxn/q72O3ogA23eh3NyIde4fea0LuMf+hdxj/0rgbjf2c34gA2X6Pv/0+7EAew+erGv5v/0ENc/0PvWs/495kB20PLsTyweXEAm2p2Z9z5R/L3dmHH1ghjuxWisCXCUNigQrc/mQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADrj/wAAAP//bW3m1Q==") r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) waitid(0x1, r0, 0x0, 0x61000006, &(0x7f0000000340)) ptrace$getregset(0x4205, r0, 0x202, &(0x7f0000000240)={&(0x7f0000000180)=""/120, 0xffffffffffffff28}) 1m21.203953452s ago: executing program 1 (id=963): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmmsg$sock(r0, &(0x7f0000000cc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @broadcast, 0x2}, 0x80, 0x0}}], 0x1, 0x48094) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) sendfile(r0, r1, 0x0, 0xffffffff000) 1m20.701174626s ago: executing program 1 (id=970): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)="0f", 0x1}], 0x1}}], 0x1, 0x608d850) 1m20.640356719s ago: executing program 33 (id=970): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r0, &(0x7f0000006040)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000003c0)="0f", 0x1}], 0x1}}], 0x1, 0x608d850) 1m12.232435712s ago: executing program 6 (id=1133): setns(0xc9, 0x0) r0 = socket(0xa, 0x5, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x7fff, @empty, 0x19f4d29}], 0x1c) listen(r0, 0x100) sendmsg$inet_sctp(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@in={0x2, 0x4e24, @loopback=0x7f00fffd}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000300)="b2", 0x1}], 0x1, &(0x7f0000000100)=[@dstaddrv4={0x18, 0x84, 0x7, @loopback}], 0x18}, 0x8050) 1m12.174584274s ago: executing program 6 (id=1135): r0 = perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0x6, 0xa, 0x40, 0x7, 0x0, 0x2, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, @perf_bp={0x0, 0x2}, 0x4986, 0xfc, 0x4, 0x9, 0x81, 0x7, 0x5, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000100)={0x5, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x80260, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0, 0x4}}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f00000004c0)={0x5, 0x80, 0xe, 0x0, 0x0, 0xa, 0x0, 0x5, 0x44, 0x9, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, @perf_bp={0x0, 0x8}, 0x80, 0xa7, 0x2, 0x5, 0xa5, 0x9b9b, 0x7000, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000580)={0x5, 0x80, 0xec, 0x7, 0x40, 0x8, 0x0, 0x0, 0xd000, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x2, @perf_config_ext={0x8d24, 0x1}, 0x986, 0xfc, 0x4, 0x0, 0x81, 0x9, 0x81, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) close(r0) 1m12.07144427s ago: executing program 6 (id=1148): setns(0xc9, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000000c0)=0x4d12, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 1m11.85348573s ago: executing program 6 (id=1140): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x2) openat(0xffffffffffffffff, 0x0, 0x102, 0x13) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000080)='4', 0x1) 1m10.376181051s ago: executing program 6 (id=1162): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, @perf_bp={0x0, 0x8}, 0x4000, 0x0, 0x0, 0x1, 0xc68d, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x4, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000180), &(0x7f00000001c0)=@buf="03"}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x9, &(0x7f0000000300)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xb7, 0x3, 0x0, 0x0, 0x8}, @generic={0x67, 0x3, 0x0, 0x0, 0x20}, @generic={0xbf, 0x4, 0xa}, @generic={0x7, 0x4, 0x0, 0x0, 0xfffffff8}, @generic={0xb7, 0x5, 0x0, 0x0, 0x8}, @generic={0x85, 0x0, 0x0, 0x0, 0x19}, @generic={0x95}], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0xe, 0x0, &(0x7f0000000500)="11223344556677889900aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m10.157487811s ago: executing program 6 (id=1172): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x1000, 0x0, 0x7d, 0x200001ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x2, 0x40002180, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4401000010000100feffffbf0001000000000000000000ff000000000000000000000000000000000000ffffac1414bb000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000700000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffffa90e000000000000060000000000000000000000000000001f00000000000000ff"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1m10.155538761s ago: executing program 34 (id=1172): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x1000, 0x0, 0x7d, 0x200001ff, 0x1, 0x1}, 0x1c) recvmmsg$unix(r0, &(0x7f0000004280)=[{{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000940)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, &(0x7f0000000200)=[{0x0}], 0x1}}], 0x2, 0x40002180, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="4401000010000100feffffbf0001000000000000000000ff000000000000000000000000000000000000ffffac1414bb000103944e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c000000ac1414bb000000000000000000000000000000000000000009000000000000000700000000000000ffff0000000000001c250800000000000200000000000000f8ffffffffffffffa90e000000000000060000000000000000000000000000001f00000000000000ff"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1m4.484961053s ago: executing program 7 (id=1278): r0 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f00000017c0)=""/4113, 0x1011}], 0x1}, 0x10100) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030030000b02d25a806f8c2d94f90424fc602f1a04000a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x4000}, 0x0) 1m4.407022436s ago: executing program 7 (id=1281): perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0xe4093, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_config_ext={0x7}, 0x0, 0x35, 0x6, 0x8, 0x6, 0x1006, 0xdb4f, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000000)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mnt\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000600)='./mnt/events/netlink/netlink_extack/trigger\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='traceon', 0x7) 1m4.33544474s ago: executing program 7 (id=1287): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r1 = open(&(0x7f00000001c0)='./proc/sys/vm/compaction_proactiveness\x00', 0x14b142, 0x0) sendfile(r0, r1, 0x0, 0x1000000201005) 1m4.294404842s ago: executing program 7 (id=1289): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mbind(&(0x7f000051c000/0x1000)=nil, 0x1000, 0x1, 0x0, 0x2, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) 1m3.659913292s ago: executing program 7 (id=1307): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x1000002, 0x12, r0, 0x0) syz_clone(0x8100411, 0x0, 0x0, 0x0, 0x0, 0x0) 1m3.586569336s ago: executing program 7 (id=1310): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x1, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) close(0x3) 48.128610536s ago: executing program 35 (id=1310): r0 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000300)=0x1, 0x4) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0x3, 0x2, @thr={0x0, 0x0}}) close(0x3) 38.863429569s ago: executing program 0 (id=1589): mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x4000, 0x0) perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x79, 0x1, 0x0, 0x0, 0x0, 0x8, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_bp={0x0}, 0x204, 0x4, 0x43a1bd76, 0x8, 0xc, 0x6, 0x2, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e00)=[{0x0}], 0x1, &(0x7f0000000e40)=""/91, 0x5b}, 0x100) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file2\x00', 0x200801f, &(0x7f00000000c0), 0xfe, 0x510, &(0x7f00000007c0)="$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") 38.509174386s ago: executing program 0 (id=1591): perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000a40)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x15}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x80}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x1}, {}, {0x16}, {0xfffc}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfe}, {}, {}, {}, {0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x2}, {}, {}, {}, {0x0, 0x1}, {0x0, 0x0, 0xc}]}}, @common=@hl={{0x28}, {0x0, 0xfc}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ipv6={@local, @mcast1, [0x0, 0xff000000, 0xffff00, 0xffffff00], [0xff000000, 0xffffffff, 0xffffff00, 0xffffffff], 'bridge_slave_1\x00', 'veth0_to_bridge\x00', {0xff}, {0xff}, 0x3a, 0xb, 0x1, 0x2}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x6cb2, &(0x7f00000002c0)={0x0, 0x90f8, 0x40000, 0x2, 0x32b}, 0x0, 0x0, &(0x7f00000003c0)) 38.292239557s ago: executing program 0 (id=1605): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000a80)=0x1, 0x4) r1 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000980)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x3, 0x0}, 0x4e1f, 0x0, 0x0, 0x3, 0xa}, {0xec, 0x8000000000000000, 0x1, 0x6811221d, 0x9, 0x8000000000000003, 0x200000200000003, 0x100000000}, {0x4000a, 0x0, 0x6, 0xb}, 0x6, 0x0, 0x1, 0x0, 0x6, 0x1}, {{@in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0xffffffff, 0x2b}, 0x2, @in6=@remote, 0x3502, 0x1, 0x2, 0x0, 0x9, 0x7}}, 0xe8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x7f, @loopback, 0x1ff}, 0x1c) 38.21927733s ago: executing program 0 (id=1599): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000300)={[{@noblock_validity}]}, 0x0, 0xbc8, &(0x7f0000002380)="$eJzs3M9rHNcdAPDvjH7alrtyKaXuxSql2FC6ll1kalOoXVx66aHQXgsW8soIrX8gqTiSdVgl/0BIcg7kEkhiEnyIz74kkGsuiXONySFggmIlEEKiMPtDWku7+mGtNIr8+cDTvDdvZt73q5F23oPdDeC5NZT9SCOOR8SVJKJQ359GRG+11h9RqR23tDg/9u3i/FgSy8v/+SqJJCKeLM6PNa6V1LdH6o3+iPj470n88qX1407Pzk2OlsulqXr79Mz1W6enZ+f+NHF99FrpWunGmXN/GTk7cm74/EjHcv3u84v3v/ndP7+ofP/2D3e/fvXNJC7GQL2vOY961js2FEMrv5Nm3REx2oHr7wdd9Xya80y6Nzkp3eWgAABoK22aw/06CtEVq5O3QnzwSa7BAQAAAB2x3BWxDAAAABxwifU/AAAAHHCN9wE8WZwfa5R835Gwtx5fiojBWv5L9VLr6Y5KddsfPRFx+EkSzR9rTWqn7dhQRDz67Px7WYkWn0PebZWFiPhNq/ufVPMfrH8Sem3+aUQMd2D8oTXtn1P+Fzswft75A/B8enCp9iBb//xLV+Y/0eL5193i2fUs8n7+NeZ/S+vmf6v5d7WZ//17i2Pceev12+36svz/ev8f7zZKNn623VFS2/B4IeK33a3yT1byT9rkf2WLYxR+vF1q15d3/stvRJyM1vk3JBt/P9Hp8Ylyabj2s+UYCx+NvNNu/Lzzz+7/4Tb5b3D/+7N9t566Uvsv9fnf5cv32vVtnn/6ZW/y32qtt77nhdGZmakzEb3Jv9bvP7txvo1jGtfI8j/1+43//1v9/WevCZX630aW+UJ9m7VfXDPm3+7eeX+j/LO1X573/+r2739138tbHOMPH75yql1f8/o3K9n4j5LaWhgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGtKIGIgkLUZEUq2nabEYcSQifhWH0/LN6Zk/jt/8/42rWV/EYPSk4xPl0nBEFGrtJGufqdZX22fXtP8cEcci4rXCoWq7OHazfDXv5AEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhxJCIGIkmLEZFGxFIhTYvFvKMCAAAAOm4w7wAAAACAXWf9DwAAAAef9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC77NiJBw+TiKhcOFQtmd56X0+ukQG7Lc07ACA3XXkHAOSmO+8AgNxsc41vugAHULJJf3/bnr6OxwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA/nXy+IOHSURULhyqlkxvva+n5Rkn9jA6YDeleQcA5KZro87uvYsD2HvP/C9+tLNxAHuv9RofeJ4km/T3rx5Tebqnb9diAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGD/GaiWJC1GRFqtp2mxGHE0IgajJxmfKJeGI+IXEfFpoacva/flHTQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdNz07NzlaLpemnqWS7Ox0FRWVpkqyP8KoVfJ+ZQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/Ts3OTo+VyaWo670gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvE3Pzk2OlsulqS1U7m3n4KZK3jkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJCfnwIAAP//198NMw==") chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pivot_root(&(0x7f0000000600)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') 38.032200229s ago: executing program 0 (id=1612): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000540), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x5, 0x0, 0x6, 0x0, 0x18, 0xf}, @ipv4=@tcp={{0x5, 0x4, 0x3, 0x2f, 0x2c, 0x64, 0x0, 0x8, 0x6, 0x0, @private=0xa010101, @dev={0xac, 0x14, 0x14, 0x3e}}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x6, 0xc2, 0x101, 0x0, 0x411, {[@fastopen={0x22, 0x2}]}}}}}, 0xfdef) 37.787134771s ago: executing program 0 (id=1606): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x1a2a82, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000840)) 37.752589642s ago: executing program 36 (id=1606): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x1a2a82, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x1000000000) ioctl$sock_bt_hci(r0, 0x400448ca, &(0x7f0000000840)) 1.372997034s ago: executing program 5 (id=2566): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="12000000040000000800000002"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x20, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd4c}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000000180), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) 1.344030035s ago: executing program 5 (id=2569): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100)=0x2763fdcb, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 1.303506277s ago: executing program 8 (id=2572): r0 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r0, &(0x7f0000000080)=@id={0x1e, 0x3, 0x2, {0x4e22}}, 0x10) bind$tipc(r0, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={&(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, 0x0}, 0x20001) 1.24743359s ago: executing program 5 (id=2574): bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r0) socketpair(0x18, 0x6, 0x2, &(0x7f0000000140)) 1.146568105s ago: executing program 5 (id=2580): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x1c, &(0x7f0000000400)=[@in6={0xa, 0x4e22, 0x4, @private1}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000080)={r1, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x2, 0x80000003, 0x4, 0xe2d8f2eb1d010935, 0x9, 0x9}, 0x9c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r1, @in={{0x2, 0x4e20, @empty}}, 0xd5, 0x6, 0x17f, 0x4, 0x11, 0x1, 0x8}, &(0x7f0000000040)=0x9c) 1.04264154s ago: executing program 2 (id=2582): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x6, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x9}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setns(r1, 0x24020000) syz_clone(0x51801400, 0x0, 0x0, 0x0, 0x0, 0x0) 765.247103ms ago: executing program 4 (id=2588): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r0, 0x400, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/locks\x00', 0x0, 0x0) pread64(r1, &(0x7f00000024c0)=""/209, 0xd1, 0x8) open(&(0x7f00009e1000)='./file0\x00', 0x149244, 0x10) 765.019173ms ago: executing program 4 (id=2589): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0x3a0af83c) shutdown(r0, 0x1) listen(r0, 0x28) shutdown(r0, 0x0) 751.258664ms ago: executing program 2 (id=2590): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'tunl0\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x1, r2, 0x0, 0x0}, 0x10) 739.140314ms ago: executing program 4 (id=2591): openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f0000000280)=ANY=[@ANYBLOB='map=off,check=strict,cruft,dmode=0x0000000000000002,unhide,iocharset=cp437,\x00ap=off,session=0x000000000000001c,\x00'], 0xff, 0x544, &(0x7f0000001000)="$eJzs3V9v01YfwPGfS/sQ5ZGqRw8TQlWBQ9mkIpXgJBAUceU5J+mBxI5sB7VXqKIpqkhhokxae8O4YZu0vQh2uRexd4T2EjbZTvqHJjHQv6u+nwjOiX3s8zup5Z/cxscCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADEcmu2XbSkabzOkhrNrQV+a/dtf+sDC+TWvmJMvyJW/E9yObmSLrry1e7qy/F/czKbvpuVXFzkZPu/l//34NLkxGD7MQF/lt+/cE+bW9vPV3q97qujCuQMunpx9LqG9kzom5bT0MqEvqpWKvadxXqo6qapw+Uw0i3lBtqJ/EDNu7dUsVotK11Y9jteo+Y09WDh/dsl266oh4W2doLQ9+48LITuomk2jddI2sSr4zb34wPxkYlUpJ2WUmvrvW45awBxo+KnNCplNSrZpVKxWCoVK/eq9+7b9uSBBfZH5ECLozto8e90hGdv4HAm+vlfmmLEk44siRr6cqUmgfjSGrG+b5D/v7mjx/a7N/8PsvyV3dUzkuT/a+m7a6Py/4hYTu61KVuyLc9lRXrSk668OvWITvbVEC2eGAnFFyMtcZIlqr9ESVUqUhFbnsii1CUUJXUx0hQtoSxLKJHo5IhyJRAtjkTiSyBK5sWVW6KkKFWpSlmUaCnIsvjSEU8aUhMn2cuarCefe1mUNSrGnUbFkcPID467rpTGjJb8j8M70vM3cBh/D/I/AAAAAAA4t6zkt+/x9f+UXE1qddPU9mmHBQAAAAAAjlDyl//ZuJiKa1fF4vofAAAAAIDzxkrusbNEJC/X09qaWMntUvwSAAAAAACAcyL5+/+1uEjmQLku1s50KVz/AwAAAABwTvycOcd+2L5o/fmXBMGU9ba99LW1kczN62xcSLe78PEeo/qMNd3fSVJU0mJy0tWzVi5ttDMJ5od+sZYVh7UbgLMTwI+fE8ClSflVbqRtbqym5epgTdpLvm6auuD6zQdFcZzpiUgvRd+/WP9BkuH/4rWmrZys97qFpy97q0ksb+O9vN3oT6B4YB7FMbG8TuZbSO65GDriqeRGjH6/eUvW1ntde+/4J9LNJ/b3+GZ6TJ/vZC5tNdef8Ta/f/y5uM9iYdTo+1EUDznyd3IzbXNz/mZaDImilBVFaW8Uwz+Lw0dRzoqifMgoAOC0rGVkIUsO5N0vOMt9WXaXz8zu72Q+bTM/k5xYJ2eGnNHtrDO6fcjs9seBZyCNyrFxv799lFXfxxu8H9lv2CxZ8Ud44fXGd3J5c2v79vrGyrPus+6LUqlcse/a9r2STCXD6BfkHgDAEHufsWMNzf+ZT+Gx7mZcVf9/5ysFBXkqL6Unq7KQ3G2QfONg6F7ze76GsJBx1ZpP0mT6hJeFMVd1/0nuchjstzS27f4YyifwkwAA4OTMZeThT8n/CxnX3ftz+fir4/yep7UBAIDjoYMPVj76yQoC035SrFaLTrSoVeC7j1Rgag2tjBfpwF10vIZW7cCPfNdvxpXHpqZDFXbabT+IVN0PVNsPzVIyfaDqP/o91C3Hi4wbtpvaCbVyfS9y3EjVTOiqdufbpgkXdZBsHLa1a+rGdSLjeyr0O4GrC0qFWu9paGrai0zdxFVPtQPTcoKceuw3Oy2tajp0A9OO/HSHg76MV/eDVrLbwml/2AAAnBGbW9vPV3q97qtjrAztOHfiQwUAAH0ZWRoAAAAAAAAAAAAAAAAAAAAAAJwBJ3H/H5VzXhlMBX1W4qFyBJXMU8ebYz85AThW/wQAAP//rVVPjw==") mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000180), 0x2000090, &(0x7f0000000340)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) 703.940076ms ago: executing program 2 (id=2592): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xffe9, 0xfff1}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x39}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x4000800) 700.841466ms ago: executing program 4 (id=2593): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x6}, 0x0, 0xf, 0x0, 0x0, 0x0, 0x3ff, 0x3, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000300)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x16, 0x11, &(0x7f0000000040)=ANY=[@ANYBLOB="18050000080000000000000000000000850000007b000000b7080000000000007b8af8ff00000000b7080000010400007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r1, 0xfffff000, 0xe, 0x0, &(0x7f0000000400)="882f1242b009007d39f301003c60", 0x0, 0x990d, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 662.491338ms ago: executing program 2 (id=2594): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000980)=@raw={'raw\x00', 0x8, 0x3, 0x530, 0x1d8, 0xffffffff, 0xffffffff, 0x1d8, 0xffffffff, 0x460, 0xffffffff, 0xffffffff, 0x460, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'bridge0\x00'}, 0x0, 0x1b0, 0x1d8, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv6=@private1, [0xff000000, 0xffffffff, 0xff, 0xffffffff], @ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, [0xffffff00, 0xff, 0xffffffff, 0xffffffff], @ipv6=@empty, [0xff000000, 0xff, 0xff, 0xff], @ipv6=@local, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], 0x80, 0x54, 0x3b, 0x4e20, 0x4e23, 0x4e21, 0x4e23, 0x446, 0x39a}, 0x100, 0x20}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00', {0xff}, {}, 0x0, 0x0, 0x0, 0x4b}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0xfffffffe, 0xe, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x590) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f00000001c0)={0xa, 0x3, 0x2, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x3b, &(0x7f0000000100)=[{&(0x7f0000000000)=',', 0x588}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 614.53219ms ago: executing program 9 (id=2595): r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x2, 0x5, 0x1, 0x0, &(0x7f0000000000)=0x1, 0x27040001) 588.149902ms ago: executing program 9 (id=2596): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x120, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff7c, 0x2, @perf_bp={0x0, 0x1}, 0x9679149b910765de, 0x8f2, 0xfffffffd, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{&(0x7f0000000100)={0x2, 0x4e26, @multicast1}, 0x10, &(0x7f00000009c0)=[{&(0x7f0000001380)="2b3dcb037cf6ee", 0x7}], 0x1}}], 0x1, 0x40080a0) 483.054806ms ago: executing program 9 (id=2597): socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$msdos(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nodots,dos1xfloppy,usefree,nodots,fmask=0000000000000010,flush,nfs=nostale_ro,dots,nodots,\x00'], 0x2, 0x15a, &(0x7f00000007c0)="$eJzs2z+r01AYB+C33l6NutxZHAIuTkX9BIpUEAOK0kEnherSSsEu0cV+FL+gIJ26HdFoS/9JK/QGkudZ8sLvHDgnkLycQN7e/jgaTqYfJi/mkXU60X0YeSw6cRFX4iwqswAAmmSRUvxIKaVrs7j+LVJKW0O+1rIwAOBkDuj/AEDD6P8A0D76PwC0z6vXb549Kor+yzzPIr7PykE5qK5V/uRp0b+X/3axmjUvy8HZMr9f5fl6fh43/uQPduZX4+6dKv+VPX5ebOQ3Y3j67QMAAEAr9PKl9fP937y3J9/+PrBxfu/Gre4lbQIAOMr085fRu/H4/aejioj/mdWI4jwidkdZtPi2KJpW1P1mAk5t9dDXvRIAAAAAAAAAAAAAAGCfg/8Hyv49eJH2T697jwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALDpZwAAAP//iBFNOg==") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000040)='.\x00', 0x18920f4, &(0x7f0000000940)=ANY=[@ANYRESHEX, @ANYRES64, @ANYRESOCT, @ANYBLOB="9e7faeb7bee5631b1074b15df242f02b0bc576729412510c164acf5f2b8db33b9e463bd01b35197db8dbf9f59cbbc56bd6b625467f5a6f141d129211f227c921243140c7abf195e9f37c6e04d337d1e1211071bb45647aea30d81d1319e6e9702ce1b5"], 0x0, 0x0, &(0x7f0000000000)) unlinkat(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file0\x00', 0x0) 469.253398ms ago: executing program 2 (id=2598): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x2d1}, 0x20a8, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r0 = io_uring_setup(0x378e, &(0x7f0000000500)={0x0, 0x0, 0x800, 0x0, 0x2eb}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000), 0x200) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 469.145087ms ago: executing program 4 (id=2599): perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x800c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x830d}, 0x0, 0x9, 0x0, 0x4, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() process_vm_writev(r0, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) 403.60269ms ago: executing program 8 (id=2600): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000080), &(0x7f0000000180)='%ps \x00'}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x17, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 356.117492ms ago: executing program 8 (id=2601): openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x101042, 0x57) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x6) fcntl$notify(r0, 0x402, 0x8000001c) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0) 262.791967ms ago: executing program 8 (id=2602): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioprio_set$uid(0x3, 0x0, 0x0) r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x108) pwritev2(r0, &(0x7f00000000c0)=[{&(0x7f0000000640)='\x00', 0x1}], 0x1, 0x2d794960, 0x0, 0x28) 262.427607ms ago: executing program 5 (id=2603): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000340)="2e9b3d0007e03dd65193dfb6c575963f4305", 0x12}], 0x1) 220.194399ms ago: executing program 8 (id=2604): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0e000000040000000400000002"], 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002f00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7f223e000000000000002d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 219.754629ms ago: executing program 2 (id=2605): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0xc}) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000380)=[@in6={0xa, 0x0, 0x0, @remote, 0x9}], 0x1c) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) 216.728229ms ago: executing program 4 (id=2606): r0 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000400)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='tunl0\x00', 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @private=0xa010100}, 0x10) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0x0) 149.229163ms ago: executing program 8 (id=2607): syz_mount_image$vfat(&(0x7f0000001140), &(0x7f0000001040)='./file1\x00', 0x2a18c46, &(0x7f0000000340)=ANY=[@ANYBLOB="6769312ff4e9ee9de333942c0000000000", @ANYRESHEX=0x0, @ANYBLOB=',uni_xlate=0,flush,codepage=860,shortname=win95,iocharset=cp874,utf8=0,shortname=win95,shortname=lower,shortname=mixed,rodir,rodir,shortname=win95,\x00'], 0x81, 0x2cc, &(0x7f0000000040)="$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") mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x3000, 0x3, &(0x7f0000ffd000/0x3000)=nil) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 141.784533ms ago: executing program 9 (id=2608): r0 = socket(0x10, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x81}, 0x1c) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000005300)=[{0x80000006, 0x66}]}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x8000000) 134.762963ms ago: executing program 5 (id=2609): r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x7f\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf0\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\x05\x00\x00\x00\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x2) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x71f2, 0x1000007}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r1, &(0x7f0000000080)='4', 0x1) fcntl$addseals(r0, 0x409, 0xb) 70.949946ms ago: executing program 9 (id=2610): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @loopback}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e22, @remote}, 0xa) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f00000007c0)={0x2, 'macsec0\x00', 0x3}, 0x18) 0s ago: executing program 9 (id=2611): unshare(0x2a020400) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_config_ext={0x800, 0x1ff}, 0x400, 0x5, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1400000028000701fcffffff0000e1ff0a"], 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0xc800) kernel console output (not intermixed with test programs): slave_1 removed [ 87.302706][ T38] team0 (unregistering): Port device team_slave_0 removed [ 87.353827][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10 [ 87.441902][ T6573] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.441937][ T6573] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.442053][ T6573] bridge_slave_0: entered allmulticast mode [ 87.442699][ T6573] bridge_slave_0: entered promiscuous mode [ 87.472347][ T6573] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.472388][ T6573] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.472470][ T6573] bridge_slave_1: entered allmulticast mode [ 87.472948][ T6573] bridge_slave_1: entered promiscuous mode [ 87.503484][ T29] audit: type=1400 audit(1789273956.029:1242): avc: denied { write } for pid=6627 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.512037][ T6573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.513277][ T6573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.541919][ T29] audit: type=1400 audit(1789273956.069:1243): avc: denied { write } for pid=6641 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.587582][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 87.588605][ T6573] team0: Port device team_slave_0 added [ 87.589486][ T6573] team0: Port device team_slave_1 added [ 87.606589][ T6573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.606632][ T6573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.606795][ T6573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.608139][ T6573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.608253][ T6573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.608352][ T6573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.660188][ T6573] hsr_slave_0: entered promiscuous mode [ 87.660934][ T6573] hsr_slave_1: entered promiscuous mode [ 87.662904][ T6573] debugfs: 'hsr0' already exists in 'hsr' [ 87.662957][ T6573] Cannot create hsr debugfs directory [ 87.775687][ T29] audit: type=1400 audit(1789273956.309:1244): avc: denied { write } for pid=6643 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.806893][ T6573] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 87.808986][ T6573] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 87.809887][ T6573] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 87.811648][ T6573] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 87.812514][ T6573] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 87.817459][ T6573] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 87.819341][ T6573] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 87.828710][ T6573] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 87.845141][ T29] audit: type=1400 audit(1789273956.379:1245): avc: denied { write } for pid=6655 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.897552][ T6573] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.897588][ T6573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.897674][ T6573] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.897712][ T6573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.937531][ T6573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.950499][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.951302][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.970118][ T6573] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.974165][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.974197][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.001740][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.001781][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.068054][ T29] audit: type=1400 audit(1789273956.599:1246): avc: denied { write } for pid=6665 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 88.130386][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11 [ 88.167815][ T6573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.289711][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12 [ 88.310754][ T6573] veth0_vlan: entered promiscuous mode [ 88.314964][ T6573] veth1_vlan: entered promiscuous mode [ 88.333162][ T6573] veth0_macvtap: entered promiscuous mode [ 88.339200][ T6573] veth1_macvtap: entered promiscuous mode [ 88.349244][ T6573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.358010][ T6573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.378413][ T31] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.394587][ T38] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.394928][ T377] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.394969][ T377] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.928323][ T6784] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1213'. [ 88.928389][ T6784] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1213'. [ 89.591455][ T6832] FAULT_INJECTION: forcing a failure. [ 89.591455][ T6832] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 89.591491][ T6832] CPU: 1 UID: 0 PID: 6832 Comm: syz.5.1230 Not tainted syzkaller #0 PREEMPT(lazy) [ 89.591516][ T6832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 89.591533][ T6832] Call Trace: [ 89.591542][ T6832] [ 89.591552][ T6832] __dump_stack+0x1d/0x30 [ 89.591580][ T6832] dump_stack_lvl+0x95/0xd0 [ 89.591647][ T6832] dump_stack+0x15/0x1b [ 89.591674][ T6832] should_fail_ex+0x262/0x280 [ 89.591708][ T6832] should_fail_alloc_page+0xf2/0x100 [ 89.591787][ T6832] __alloc_frozen_pages_noprof+0x157/0x400 [ 89.591831][ T6832] alloc_pages_mpol+0xaf/0x1d0 [ 89.591860][ T6832] alloc_pages_noprof+0x94/0x140 [ 89.591962][ T6832] pte_alloc_one+0x1c/0xc0 [ 89.591987][ T6832] __pte_alloc+0x32/0x2a0 [ 89.592026][ T6832] get_locked_pte+0x280/0x330 [ 89.592132][ T6832] map_ldt_struct+0x22a/0x420 [ 89.592164][ T6832] write_ldt+0x403/0x470 [ 89.592196][ T6832] __se_sys_modify_ldt+0x6c/0x260 [ 89.592228][ T6832] x64_sys_call+0x26b/0x2550 [ 89.592264][ T6832] do_syscall_64+0x112/0x360 [ 89.592301][ T6832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.592324][ T6832] RIP: 0033:0x7ff53e27e159 [ 89.592340][ T6832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.592394][ T6832] RSP: 002b:00007ff53ccd7028 EFLAGS: 00000246 ORIG_RAX: 000000000000009a [ 89.592497][ T6832] RAX: ffffffffffffffda RBX: 00007ff53e505fa0 RCX: 00007ff53e27e159 [ 89.592557][ T6832] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000011 [ 89.592571][ T6832] RBP: 00007ff53e31503b R08: 0000000000000000 R09: 0000000000000000 [ 89.592589][ T6832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.592606][ T6832] R13: 00007ff53e506038 R14: 00007ff53e505fa0 R15: 00007ffcfc030f38 [ 89.592628][ T6832] [ 90.458344][ T6876] vxcan1: tx drop: invalid sa for name 0x0000000000000002 [ 91.301923][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 91.301978][ T29] audit: type=1326 audit(1789273959.829:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.5.1259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53e27e159 code=0x7ffc0000 [ 91.302174][ T29] audit: type=1326 audit(1789273959.829:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.5.1259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53e27e159 code=0x7ffc0000 [ 91.303021][ T29] audit: type=1326 audit(1789273959.829:1284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.5.1259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53e27e159 code=0x7ffc0000 [ 91.303067][ T29] audit: type=1326 audit(1789273959.829:1285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.5.1259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53e27e159 code=0x7ffc0000 [ 91.303484][ T29] audit: type=1326 audit(1789273959.829:1286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.5.1259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=107 compat=0 ip=0x7ff53e27e159 code=0x7ffc0000 [ 91.304281][ T29] audit: type=1326 audit(1789273959.839:1287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.5.1259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53e27e159 code=0x7ffc0000 [ 91.304646][ T29] audit: type=1326 audit(1789273959.839:1288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.5.1259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53e27e159 code=0x7ffc0000 [ 91.335313][ T29] audit: type=1326 audit(1789273959.869:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.5.1259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff53e27e159 code=0x7ffc0000 [ 91.440535][ T29] audit: type=1326 audit(1789273959.969:1290): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6924 comm="syz.5.1259" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff53e27e159 code=0x7ffc0000 [ 91.541896][ T29] audit: type=1400 audit(1789273960.069:1291): avc: denied { write } for pid=6929 comm="syz.0.1261" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 91.888241][ T6961] loop0: detected capacity change from 0 to 128 [ 91.898823][ T6961] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 91.899191][ T6961] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 91.956977][ T377] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 92.059683][ T6969] netlink: 'syz.7.1278': attribute type 4 has an invalid length. [ 92.059734][ T6969] netlink: 'syz.7.1278': attribute type 4 has an invalid length. [ 92.059749][ T6969] netlink: 'syz.7.1278': attribute type 7 has an invalid length. [ 92.059764][ T6969] netlink: 203268 bytes leftover after parsing attributes in process `syz.7.1278'. [ 92.250624][ T6992] loop5: detected capacity change from 0 to 128 [ 92.253492][ T6992] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 92.261943][ T6992] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.265271][ T6992] ext2 filesystem being mounted at /248/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.333947][ T3721] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 92.481598][ T7013] loop0: detected capacity change from 0 to 128 [ 92.506325][ T7013] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 92.508298][ T7013] ext4 filesystem being mounted at /244/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 92.509819][ T7013] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.1298: No space for directory leaf checksum. Please run e2fsck -D. [ 92.509870][ T7013] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.1298: Directory block failed checksum [ 92.571365][ T3295] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.583348][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 94.583429][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 94.689546][ T7108] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1338'. [ 94.786159][ T7118] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 94.807083][ T7118] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 96.282013][ T7197] loop5: detected capacity change from 0 to 512 [ 96.317992][ T7197] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.318184][ T7197] ext4 filesystem being mounted at /260/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 96.352885][ T7197] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.1373: corrupted xattr block 33: e_value size too large [ 96.353120][ T7197] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 96.353183][ T7197] EXT4-fs error (device loop5): ext4_xattr_block_get:608: inode #15: comm syz.5.1373: corrupted xattr block 33: e_value size too large [ 96.391941][ T7197] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop5 ino=15 [ 96.392346][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 96.392362][ T29] audit: type=1400 audit(1789273964.919:1312): avc: denied { read } for pid=7196 comm="syz.5.1373" name="file1" dev="loop5" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 96.433366][ T29] audit: type=1400 audit(1789273964.959:1313): avc: denied { setattr } for pid=7196 comm="syz.5.1373" name="file0" dev="loop5" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 96.526081][ T3721] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.577069][ T29] audit: type=1400 audit(1789273965.109:1314): avc: denied { create } for pid=7205 comm="syz.5.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 96.577107][ T29] audit: type=1400 audit(1789273965.109:1315): avc: denied { write } for pid=7205 comm="syz.5.1376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 96.691573][ T7204] loop0: detected capacity change from 0 to 256 [ 96.854277][ T7212] loop5: detected capacity change from 0 to 512 [ 96.864878][ T7212] EXT4-fs (loop5): 1 truncate cleaned up [ 96.865721][ T7212] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.954983][ T3721] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.995821][ T29] audit: type=1400 audit(1789273965.529:1316): avc: denied { attach_queue } for pid=7214 comm="syz.0.1381" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 97.090147][ T7222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1384'. [ 97.090175][ T7222] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1384'. [ 97.090189][ T7222] netlink: 492 bytes leftover after parsing attributes in process `syz.0.1384'. [ 97.238141][ T29] audit: type=1400 audit(1789273965.769:1317): avc: denied { read write } for pid=7230 comm="syz.0.1389" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 97.238189][ T29] audit: type=1400 audit(1789273965.769:1318): avc: denied { open } for pid=7230 comm="syz.0.1389" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 98.405953][ T29] audit: type=1400 audit(1789273966.939:1319): avc: denied { write } for pid=7256 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.474788][ T29] audit: type=1400 audit(1789273967.009:1320): avc: denied { write } for pid=7273 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 98.681503][ T7277] loop5: detected capacity change from 0 to 256 [ 98.787027][ T3375] kernel write not supported for file bpf-prog (pid: 3375 comm: kworker/1:3) [ 99.179528][ T29] audit: type=1400 audit(1789273967.709:1321): avc: denied { write } for pid=7293 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 99.352769][ T7316] FAULT_INJECTION: forcing a failure. [ 99.352769][ T7316] name fail_futex, interval 1, probability 0, space 0, times 0 [ 99.352815][ T7316] CPU: 0 UID: 0 PID: 7316 Comm: syz.0.1411 Not tainted syzkaller #0 PREEMPT(lazy) [ 99.352884][ T7316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 99.352904][ T7316] Call Trace: [ 99.352915][ T7316] [ 99.352928][ T7316] __dump_stack+0x1d/0x30 [ 99.352967][ T7316] dump_stack_lvl+0x95/0xd0 [ 99.352996][ T7316] dump_stack+0x15/0x1b [ 99.353080][ T7316] should_fail_ex+0x262/0x280 [ 99.353112][ T7316] should_fail+0xb/0x20 [ 99.353144][ T7316] get_futex_key+0x12d/0xb10 [ 99.353189][ T7316] futex_wait_requeue_pi+0x160/0x6e0 [ 99.353268][ T7316] ? __pfx_futex_wake_mark+0x10/0x10 [ 99.353392][ T7316] do_futex+0x146/0x460 [ 99.353436][ T7316] __se_sys_futex+0x2f6/0x370 [ 99.353510][ T7316] __x64_sys_futex+0x78/0x90 [ 99.353681][ T7316] x64_sys_call+0x22e2/0x2550 [ 99.353711][ T7316] do_syscall_64+0x112/0x360 [ 99.353773][ T7316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.353873][ T7316] RIP: 0033:0x7f58e450e159 [ 99.353943][ T7316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.353972][ T7316] RSP: 002b:00007f58e2f67028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 99.354003][ T7316] RAX: ffffffffffffffda RBX: 00007f58e4795fa0 RCX: 00007f58e450e159 [ 99.354023][ T7316] RDX: 0000000000000004 RSI: 000080000000000b RDI: 0000000000000000 [ 99.354037][ T7316] RBP: 00007f58e45a503b R08: 0000200000048000 R09: 0000000000000000 [ 99.354073][ T7316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.354092][ T7316] R13: 00007f58e4796038 R14: 00007f58e4795fa0 R15: 00007fffed4927c8 [ 99.354122][ T7316] [ 99.469417][ T7319] netlink: 'syz.2.1412': attribute type 6 has an invalid length. [ 108.467315][ T7366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1427'. [ 108.643163][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 108.643178][ T29] audit: type=1400 audit(1789273977.169:1327): avc: denied { setopt } for pid=7393 comm="syz.5.1429" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 108.650233][ T142] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.716555][ T142] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.767649][ T142] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.820594][ T142] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.923342][ T7365] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.923386][ T7365] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.923450][ T7365] bridge_slave_0: entered allmulticast mode [ 108.924040][ T7365] bridge_slave_0: entered promiscuous mode [ 108.947861][ T7365] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.947965][ T7365] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.948239][ T7365] bridge_slave_1: entered allmulticast mode [ 108.949645][ T7365] bridge_slave_1: entered promiscuous mode [ 108.977866][ T142] bridge_slave_1: left allmulticast mode [ 108.977891][ T142] bridge_slave_1: left promiscuous mode [ 108.978058][ T142] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.979076][ T142] bridge_slave_0: left allmulticast mode [ 108.979098][ T142] bridge_slave_0: left promiscuous mode [ 108.979242][ T142] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.201823][ T142] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 109.213936][ T142] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 109.214915][ T142] bond0 (unregistering): Released all slaves [ 109.257046][ T7365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.258154][ T7365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.272596][ T142] hsr_slave_0: left promiscuous mode [ 109.274563][ T142] hsr_slave_1: left promiscuous mode [ 109.275723][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 109.275795][ T142] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 109.284301][ T142] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 109.284344][ T142] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 109.332378][ T142] veth1_macvtap: left promiscuous mode [ 109.332406][ T142] veth0_macvtap: left promiscuous mode [ 109.332543][ T142] veth1_vlan: left promiscuous mode [ 109.332609][ T142] veth0_vlan: left promiscuous mode [ 109.495251][ T142] team0 (unregistering): Port device team_slave_1 removed [ 109.500797][ T142] team0 (unregistering): Port device team_slave_0 removed [ 109.574961][ T7365] team0: Port device team_slave_0 added [ 109.593569][ T7365] team0: Port device team_slave_1 added [ 109.638276][ T7365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 109.638308][ T7365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.638343][ T7365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 109.639126][ T7365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 109.639143][ T7365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.639230][ T7365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.749977][ T7365] hsr_slave_0: entered promiscuous mode [ 109.757366][ T7365] hsr_slave_1: entered promiscuous mode [ 109.759601][ T7365] debugfs: 'hsr0' already exists in 'hsr' [ 109.759623][ T7365] Cannot create hsr debugfs directory [ 109.843773][ T29] audit: type=1400 audit(1789273978.369:1328): avc: denied { write } for pid=7458 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.908449][ T29] audit: type=1400 audit(1789273978.439:1329): avc: denied { write } for pid=7476 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.943258][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.943280][ C1] bridge0: topology change detected, propagating [ 109.943354][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.943375][ C1] bridge0: topology change detected, propagating [ 109.997371][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13 [ 110.025497][ T7365] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 110.027655][ T7365] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.047595][ T7365] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 110.050921][ T7365] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.051548][ T7365] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 110.075864][ T7365] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.077050][ T7365] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 110.082153][ T7365] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.207879][ T7365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.227893][ T7365] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.233242][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.233282][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.247495][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.247568][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.338942][ T29] audit: type=1400 audit(1789273978.869:1330): avc: denied { write } for pid=7495 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.423277][ T29] audit: type=1400 audit(1789273978.949:1331): avc: denied { write } for pid=7520 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.482090][ T3022] 8021q: adding VLAN 0 to HW filter on device eth14 [ 110.492406][ T7518] sctp: [Deprecated]: syz.0.1460 (pid 7518) Use of int in maxseg socket option. [ 110.492406][ T7518] Use struct sctp_assoc_value instead [ 110.565283][ T7365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.653697][ T7543] loop5: detected capacity change from 0 to 512 [ 110.679484][ T7543] EXT4-fs error (device loop5) in ext4_process_orphan:346: Out of memory [ 110.679508][ T7543] loop5: lost filesystem error report for type 5 error -12 [ 110.682398][ T7543] EXT4-fs (loop5): 2 truncates cleaned up [ 110.682806][ T7543] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 110.759049][ T3721] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 110.799377][ T29] audit: type=1400 audit(1789273979.329:1332): avc: denied { write } for pid=7537 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.883735][ T29] audit: type=1400 audit(1789273979.419:1333): avc: denied { write } for pid=7567 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.948363][ T3022] 8021q: adding VLAN 0 to HW filter on device eth16 [ 111.062281][ T7365] veth0_vlan: entered promiscuous mode [ 111.080629][ T7365] veth1_vlan: entered promiscuous mode [ 111.135124][ T7365] veth0_macvtap: entered promiscuous mode [ 111.142293][ T7584] FAULT_INJECTION: forcing a failure. [ 111.142293][ T7584] name failslab, interval 1, probability 0, space 0, times 0 [ 111.142328][ T7584] CPU: 1 UID: 0 PID: 7584 Comm: syz.5.1473 Not tainted syzkaller #0 PREEMPT(lazy) [ 111.142475][ T7584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 111.142493][ T7584] Call Trace: [ 111.142501][ T7584] [ 111.142511][ T7584] __dump_stack+0x1d/0x30 [ 111.142543][ T7584] dump_stack_lvl+0x95/0xd0 [ 111.142566][ T7584] dump_stack+0x15/0x1b [ 111.142665][ T7584] should_fail_ex+0x262/0x280 [ 111.142733][ T7584] should_failslab+0x8c/0xb0 [ 111.142769][ T7584] __kvmalloc_node_noprof+0x168/0x5c0 [ 111.142813][ T7584] ? alloc_fdtable+0x115/0x1d0 [ 111.142835][ T7584] ? alloc_fdtable+0x115/0x1d0 [ 111.142929][ T7584] alloc_fdtable+0x115/0x1d0 [ 111.142955][ T7584] dup_fd+0x4ae/0x530 [ 111.143018][ T7584] ? _raw_spin_unlock+0x9/0x30 [ 111.143046][ T7584] ksys_unshare+0x36c/0x710 [ 111.143084][ T7584] __x64_sys_unshare+0x1f/0x30 [ 111.143197][ T7584] x64_sys_call+0x1e33/0x2550 [ 111.143231][ T7584] do_syscall_64+0x112/0x360 [ 111.143315][ T7584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.143339][ T7584] RIP: 0033:0x7ff53e27e159 [ 111.143361][ T7584] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 111.143383][ T7584] RSP: 002b:00007ff53ccd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 111.143411][ T7584] RAX: ffffffffffffffda RBX: 00007ff53e505fa0 RCX: 00007ff53e27e159 [ 111.143439][ T7584] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020400 [ 111.143457][ T7584] RBP: 00007ff53e31503b R08: 0000000000000000 R09: 0000000000000000 [ 111.143474][ T7584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.143492][ T7584] R13: 00007ff53e506038 R14: 00007ff53e505fa0 R15: 00007ffcfc030f38 [ 111.143554][ T7584] [ 111.160543][ T7365] veth1_macvtap: entered promiscuous mode [ 111.249579][ T7365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.292155][ T7365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.383928][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.392811][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.392905][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.392950][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.457583][ T7593] loop5: detected capacity change from 0 to 1024 [ 111.496297][ T7593] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.526898][ T29] audit: type=1400 audit(1789273980.059:1334): avc: denied { write } for pid=7592 comm="syz.5.1475" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 111.558563][ T7593] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 1305 free clusters [ 111.560283][ T7593] EXT4-fs (loop5): Remounting filesystem read-only [ 111.596559][ T29] audit: type=1400 audit(1789273980.129:1335): avc: denied { write } for pid=7585 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.664677][ T3721] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.718346][ T29] audit: type=1400 audit(1789273980.249:1336): avc: denied { write } for pid=7610 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 111.752453][ T7609] loop0: detected capacity change from 0 to 1024 [ 111.766337][ T7609] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 111.798105][ T3022] 8021q: adding VLAN 0 to HW filter on device eth15 [ 111.833440][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.181538][ T7635] loop5: detected capacity change from 0 to 512 [ 112.209823][ T7635] FAT-fs (loop5): error, fat_bmap_cluster: request beyond EOF (i_pos 49) [ 112.478570][ T142] IPVS: starting estimator thread 0... [ 112.487351][ T7658] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 112.563330][ T7663] IPVS: using max 2256 ests per chain, 112800 per kthread [ 112.631760][ T7675] loop0: detected capacity change from 0 to 512 [ 112.659472][ T7675] FAT-fs (loop0): error, corrupted file size (i_pos 51, 512) [ 112.659684][ T7675] FAT-fs (loop0): error, invalid FAT chain (i_pos 51, last_block 64) [ 112.739513][ T7679] netlink: 'syz.4.1503': attribute type 9 has an invalid length. [ 112.739564][ T7679] netlink: 207496 bytes leftover after parsing attributes in process `syz.4.1503'. [ 112.912368][ T7692] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1509'. [ 112.955545][ T7693] serio: Serial port ptm0 [ 113.107212][ T7693] serio: Serial port ptm0 [ 113.200981][ T7722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1524'. [ 113.205229][ T7722] ipvlan2: entered allmulticast mode [ 113.205320][ T7722] syz_tun: entered allmulticast mode [ 113.321763][ T7727] clocksource: Switched to clocksource acpi_pm [ 113.322264][ T7727] clocksource: Switched to clocksource tsc [ 113.364535][ T7731] loop0: detected capacity change from 0 to 512 [ 113.392181][ T7733] loop0: detected capacity change from 0 to 512 [ 113.676685][ T7737] tipc: Started in network mode [ 113.676705][ T7737] tipc: Node identity 1000001, cluster identity 4369 [ 113.676788][ T7737] tipc: Node number set to 16777217 [ 113.677199][ T7737] tipc: New replicast peer: 127.0.0.1 [ 113.677396][ T7737] tipc: Enabled bearer , priority 10 [ 114.060562][ T7741] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.060639][ T7741] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.060757][ T7741] bridge_slave_0: entered allmulticast mode [ 114.061272][ T7741] bridge_slave_0: entered promiscuous mode [ 114.096847][ T7741] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.096882][ T7741] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.097130][ T7741] bridge_slave_1: entered allmulticast mode [ 114.097835][ T7741] bridge_slave_1: entered promiscuous mode [ 114.144981][ T7741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 114.146379][ T7741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 114.176337][ T7741] team0: Port device team_slave_0 added [ 114.177182][ T7741] team0: Port device team_slave_1 added [ 114.200116][ T7741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 114.200190][ T7741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.200223][ T7741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 114.200708][ T7741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 114.200721][ T7741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 114.200860][ T7741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 114.305165][ T7741] hsr_slave_0: entered promiscuous mode [ 114.305649][ T7741] hsr_slave_1: entered promiscuous mode [ 114.305919][ T7741] debugfs: 'hsr0' already exists in 'hsr' [ 114.305936][ T7741] Cannot create hsr debugfs directory [ 114.372425][ T7741] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.426863][ T7741] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.466450][ T7741] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.506678][ T7741] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.558751][ T7741] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 114.560748][ T7741] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 114.561333][ T7741] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 114.564760][ T7741] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 114.566429][ T7741] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 114.573825][ T7741] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 114.575738][ T7741] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 114.579433][ T7741] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 114.649776][ T7741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.657997][ T7741] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.669507][ T142] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.669548][ T142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.671056][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.671083][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.795729][ T7741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.906298][ T7741] veth0_vlan: entered promiscuous mode [ 114.908918][ T7741] veth1_vlan: entered promiscuous mode [ 114.922151][ T7741] veth0_macvtap: entered promiscuous mode [ 114.934226][ T7741] veth1_macvtap: entered promiscuous mode [ 114.940960][ T7741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 114.946131][ T7741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 114.973747][ T142] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.973845][ T142] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.973928][ T142] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 114.973965][ T142] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.262566][ T29] kauditd_printk_skb: 20 callbacks suppressed [ 115.262585][ T29] audit: type=1326 audit(1789273983.789:1357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7820 comm="syz.0.1557" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e450e159 code=0x7ffc0000 [ 115.262617][ T29] audit: type=1326 audit(1789273983.789:1358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7820 comm="syz.0.1557" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e450e159 code=0x7ffc0000 [ 115.262645][ T29] audit: type=1326 audit(1789273983.789:1359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7820 comm="syz.0.1557" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e450e159 code=0x7ffc0000 [ 115.262692][ T29] audit: type=1326 audit(1789273983.789:1360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7820 comm="syz.0.1557" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=126 compat=0 ip=0x7f58e450e159 code=0x7ffc0000 [ 115.262754][ T29] audit: type=1326 audit(1789273983.789:1361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7820 comm="syz.0.1557" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e450e159 code=0x7ffc0000 [ 115.262814][ T29] audit: type=1326 audit(1789273983.789:1362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7820 comm="syz.0.1557" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e450e159 code=0x7ffc0000 [ 115.297369][ T29] audit: type=1326 audit(1789273983.829:1363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7820 comm="syz.0.1557" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f58e450e159 code=0x7ffc0000 [ 115.475485][ T29] audit: type=1326 audit(1789273984.009:1364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7820 comm="syz.0.1557" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f58e450e159 code=0x7ffc0000 [ 115.603610][ T7831] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1548'. [ 115.603632][ T7831] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1548'. [ 115.603672][ T7831] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1548'. [ 115.603879][ T7831] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1548'. [ 115.750159][ T7833] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.750205][ T7833] bridge0: port 2(bridge_slave_1) entered listening state [ 115.750295][ T7833] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.750380][ T7833] bridge0: port 1(bridge_slave_0) entered listening state [ 116.191196][ T3425] bridge_slave_1: left allmulticast mode [ 116.191220][ T3425] bridge_slave_1: left promiscuous mode [ 116.191396][ T3425] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.195153][ T3425] bridge_slave_0: left allmulticast mode [ 116.195216][ T3425] bridge_slave_0: left promiscuous mode [ 116.195602][ T3425] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.309087][ T3425] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.312507][ T3425] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.331876][ T3425] bond0 (unregistering): Released all slaves [ 116.381662][ T3425] hsr_slave_0: left promiscuous mode [ 116.382078][ T3425] hsr_slave_1: left promiscuous mode [ 116.382453][ T3425] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.382471][ T3425] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.382983][ T3425] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.382998][ T3425] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.400317][ T7867] FAULT_INJECTION: forcing a failure. [ 116.400317][ T7867] name failslab, interval 1, probability 0, space 0, times 0 [ 116.400475][ T7867] CPU: 1 UID: 0 PID: 7867 Comm: syz.0.1567 Not tainted syzkaller #0 PREEMPT(lazy) [ 116.400561][ T7867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 116.400683][ T7867] Call Trace: [ 116.400705][ T7867] [ 116.400735][ T7867] __dump_stack+0x1d/0x30 [ 116.400854][ T7867] dump_stack_lvl+0x95/0xd0 [ 116.400945][ T7867] dump_stack+0x15/0x1b [ 116.401095][ T7867] should_fail_ex+0x262/0x280 [ 116.401177][ T7867] should_failslab+0x8c/0xb0 [ 116.401274][ T7867] __kvmalloc_node_noprof+0x168/0x5c0 [ 116.401392][ T7867] ? alloc_fdtable+0x115/0x1d0 [ 116.401515][ T7867] ? alloc_fdtable+0x115/0x1d0 [ 116.401580][ T7867] alloc_fdtable+0x115/0x1d0 [ 116.401702][ T7867] dup_fd+0x4ae/0x530 [ 116.401818][ T7867] ksys_unshare+0x36c/0x710 [ 116.401922][ T7867] __x64_sys_unshare+0x1f/0x30 [ 116.402049][ T7867] x64_sys_call+0x1e33/0x2550 [ 116.402149][ T7867] do_syscall_64+0x112/0x360 [ 116.402301][ T7867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.402401][ T7867] RIP: 0033:0x7f58e450e159 [ 116.402454][ T7867] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.402525][ T7867] RSP: 002b:00007f58e2f67028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 116.402547][ T7867] RAX: ffffffffffffffda RBX: 00007f58e4795fa0 RCX: 00007f58e450e159 [ 116.402562][ T7867] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020400 [ 116.402580][ T7867] RBP: 00007f58e45a503b R08: 0000000000000000 R09: 0000000000000000 [ 116.402622][ T7867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.402635][ T7867] R13: 00007f58e4796038 R14: 00007f58e4795fa0 R15: 00007fffed4927c8 [ 116.402688][ T7867] [ 116.403639][ T3425] veth1_macvtap: left promiscuous mode [ 116.403789][ T3425] veth0_macvtap: left promiscuous mode [ 116.403998][ T3425] veth1_vlan: left promiscuous mode [ 116.404113][ T3425] veth0_vlan: left promiscuous mode [ 116.711752][ T3425] team0 (unregistering): Port device team_slave_1 removed [ 116.721872][ T3425] team0 (unregistering): Port device team_slave_0 removed [ 116.778821][ T7876] bridge_slave_0: left allmulticast mode [ 116.778848][ T7876] bridge_slave_0: left promiscuous mode [ 116.779030][ T7876] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.780828][ T7876] bridge_slave_1: left allmulticast mode [ 116.780846][ T7876] bridge_slave_1: left promiscuous mode [ 116.781036][ T7876] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.785149][ T7876] bond0: (slave bond_slave_0): Releasing backup interface [ 116.810779][ T7876] bond0: (slave bond_slave_1): Releasing backup interface [ 116.851968][ T7876] team0: Port device team_slave_0 removed [ 116.865679][ T7876] team0: Port device team_slave_1 removed [ 116.870886][ T7876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 116.870905][ T7876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 116.900474][ T7876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 116.900491][ T7876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 116.925333][ T7876] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 116.967381][ T7877] team0: Port device xfrm0 added [ 117.356586][ T7896] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 117.500132][ T29] audit: type=1326 audit(1789273986.029:1365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.0.1579" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e450e159 code=0x7ffc0000 [ 117.500278][ T29] audit: type=1326 audit(1789273986.029:1366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7893 comm="syz.0.1579" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58e450e159 code=0x7ffc0000 [ 117.729169][ T7923] loop0: detected capacity change from 0 to 512 [ 117.742367][ T7923] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 117.742486][ T7923] EXT4-fs (loop0): orphan cleanup on readonly fs [ 117.751574][ T7923] EXT4-fs warning (device loop0): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 117.751892][ T7923] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 117.766176][ T7923] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.1589: bg 0: block 15: invalid block bitmap [ 117.766217][ T7923] loop0: lost filesystem error report for type 5 error -117 [ 117.767808][ T7923] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 117.767828][ T7923] loop0: lost filesystem error report for type 5 error -117 [ 117.768120][ T7923] EXT4-fs warning (device loop0): ext4_evict_inode:196: inode #16: comm syz.0.1589: data will be lost [ 117.768295][ T7923] EXT4-fs (loop0): 1 truncate cleaned up [ 117.768742][ T7923] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 117.973825][ T3295] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.309600][ T12] IPVS: starting estimator thread 0... [ 118.311254][ T7946] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 118.365861][ T7952] loop0: detected capacity change from 0 to 4096 [ 118.381811][ T7952] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.401646][ T7951] IPVS: using max 2208 ests per chain, 110400 per kthread [ 118.696366][ T4514] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.701959][ T377] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.749332][ T377] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.792277][ T7973] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1609'. [ 118.816756][ T7973] ipvlan2: entered allmulticast mode [ 118.816781][ T7973] syz_tun: entered allmulticast mode [ 118.843819][ T377] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.915926][ T377] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.237403][ T377] team0: Port device xfrm0 removed [ 119.278020][ T377] bond0 (unregistering): Released all slaves [ 119.346673][ T377] tipc: Disabling bearer [ 119.346697][ T377] tipc: Left network mode [ 119.375733][ T377] hsr_slave_0: left promiscuous mode [ 119.377810][ T8019] netlink: 'syz.2.1621': attribute type 9 has an invalid length. [ 119.377837][ T8019] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.1621'. [ 119.388248][ T377] hsr_slave_1: left promiscuous mode [ 119.408473][ T377] veth1_macvtap: left promiscuous mode [ 119.408556][ T377] veth0_macvtap: left promiscuous mode [ 119.408762][ T377] veth1_vlan: left promiscuous mode [ 119.408940][ T377] veth0_vlan: left promiscuous mode [ 119.540679][ T8029] loop5: detected capacity change from 0 to 512 [ 119.716948][ T3022] 8021q: adding VLAN 0 to HW filter on device eth17 [ 119.764659][ T8043] bridge0: port 3(syz_tun) entered blocking state [ 119.764703][ T8043] bridge0: port 3(syz_tun) entered disabled state [ 119.764887][ T8043] syz_tun: entered allmulticast mode [ 119.770682][ T8043] syz_tun: entered promiscuous mode [ 119.770880][ T8043] bridge0: port 3(syz_tun) entered blocking state [ 119.770918][ T8043] bridge0: port 3(syz_tun) entered forwarding state [ 119.778795][ T8043] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 119.910044][ T8054] netlink: 'syz.8.1633': attribute type 9 has an invalid length. [ 119.910193][ T8054] netlink: 207496 bytes leftover after parsing attributes in process `syz.8.1633'. [ 119.984962][ T8065] loop8: detected capacity change from 0 to 1024 [ 119.985620][ T8065] EXT4-fs: Ignoring removed orlov option [ 119.992616][ T377] IPVS: stop unused estimator thread 0... [ 120.027125][ T8065] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 120.052756][ T7976] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.052796][ T7976] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.052859][ T7976] bridge_slave_0: entered allmulticast mode [ 120.059758][ T8065] EXT4-fs error (device loop8): ext4_lookup:1791: inode #2: comm syz.8.1635: deleted inode referenced: 15 [ 120.086474][ T7976] bridge_slave_0: entered promiscuous mode [ 120.095502][ T7976] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.095545][ T7976] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.095685][ T7976] bridge_slave_1: entered allmulticast mode [ 120.096271][ T7976] bridge_slave_1: entered promiscuous mode [ 120.145566][ T7741] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.147427][ T7976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.148700][ T7976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.190544][ T7976] team0: Port device team_slave_0 added [ 120.193221][ T7976] team0: Port device team_slave_1 added [ 120.242436][ T7976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.242455][ T7976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.242497][ T7976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.243115][ T7976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.243132][ T7976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 120.243217][ T7976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.316235][ T3022] 8021q: adding VLAN 0 to HW filter on device eth18 [ 120.365743][ T8091] tipc: New replicast peer: 127.0.0.1 [ 120.365909][ T8091] tipc: Enabled bearer , priority 10 [ 120.428479][ T7976] hsr_slave_0: entered promiscuous mode [ 120.436026][ T7976] hsr_slave_1: entered promiscuous mode [ 120.530466][ T8103] geneve2: entered promiscuous mode [ 120.583528][ T3425] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 49006 - 0 [ 120.584555][ T3425] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 49006 - 0 [ 120.584680][ T3425] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 49006 - 0 [ 120.584783][ T3425] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 49006 - 0 [ 120.651747][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 120.651765][ T29] audit: type=1400 audit(1789273989.179:1394): avc: denied { write } for pid=8098 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.683034][ T7976] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 120.692002][ T7976] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 120.692747][ T7976] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 120.696704][ T7976] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 120.698565][ T7976] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 120.708672][ T7976] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 120.712151][ T7976] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 120.714403][ T29] audit: type=1400 audit(1789273989.239:1395): avc: denied { write } for pid=8115 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.721308][ T7976] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 120.772246][ T3022] 8021q: adding VLAN 0 to HW filter on device eth19 [ 120.798680][ T7976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.810753][ T7976] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.820922][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.820964][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.829187][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 120.829311][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 120.932757][ T29] audit: type=1400 audit(1789273989.459:1396): avc: denied { write } for pid=8124 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.978292][ T29] audit: type=1400 audit(1789273989.509:1397): avc: denied { write } for pid=8144 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 120.989954][ T7976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 121.024052][ T3022] 8021q: adding VLAN 0 to HW filter on device eth20 [ 121.137226][ T7976] veth0_vlan: entered promiscuous mode [ 121.139460][ T7976] veth1_vlan: entered promiscuous mode [ 121.151025][ T7976] veth0_macvtap: entered promiscuous mode [ 121.154500][ T7976] veth1_macvtap: entered promiscuous mode [ 121.165479][ T7976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.168619][ T7976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.193303][ T377] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.204804][ T142] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.207389][ T3425] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.207507][ T3425] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.249863][ T8166] batadv_slave_1: entered promiscuous mode [ 121.250316][ T8165] batadv_slave_1: left promiscuous mode [ 121.267270][ T29] audit: type=1400 audit(1789273989.799:1398): avc: denied { read write } for pid=8169 comm="syz.5.1658" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 121.267389][ T29] audit: type=1400 audit(1789273989.799:1399): avc: denied { open } for pid=8169 comm="syz.5.1658" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 121.436872][ T8180] loop8: detected capacity change from 0 to 1024 [ 121.439172][ T8180] EXT4-fs: Ignoring removed bh option [ 121.459429][ T8184] loop5: detected capacity change from 0 to 4096 [ 121.477282][ T8180] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 121.478370][ T8184] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 121.487702][ T29] audit: type=1400 audit(1789273990.019:1400): avc: denied { write } for pid=8176 comm="syz.8.1648" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.490937][ T29] audit: type=1400 audit(1789273990.019:1401): avc: denied { write } for pid=8178 comm="syz.5.1650" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.543191][ T29] audit: type=1400 audit(1789273990.069:1402): avc: denied { write } for pid=8176 comm="syz.8.1648" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 121.594323][ T7741] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 121.623180][ T3721] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.647679][ T8195] tipc: Started in network mode [ 121.647694][ T8195] tipc: Node identity 1000001, cluster identity 4369 [ 121.647709][ T8195] tipc: Node number set to 16777217 [ 121.648283][ T8195] tipc: New replicast peer: 127.0.0.1 [ 121.648482][ T8195] tipc: Enabled bearer , priority 10 [ 121.689761][ T29] audit: type=1326 audit(1789273990.219:1403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8196 comm="syz.5.1655" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53e27e159 code=0x7ffc0000 [ 121.869765][ T8221] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1670'. [ 121.896713][ T8222] loop9: detected capacity change from 0 to 1024 [ 121.898704][ T8222] EXT4-fs: Ignoring removed bh option [ 121.919499][ T8222] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback. [ 122.021800][ T7976] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-001000000000. [ 122.341640][ T8268] af_packet: tpacket_rcv: packet too big, clamped from 1 to 4294967272. macoff=96 [ 122.736100][ T8316] vcan0: tx address claim with dlc 0 [ 122.819140][ T8324] veth0: entered promiscuous mode [ 122.820991][ T8322] veth0: left promiscuous mode [ 123.218658][ T8337] loop8: detected capacity change from 0 to 256 [ 123.220444][ T8352] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1710'. [ 123.253033][ T8356] ./dev/sda1: Can't lookup blockdev [ 124.176407][ T8432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.176622][ T8432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.207861][ T8434] loop5: detected capacity change from 0 to 512 [ 124.208336][ T8434] EXT4-fs: Ignoring removed nobh option [ 124.236023][ T8434] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 124.236098][ T8434] ext4 filesystem being mounted at /333/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.303051][ T3721] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 124.865113][ T8502] __vm_enough_memory: pid: 8502, comm: syz.2.1772, bytes: 8796229693440 not enough memory for the allocation [ 124.972862][ T8520] loop5: detected capacity change from 0 to 128 [ 124.982080][ T8520] EXT4-fs (loop5): mounting ext2 file system using the ext4 subsystem [ 124.995282][ T8520] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 124.997361][ T8520] ext2 filesystem being mounted at /337/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.048298][ T8518] xt_hashlimit: size too large, truncated to 1048576 [ 125.050809][ T8523] ./dev/sda1: Can't lookup blockdev [ 125.085198][ T3721] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 125.258712][ T8541] loop8: detected capacity change from 0 to 512 [ 125.275377][ T8541] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 125.278637][ T8541] EXT4-fs (loop8): 1 truncate cleaned up [ 125.279050][ T8541] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 125.342068][ T7741] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.488749][ T8562] loop5: detected capacity change from 0 to 512 [ 125.505374][ T8562] EXT4-fs error (device loop5): ext4_iget_extra_inode:5210: inode #15: comm syz.5.1797: corrupted in-inode xattr: invalid ea_ino [ 125.505415][ T8562] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 125.505704][ T8562] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1797: couldn't read orphan inode 15 (err -117) [ 125.505792][ T8562] loop5: lost filesystem error report for type 5 error -117 [ 125.506518][ T8562] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 125.560835][ T3721] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 125.606110][ T8570] FAULT_INJECTION: forcing a failure. [ 125.606110][ T8570] name failslab, interval 1, probability 0, space 0, times 0 [ 125.606172][ T8570] CPU: 0 UID: 0 PID: 8570 Comm: syz.8.1801 Not tainted syzkaller #0 PREEMPT(lazy) [ 125.606205][ T8570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 125.606219][ T8570] Call Trace: [ 125.606247][ T8570] [ 125.606257][ T8570] __dump_stack+0x1d/0x30 [ 125.606291][ T8570] dump_stack_lvl+0x95/0xd0 [ 125.606319][ T8570] dump_stack+0x15/0x1b [ 125.606348][ T8570] should_fail_ex+0x262/0x280 [ 125.606415][ T8570] ? security_bpf_map_create+0x51/0x130 [ 125.606455][ T8570] should_failslab+0x8c/0xb0 [ 125.606491][ T8570] __kmalloc_noprof+0xd0/0x4d0 [ 125.606579][ T8570] ? security_bpf_map_create+0x51/0x130 [ 125.606640][ T8570] security_bpf_map_create+0x51/0x130 [ 125.606699][ T8570] map_create+0x28c/0xfe0 [ 125.606735][ T8570] __sys_bpf+0x99a/0xc30 [ 125.606817][ T8570] ? do_futex+0x2f0/0x460 [ 125.606999][ T8570] __x64_sys_bpf+0x69/0x80 [ 125.607064][ T8570] x64_sys_call+0xf26/0x2550 [ 125.607099][ T8570] do_syscall_64+0x112/0x360 [ 125.607144][ T8570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.607191][ T8570] RIP: 0033:0x7fc25b27e159 [ 125.607220][ T8570] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.607248][ T8570] RSP: 002b:00007fc259cd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 125.607323][ T8570] RAX: ffffffffffffffda RBX: 00007fc25b505fa0 RCX: 00007fc25b27e159 [ 125.607343][ T8570] RDX: 0000000000000050 RSI: 0000200000000280 RDI: 0000000000000000 [ 125.607362][ T8570] RBP: 00007fc25b31503b R08: 0000000000000000 R09: 0000000000000000 [ 125.607381][ T8570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.607398][ T8570] R13: 00007fc25b506038 R14: 00007fc25b505fa0 R15: 00007ffc31480ee8 [ 125.607486][ T8570] [ 125.822024][ T911] input: syz0 as /devices/virtual/misc/uhid/0018:0B05:0101.0009/input/input6 [ 125.823322][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 125.823354][ T29] audit: type=1400 audit(1789273994.349:1466): avc: denied { search } for pid=2968 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 125.833426][ T911] asus 0018:0B05:0101.0009: input,hidraw0: I2C HID v0.00 Mouse [syz0] on syz1 [ 125.833483][ T911] asus 0018:0B05:0101.0009: Asus failed to start multitouch: -5 [ 125.856977][ T29] audit: type=1400 audit(1789273994.389:1467): avc: denied { search } for pid=2968 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 125.857144][ T29] audit: type=1400 audit(1789273994.389:1468): avc: denied { search } for pid=2968 comm="acpid" name="/" dev="sda1" ino=2 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:auditd_unit_file_t:s0" [ 125.913918][ T911] asus 0018:0B05:0101.0009: probe with driver asus failed with error -5 [ 125.976846][ T8583] fido_id[8583]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 126.190110][ T8604] macsec0: entered allmulticast mode [ 126.190132][ T8604] veth1_macvtap: entered allmulticast mode [ 126.192129][ T8602] FAULT_INJECTION: forcing a failure. [ 126.192129][ T8602] name failslab, interval 1, probability 0, space 0, times 0 [ 126.192177][ T8602] CPU: 1 UID: 0 PID: 8602 Comm: syz.9.1813 Not tainted syzkaller #0 PREEMPT(lazy) [ 126.192220][ T8602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 126.192300][ T8602] Call Trace: [ 126.192307][ T8602] [ 126.192314][ T8602] __dump_stack+0x1d/0x30 [ 126.192375][ T8602] dump_stack_lvl+0x95/0xd0 [ 126.192406][ T8602] dump_stack+0x15/0x1b [ 126.192457][ T8602] should_fail_ex+0x262/0x280 [ 126.192503][ T8602] ? call_usermodehelper_setup+0x72/0x190 [ 126.192584][ T8602] should_failslab+0x8c/0xb0 [ 126.192626][ T8602] __kmalloc_cache_noprof+0x7a/0x400 [ 126.192724][ T8602] ? call_usermodehelper_setup+0x72/0x190 [ 126.192767][ T8602] ? __pfx_free_modprobe_argv+0x10/0x10 [ 126.192785][ T8604] veth1_macvtap: left allmulticast mode [ 126.192808][ T8604] veth1_macvtap: left promiscuous mode [ 126.192796][ T8602] call_usermodehelper_setup+0x72/0x190 [ 126.192827][ T8604] macsec0: left allmulticast mode [ 126.192863][ T8602] __request_module+0x264/0x3c0 [ 126.192921][ T8602] inet6_create+0x12e/0x860 [ 126.192961][ T8602] __sock_create+0x2e5/0x580 [ 126.192992][ T8602] __sys_socket+0xaf/0x180 [ 126.193021][ T8602] __x64_sys_socket+0x3f/0x50 [ 126.193062][ T8602] x64_sys_call+0x246e/0x2550 [ 126.193094][ T8602] do_syscall_64+0x112/0x360 [ 126.193139][ T8602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.193212][ T8602] RIP: 0033:0x7f40b813e159 [ 126.193231][ T8602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 126.193253][ T8602] RSP: 002b:00007f40b6b97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 126.193279][ T8602] RAX: ffffffffffffffda RBX: 00007f40b83c5fa0 RCX: 00007f40b813e159 [ 126.193298][ T8602] RDX: 0000000000000008 RSI: 000000000000000a RDI: 000000000000000a [ 126.193336][ T8602] RBP: 00007f40b81d503b R08: 0000000000000000 R09: 0000000000000000 [ 126.193380][ T8602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 126.193440][ T8602] R13: 00007f40b83c6038 R14: 00007f40b83c5fa0 R15: 00007ffe80ec4db8 [ 126.193594][ T8602] [ 126.479532][ T8618] netlink: 14 bytes leftover after parsing attributes in process `syz.4.1820'. [ 126.510301][ T8618] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.527360][ T8618] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.530234][ T8618] bond0 (unregistering): Released all slaves [ 126.586179][ T29] audit: type=1400 audit(1789273995.119:1469): avc: denied { create } for pid=8627 comm="syz.2.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 126.593188][ T29] audit: type=1400 audit(1789273995.119:1470): avc: denied { connect } for pid=8627 comm="syz.2.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 126.611754][ T29] audit: type=1400 audit(1789273995.139:1471): avc: denied { bind } for pid=8627 comm="syz.2.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 126.725600][ T8639] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 126.725795][ T29] audit: type=1326 audit(1789273995.259:1472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8637 comm="syz.9.1829" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b813e159 code=0x7ffc0000 [ 126.725878][ T29] audit: type=1326 audit(1789273995.259:1473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8637 comm="syz.9.1829" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b813e159 code=0x7ffc0000 [ 126.725917][ T29] audit: type=1326 audit(1789273995.259:1474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8637 comm="syz.9.1829" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b813e159 code=0x7ffc0000 [ 126.725956][ T29] audit: type=1326 audit(1789273995.259:1475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8637 comm="syz.9.1829" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b813e159 code=0x7ffc0000 [ 126.770114][ T38] IPVS: starting estimator thread 0... [ 126.853612][ T8644] IPVS: using max 2208 ests per chain, 110400 per kthread [ 127.130621][ T8681] 9pnet_fd: p9_fd_create_unix (8681): problem connecting socket: ./file0: -111 [ 127.840867][ T8743] FAULT_INJECTION: forcing a failure. [ 127.840867][ T8743] name fail_futex, interval 1, probability 0, space 0, times 0 [ 127.840906][ T8743] CPU: 0 UID: 0 PID: 8743 Comm: syz.8.1874 Not tainted syzkaller #0 PREEMPT(lazy) [ 127.840944][ T8743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 127.841029][ T8743] Call Trace: [ 127.841036][ T8743] [ 127.841044][ T8743] __dump_stack+0x1d/0x30 [ 127.841078][ T8743] dump_stack_lvl+0x95/0xd0 [ 127.841109][ T8743] dump_stack+0x15/0x1b [ 127.841206][ T8743] should_fail_ex+0x262/0x280 [ 127.841271][ T8743] should_fail+0xb/0x20 [ 127.841346][ T8743] get_futex_key+0x594/0xb10 [ 127.841396][ T8743] futex_wait_setup+0x49/0x3e0 [ 127.841430][ T8743] futex_wait_requeue_pi+0x1d6/0x6e0 [ 127.841480][ T8743] ? __pfx_futex_wake_mark+0x10/0x10 [ 127.841592][ T8743] do_futex+0x146/0x460 [ 127.841634][ T8743] __se_sys_futex+0x2f6/0x370 [ 127.841673][ T8743] ? xfd_validate_state+0x45/0xf0 [ 127.841771][ T8743] __x64_sys_futex+0x78/0x90 [ 127.841922][ T8743] x64_sys_call+0x22e2/0x2550 [ 127.841958][ T8743] do_syscall_64+0x112/0x360 [ 127.842003][ T8743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.842088][ T8743] RIP: 0033:0x7fc25b27e159 [ 127.842160][ T8743] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 127.842203][ T8743] RSP: 002b:00007fc259cd7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 127.842231][ T8743] RAX: ffffffffffffffda RBX: 00007fc25b505fa0 RCX: 00007fc25b27e159 [ 127.842252][ T8743] RDX: 0000000000000004 RSI: 000080000000000b RDI: 0000000000000000 [ 127.842270][ T8743] RBP: 00007fc25b31503b R08: 0000200000048000 R09: 0000000000000000 [ 127.842375][ T8743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.842393][ T8743] R13: 00007fc25b506038 R14: 00007fc25b505fa0 R15: 00007ffc31480ee8 [ 127.842416][ T8743] [ 128.140041][ T8753] loop5: detected capacity change from 0 to 512 [ 128.180308][ T8753] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.180384][ T8753] ext4 filesystem being mounted at /359/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 128.190943][ T8753] EXT4-fs error (device loop5): ext4_map_blocks:790: inode #2: block 18: comm syz.5.1878: lblock 17 mapped to illegal pblock 18 (length 1) [ 128.265471][ T3721] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.382749][ T8771] loop9: detected capacity change from 0 to 512 [ 128.398440][ T8771] EXT4-fs error (device loop9) in ext4_process_orphan:346: Out of memory [ 128.398496][ T8771] loop9: lost filesystem error report for type 5 error -12 [ 128.401123][ T8771] EXT4-fs (loop9): 2 truncates cleaned up [ 128.401623][ T8771] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.475269][ T7976] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.530665][ T8786] xt_CT: You must specify a L4 protocol and not use inversions on it [ 128.578960][ T8794] loop9: detected capacity change from 0 to 512 [ 128.580184][ T8794] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 128.587989][ T8794] EXT4-fs error (device loop9): ext4_orphan_get:1429: comm syz.9.1895: bad orphan inode 131083 [ 128.588064][ T8794] loop9: lost filesystem error report for type 5 error -117 [ 128.590557][ T8794] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 128.724976][ T7976] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.962952][ T8835] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1911'. [ 129.011637][ T8839] loop9: detected capacity change from 0 to 512 [ 129.016999][ T8839] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.026566][ T8839] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.037474][ T8839] EXT4-fs (loop9): shut down requested (1) [ 129.038675][ T8839] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 129.038756][ T8839] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 129.039085][ T8839] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=13 [ 129.039229][ T8839] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 129.039403][ T8839] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 129.042084][ T8839] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=12 [ 129.042218][ T8839] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=13 [ 129.042716][ T8839] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=loop9 ino=15 [ 129.114503][ T7976] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.382135][ T8868] loop9: detected capacity change from 0 to 4096 [ 129.410663][ T8868] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 129.434391][ T8868] EXT4-fs (loop9): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 129.484576][ T7976] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.509872][ T8885] sctp: [Deprecated]: syz.4.1935 (pid 8885) Use of struct sctp_assoc_value in delayed_ack socket option. [ 129.509872][ T8885] Use struct sctp_sack_info instead [ 129.611587][ T8899] loop8: detected capacity change from 0 to 512 [ 129.635296][ T8899] EXT4-fs error (device loop8): ext4_orphan_get:1403: inode #15: comm syz.8.1940: inode has both inline data and extents flags [ 129.635335][ T8899] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 129.635486][ T8899] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.1940: couldn't read orphan inode 15 (err -117) [ 129.635521][ T8899] loop8: lost filesystem error report for type 5 error -117 [ 129.636068][ T8899] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.741302][ T8888] loop9: detected capacity change from 0 to 512 [ 129.759600][ T8888] ext4: Unknown parameter 'uid' [ 129.886196][ T8918] loop5: detected capacity change from 0 to 8192 [ 130.270063][ T7741] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.387936][ T8961] loop8: detected capacity change from 0 to 1024 [ 130.399875][ T8961] EXT4-fs: Ignoring removed oldalloc option [ 130.448637][ T8961] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.573434][ T7741] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.790214][ T8995] loop9: detected capacity change from 0 to 164 [ 130.901014][ T9001] loop5: detected capacity change from 0 to 512 [ 130.918106][ T9001] EXT4-fs: Ignoring removed nobh option [ 130.932005][ T9001] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -2 [ 130.932104][ T9001] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #13: comm syz.5.1982: inode has both inline data and extents flags [ 130.932161][ T9001] loop5: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 130.932415][ T9001] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.1982: couldn't read orphan inode 13 (err -117) [ 130.932441][ T9001] loop5: lost filesystem error report for type 5 error -117 [ 130.933034][ T9001] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 131.063430][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 131.063692][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 131.094636][ T9001] EXT4-fs warning (device loop5): ext4_lookup:1799: Inconsistent encryption contexts: 2/12 [ 131.095167][ T29] kauditd_printk_skb: 103 callbacks suppressed [ 131.095184][ T29] audit: type=1400 audit(1789273999.629:1579): avc: denied { write } for pid=9000 comm="syz.5.1982" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.124306][ T29] audit: type=1400 audit(1789273999.649:1580): avc: denied { write } for pid=9005 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.167982][ T3721] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 131.210983][ T29] audit: type=1400 audit(1789273999.739:1581): avc: denied { write } for pid=9018 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.369577][ T29] audit: type=1400 audit(1789273999.899:1582): avc: denied { write } for pid=9025 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.417782][ T29] audit: type=1400 audit(1789273999.949:1583): avc: denied { write } for pid=9038 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.601058][ T9053] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.601118][ T9053] bridge0: port 2(bridge_slave_1) entered listening state [ 131.601272][ T9053] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.601308][ T9053] bridge0: port 1(bridge_slave_0) entered listening state [ 131.662570][ T9053] veth1_macvtap: entered promiscuous mode [ 131.811475][ T9065] EXT4-fs error (device loop8): ext4_orphan_get:1403: inode #15: comm syz.8.1996: inode has both inline data and extents flags [ 131.811561][ T9065] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 131.811739][ T9065] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.1996: couldn't read orphan inode 15 (err -117) [ 131.811774][ T9065] loop8: lost filesystem error report for type 5 error -117 [ 131.812326][ T9065] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.873525][ T29] audit: type=1400 audit(1789274000.409:1584): avc: denied { write } for pid=9063 comm="syz.8.1996" name="file0" dev="loop8" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 131.874322][ T9065] EXT4-fs (loop8): shut down requested (0) [ 131.884694][ T29] audit: type=1400 audit(1789274000.419:1585): avc: denied { search } for pid=2965 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 131.962372][ T7741] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 132.032420][ T29] audit: type=1400 audit(1789274000.559:1586): avc: denied { write } for pid=9073 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.083264][ T29] audit: type=1400 audit(1789274000.609:1587): avc: denied { write } for pid=9094 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 132.254448][ T29] audit: type=1400 audit(1789274000.789:1588): avc: denied { unmount } for pid=7741 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 132.333579][ T9109] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2009'. [ 132.333894][ T9109] netlink: 40 bytes leftover after parsing attributes in process `syz.8.2009'. [ 132.449336][ T9123] veth1_to_bond: entered allmulticast mode [ 132.449402][ T9124] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2016'. [ 132.449660][ T9123] veth1_to_bond: left allmulticast mode [ 132.870727][ T9150] Invalid ELF header magic: != ELF [ 132.962316][ T9159] EXT4-fs (loop5): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 132.976053][ T9159] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.015241][ T3721] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.238020][ T9171] FAULT_INJECTION: forcing a failure. [ 133.238020][ T9171] name failslab, interval 1, probability 0, space 0, times 0 [ 133.238057][ T9171] CPU: 1 UID: 0 PID: 9171 Comm: syz.9.2036 Not tainted syzkaller #0 PREEMPT(lazy) [ 133.238164][ T9171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 133.238182][ T9171] Call Trace: [ 133.238190][ T9171] [ 133.238197][ T9171] __dump_stack+0x1d/0x30 [ 133.238226][ T9171] dump_stack_lvl+0x95/0xd0 [ 133.238248][ T9171] dump_stack+0x15/0x1b [ 133.238298][ T9171] should_fail_ex+0x262/0x280 [ 133.238331][ T9171] should_failslab+0x8c/0xb0 [ 133.238407][ T9171] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 133.238441][ T9171] ? __d_alloc+0x34/0x320 [ 133.238470][ T9171] ? __d_alloc+0x34/0x320 [ 133.238505][ T9171] __d_alloc+0x34/0x320 [ 133.238536][ T9171] ? d_alloc_pseudo+0x13/0x80 [ 133.238627][ T9171] d_alloc_pseudo+0x1e/0x80 [ 133.238734][ T9171] alloc_path_pseudo+0xa4/0x140 [ 133.238764][ T9171] alloc_file_pseudo+0x55/0x120 [ 133.238853][ T9171] sock_alloc_file+0x9c/0x1e0 [ 133.238888][ T9171] __sys_socket+0x118/0x180 [ 133.239057][ T9171] __x64_sys_socket+0x3f/0x50 [ 133.239093][ T9171] x64_sys_call+0x246e/0x2550 [ 133.239180][ T9171] do_syscall_64+0x112/0x360 [ 133.239230][ T9171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.239261][ T9171] RIP: 0033:0x7f40b813e159 [ 133.239279][ T9171] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 133.239299][ T9171] RSP: 002b:00007f40b6b97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 133.239343][ T9171] RAX: ffffffffffffffda RBX: 00007f40b83c5fa0 RCX: 00007f40b813e159 [ 133.239395][ T9171] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 0000000000000018 [ 133.239413][ T9171] RBP: 00007f40b81d503b R08: 0000000000000000 R09: 0000000000000000 [ 133.239431][ T9171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 133.239444][ T9171] R13: 00007f40b83c6038 R14: 00007f40b83c5fa0 R15: 00007ffe80ec4db8 [ 133.239548][ T9171] [ 133.764551][ T9199] 9pnet: Limiting 'msize' to 1048576 as this is the maximum supported by transport fd [ 133.855107][ T9207] sctp: [Deprecated]: syz.8.2046 (pid 9207) Use of int in max_burst socket option. [ 133.855107][ T9207] Use struct sctp_assoc_value instead [ 133.941707][ T9216] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.941755][ T9216] bridge0: port 2(bridge_slave_1) entered listening state [ 133.941835][ T9216] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.941874][ T9216] bridge0: port 1(bridge_slave_0) entered listening state [ 133.951088][ T9213] set_capacity_and_notify: 4 callbacks suppressed [ 133.951132][ T9213] loop5: detected capacity change from 0 to 512 [ 133.991063][ T9213] FAT-fs (loop5): error, corrupted file size (i_pos 51, 512) [ 133.991298][ T9213] FAT-fs (loop5): error, invalid FAT chain (i_pos 51, last_block 64) [ 133.991744][ T9217] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2049'. [ 134.056879][ T9217] bond0: ARP target 8.4.0.0 is already present [ 134.056910][ T9217] bond0: option arp_ip_target: invalid value (1032) [ 134.115407][ T9222] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2053'. [ 134.156582][ T9228] macvtap1: entered allmulticast mode [ 134.156783][ T9228] vlan0: entered allmulticast mode [ 134.156803][ T9228] veth0_vlan: entered allmulticast mode [ 134.157846][ T9228] team0: Device macvtap1 failed to register rx_handler [ 134.158372][ T9228] vlan0: left allmulticast mode [ 134.158392][ T9228] veth0_vlan: left allmulticast mode [ 134.368236][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2064'. [ 134.813653][ T9280] 9p: Bad value for 'rfdno' [ 134.952688][ T9290] loop8: detected capacity change from 0 to 512 [ 134.978959][ T9290] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 134.979044][ T9290] ext4 filesystem being mounted at /111/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 135.029267][ T7741] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 135.379072][ T9316] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2090'. [ 135.817090][ T9363] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=9363 comm=syz.2.2111 [ 135.992440][ T9385] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2122'. [ 136.503764][ T9416] batadv_slave_1: entered promiscuous mode [ 136.504444][ T9415] batadv_slave_1: left promiscuous mode [ 136.706740][ T12] IPVS: starting estimator thread 0... [ 136.707507][ T9438] loop5: detected capacity change from 0 to 1024 [ 136.707924][ T9438] EXT4-fs: dax option not supported [ 136.732445][ T9437] veth0: entered promiscuous mode [ 136.732910][ T9435] veth0: left promiscuous mode [ 136.776199][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2146'. [ 136.793873][ T9442] IPVS: using max 2208 ests per chain, 110400 per kthread [ 136.950194][ T9457] loop5: detected capacity change from 0 to 256 [ 137.004164][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 137.004184][ T29] audit: type=1326 audit(1789274005.539:1600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9460 comm="syz.9.2153" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b813e159 code=0x7ffc0000 [ 137.004241][ T29] audit: type=1326 audit(1789274005.539:1601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9460 comm="syz.9.2153" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b813e159 code=0x7ffc0000 [ 137.005586][ T29] audit: type=1326 audit(1789274005.539:1602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9460 comm="syz.9.2153" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=304 compat=0 ip=0x7f40b813e159 code=0x7ffc0000 [ 137.005618][ T29] audit: type=1326 audit(1789274005.539:1603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9460 comm="syz.9.2153" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b813e159 code=0x7ffc0000 [ 137.005703][ T29] audit: type=1326 audit(1789274005.539:1604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9460 comm="syz.9.2153" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b813e159 code=0x7ffc0000 [ 137.446453][ T9488] vcan0: tx address claim with dlc 0 [ 137.538360][ T9500] geneve2: entered promiscuous mode [ 137.540864][ T9499] bridge0: port 3(syz_tun) entered blocking state [ 137.540904][ T9499] bridge0: port 3(syz_tun) entered disabled state [ 137.541024][ T9499] syz_tun: entered allmulticast mode [ 137.541552][ T9499] syz_tun: entered promiscuous mode [ 137.541833][ T9499] bridge0: port 3(syz_tun) entered blocking state [ 137.541871][ T9499] bridge0: port 3(syz_tun) entered forwarding state [ 137.556044][ T9499] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 137.598711][ T3425] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 42402 - 0 [ 137.607828][ T3425] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 42402 - 0 [ 137.608030][ T3425] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 42402 - 0 [ 137.608256][ T3425] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 42402 - 0 [ 137.811862][ T9520] syzkaller1: entered promiscuous mode [ 137.811883][ T9520] syzkaller1: entered allmulticast mode [ 137.842338][ T9530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 137.842599][ T9530] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 137.874394][ T29] audit: type=1326 audit(1789274006.409:1605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9531 comm="syz.4.2183" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6da00e159 code=0x7ffc0000 [ 137.874438][ T29] audit: type=1326 audit(1789274006.409:1606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9531 comm="syz.4.2183" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6da00e159 code=0x7ffc0000 [ 137.875374][ T29] audit: type=1326 audit(1789274006.409:1607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9531 comm="syz.4.2183" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6da00e159 code=0x7ffc0000 [ 137.875647][ T29] audit: type=1326 audit(1789274006.409:1608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9531 comm="syz.4.2183" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fa6da00e159 code=0x7ffc0000 [ 137.876414][ T29] audit: type=1326 audit(1789274006.409:1609): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9531 comm="syz.4.2183" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6da00e159 code=0x7ffc0000 [ 138.544661][ T9602] loop9: detected capacity change from 0 to 512 [ 138.571509][ T9602] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.571590][ T9602] ext4 filesystem being mounted at /109/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 138.656079][ T9611] loop8: detected capacity change from 0 to 4096 [ 138.664815][ T9611] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 138.704371][ T9615] macsec0: entered allmulticast mode [ 138.704393][ T9615] veth1_macvtap: entered allmulticast mode [ 138.721348][ T7976] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.747941][ T9615] veth1_macvtap: left allmulticast mode [ 138.747971][ T9615] veth1_macvtap: left promiscuous mode [ 138.748070][ T9615] macsec0: left allmulticast mode [ 138.795897][ T7741] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 138.834436][ T9621] loop5: detected capacity change from 0 to 512 [ 138.854538][ T9621] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.2224: inode has both inline data and extents flags [ 138.854623][ T9621] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 138.854793][ T9621] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.2224: couldn't read orphan inode 15 (err -117) [ 138.854818][ T9621] loop5: lost filesystem error report for type 5 error -117 [ 138.857770][ T9621] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 139.231608][ T9655] loop8: detected capacity change from 0 to 512 [ 139.237405][ T9655] EXT4-fs error (device loop8): ext4_iget_extra_inode:5210: inode #15: comm syz.8.2238: corrupted in-inode xattr: invalid ea_ino [ 139.237517][ T9655] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 139.237951][ T9655] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.2238: couldn't read orphan inode 15 (err -117) [ 139.238109][ T9655] loop8: lost filesystem error report for type 5 error -117 [ 139.239499][ T9655] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 139.319496][ T7741] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.442932][ T9668] syzkaller1: entered promiscuous mode [ 139.442959][ T9668] syzkaller1: entered allmulticast mode [ 139.659043][ T3721] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 139.800674][ T9694] loop8: detected capacity change from 0 to 1024 [ 139.802007][ T9694] EXT4-fs: dax option not supported [ 139.878050][ T9704] FAULT_INJECTION: forcing a failure. [ 139.878050][ T9704] name failslab, interval 1, probability 0, space 0, times 0 [ 139.878103][ T9704] CPU: 0 UID: 0 PID: 9704 Comm: syz.5.2270 Not tainted syzkaller #0 PREEMPT(lazy) [ 139.878159][ T9704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 139.878174][ T9704] Call Trace: [ 139.878181][ T9704] [ 139.878221][ T9704] __dump_stack+0x1d/0x30 [ 139.878251][ T9704] dump_stack_lvl+0x95/0xd0 [ 139.878277][ T9704] dump_stack+0x15/0x1b [ 139.878301][ T9704] should_fail_ex+0x262/0x280 [ 139.878351][ T9704] should_failslab+0x8c/0xb0 [ 139.878385][ T9704] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 139.878495][ T9704] ? __d_alloc+0x34/0x320 [ 139.878577][ T9704] ? __d_alloc+0x34/0x320 [ 139.878638][ T9704] __d_alloc+0x34/0x320 [ 139.878673][ T9704] ? d_alloc_pseudo+0x13/0x80 [ 139.878703][ T9704] d_alloc_pseudo+0x1e/0x80 [ 139.878731][ T9704] alloc_path_pseudo+0xa4/0x140 [ 139.878790][ T9704] alloc_file_pseudo+0x55/0x120 [ 139.878816][ T9704] sock_alloc_file+0x9c/0x1e0 [ 139.878844][ T9704] __sys_socket+0x118/0x180 [ 139.878887][ T9704] __x64_sys_socket+0x3f/0x50 [ 139.878978][ T9704] x64_sys_call+0x246e/0x2550 [ 139.879009][ T9704] do_syscall_64+0x112/0x360 [ 139.879096][ T9704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.879127][ T9704] RIP: 0033:0x7ff53e27e159 [ 139.879145][ T9704] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 139.879168][ T9704] RSP: 002b:00007ff53ccd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 139.879192][ T9704] RAX: ffffffffffffffda RBX: 00007ff53e505fa0 RCX: 00007ff53e27e159 [ 139.879248][ T9704] RDX: 0000000000000002 RSI: 0000000000000001 RDI: 0000000000000018 [ 139.879264][ T9704] RBP: 00007ff53e31503b R08: 0000000000000000 R09: 0000000000000000 [ 139.879279][ T9704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.879293][ T9704] R13: 00007ff53e506038 R14: 00007ff53e505fa0 R15: 00007ffcfc030f38 [ 139.879317][ T9704] [ 139.882588][ T9705] loop9: detected capacity change from 0 to 1024 [ 139.932612][ T9707] syzkaller1: entered promiscuous mode [ 139.932669][ T9707] syzkaller1: entered allmulticast mode [ 140.017340][ T9705] EXT4-fs (loop9): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 140.073585][ T9705] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.173744][ T7976] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.201421][ T9717] loop9: detected capacity change from 0 to 512 [ 140.223014][ T9717] EXT4-fs error (device loop9): ext4_orphan_get:1403: inode #15: comm syz.9.2265: inode has both inline data and extents flags [ 140.223081][ T9717] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 140.223252][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 140.223287][ C1] EXT4-fs (loop9): initial error at time 1789274008: ext4_orphan_get:1403: inode 15 [ 140.223316][ C1] EXT4-fs (loop9): last error at time 1789274008: ext4_orphan_get:1403: inode 15 [ 140.236606][ T9717] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.2265: couldn't read orphan inode 15 (err -117) [ 140.236646][ T9717] loop9: lost filesystem error report for type 5 error -117 [ 140.244381][ T9717] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 140.577989][ T9741] loop5: detected capacity change from 0 to 512 [ 140.620720][ T9726] batadv1: entered promiscuous mode [ 140.620978][ T9726] batadv1: entered allmulticast mode [ 140.621708][ T9741] EXT4-fs (loop5): orphan cleanup on readonly fs [ 140.622298][ T9741] EXT4-fs error (device loop5): ext4_xattr_inode_iget:473: comm syz.5.2275: EA inode 11 has unexpected i_nlink=2 ref_count=7168870745731235840 [ 140.622328][ T9741] loop5: lost filesystem error report for type 5 error -117 [ 140.622600][ T9741] EXT4-fs (loop5): 1 orphan inode deleted [ 140.623107][ T9741] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 140.759836][ T3721] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.903068][ T7976] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.963136][ T9771] loop8: detected capacity change from 0 to 512 [ 141.000495][ T9771] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.000618][ T9771] ext4 filesystem being mounted at /141/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 141.056871][ T9771] EXT4-fs error (device loop8): ext4_map_blocks:790: inode #2: block 18: comm syz.8.2288: lblock 17 mapped to illegal pblock 18 (length 1) [ 141.114768][ T9777] loop9: detected capacity change from 0 to 1024 [ 141.115178][ T9777] EXT4-fs: dax option not supported [ 141.186130][ T7741] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.248040][ T9783] netlink: 83 bytes leftover after parsing attributes in process `syz.8.2302'. [ 141.345035][ T9789] loop8: detected capacity change from 0 to 256 [ 141.345622][ T9789] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 141.404749][ T9794] loop5: detected capacity change from 0 to 164 [ 141.437730][ T9788] loop9: detected capacity change from 0 to 1024 [ 141.438355][ T9788] EXT4-fs: dax option not supported [ 141.578348][ T9807] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 141.579610][ T9807] ext4 filesystem being mounted at /124/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.608140][ T7976] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 141.721941][ T9818] EXT4-fs (loop9): mounting ext2 file system using the ext4 subsystem [ 141.737113][ T9818] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 141.737290][ T9818] EXT4-fs (loop9): orphan cleanup on readonly fs [ 141.740617][ T9818] EXT4-fs error (device loop9): ext4_orphan_get:1403: inode #17: comm syz.9.2308: invalid orphan symlink nlink 1 [ 141.740734][ T9818] loop9: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 141.741032][ T9818] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.2308: couldn't read orphan inode 17 (err -117) [ 141.741116][ T9818] loop9: lost filesystem error report for type 5 error -117 [ 141.741772][ T9818] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 141.751932][ T9818] EXT4-fs (loop9): shut down requested (0) [ 141.886348][ T7976] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.967488][ T9828] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 141.969486][ T9825] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 141.969581][ T9825] ext4 filesystem being mounted at /426/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 141.972316][ T9825] EXT4-fs (loop5): shut down requested (1) [ 142.033091][ T3721] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 142.039582][ T9832] FAULT_INJECTION: forcing a failure. [ 142.039582][ T9832] name failslab, interval 1, probability 0, space 0, times 0 [ 142.039758][ T9832] CPU: 0 UID: 0 PID: 9832 Comm: syz.9.2313 Not tainted syzkaller #0 PREEMPT(lazy) [ 142.039837][ T9832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 142.039887][ T9832] Call Trace: [ 142.039971][ T9832] [ 142.040003][ T9832] __dump_stack+0x1d/0x30 [ 142.040131][ T9832] dump_stack_lvl+0x95/0xd0 [ 142.040200][ T9832] dump_stack+0x15/0x1b [ 142.040272][ T9832] should_fail_ex+0x262/0x280 [ 142.040354][ T9832] ? rfkill_fop_open+0x3f/0x2f0 [ 142.040524][ T9832] should_failslab+0x8c/0xb0 [ 142.040639][ T9832] __kmalloc_cache_noprof+0x7a/0x400 [ 142.040783][ T9832] ? avc_has_perm_noaudit+0xa3/0x120 [ 142.040887][ T9832] ? rfkill_fop_open+0x3f/0x2f0 [ 142.041008][ T9832] rfkill_fop_open+0x3f/0x2f0 [ 142.041129][ T9832] ? __pfx_rfkill_fop_open+0x10/0x10 [ 142.041292][ T9832] misc_open+0x1df/0x220 [ 142.041385][ T9832] chrdev_open+0x2eb/0x3a0 [ 142.041493][ T9832] do_dentry_open+0x49f/0xa60 [ 142.041568][ T9832] ? __pfx_chrdev_open+0x10/0x10 [ 142.041747][ T9832] vfs_open+0x37/0x1e0 [ 142.041821][ T9832] path_openat+0xc01/0x10d0 [ 142.041930][ T9832] do_file_open+0x16c/0x290 [ 142.042116][ T9832] do_sys_openat2+0xa0/0x130 [ 142.042185][ T9832] __x64_sys_openat+0xf2/0x120 [ 142.042269][ T9832] x64_sys_call+0x1f72/0x2550 [ 142.042352][ T9832] do_syscall_64+0x112/0x360 [ 142.042397][ T9832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.042426][ T9832] RIP: 0033:0x7f40b813e159 [ 142.042455][ T9832] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 142.042481][ T9832] RSP: 002b:00007f40b6b97028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 142.042505][ T9832] RAX: ffffffffffffffda RBX: 00007f40b83c5fa0 RCX: 00007f40b813e159 [ 142.042533][ T9832] RDX: 0000000000000200 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 142.042613][ T9832] RBP: 00007f40b81d503b R08: 0000000000000000 R09: 0000000000000000 [ 142.042673][ T9832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 142.042730][ T9832] R13: 00007f40b83c6038 R14: 00007f40b83c5fa0 R15: 00007ffe80ec4db8 [ 142.042809][ T9832] [ 142.329325][ T29] kauditd_printk_skb: 66 callbacks suppressed [ 142.329347][ T29] audit: type=1400 audit(1789274010.859:1676): avc: denied { getopt } for pid=9845 comm="syz.2.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 142.365792][ T9843] EXT4-fs: dax option not supported [ 143.711776][ T9927] EXT4-fs: Ignoring removed oldalloc option [ 143.711808][ T9927] EXT4-fs: inline encryption not supported [ 143.728847][ T9928] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2351'. [ 143.744073][ T9927] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 143.748613][ T29] audit: type=1400 audit(1789274012.279:1677): avc: denied { watch watch_reads } for pid=9926 comm="syz.5.2353" path="/437/bus/file0" dev="loop5" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.750379][ T29] audit: type=1400 audit(1789274012.279:1678): avc: denied { write } for pid=9926 comm="syz.5.2353" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.750479][ T29] audit: type=1400 audit(1789274012.279:1679): avc: denied { write } for pid=9926 comm="syz.5.2353" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 143.782881][ T9928] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2351'. [ 143.819132][ T9932] SELinux: Context system_u:object_r:fsa is not valid (left unmapped). [ 143.819700][ T29] audit: type=1400 audit(1789274012.339:1680): avc: denied { relabelto } for pid=9926 comm="syz.5.2353" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:fsa" [ 146.423278][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.423301][ C1] bridge0: topology change detected, propagating [ 146.423387][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.423422][ C1] bridge0: topology change detected, propagating [ 146.687651][ T3721] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 146.790321][ T9972] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2368'. [ 146.815132][ T9972] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2368'. [ 146.955571][ T9982] netlink: 'syz.5.2374': attribute type 10 has an invalid length. [ 146.980965][ T9982] bond0: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 147.063500][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 147.063558][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 147.288434][ T29] audit: type=1400 audit(1789274015.819:1681): avc: denied { ioctl } for pid=10005 comm="syz.2.2385" path="socket:[25542]" dev="sockfs" ino=25542 ioctlcmd=0x61f2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 147.517797][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2392'. [ 147.734914][T10045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2402'. [ 147.739522][T10045] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2402'. [ 147.805824][T10028] set_capacity_and_notify: 5 callbacks suppressed [ 147.807393][T10028] loop8: detected capacity change from 0 to 512 [ 147.858316][T10028] ext4: Unknown parameter 'uid' [ 148.177365][ T29] audit: type=1326 audit(1789274016.709:1682): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10071 comm="syz.5.2414" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53e27e159 code=0x7ffc0000 [ 148.177412][ T29] audit: type=1326 audit(1789274016.709:1683): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10071 comm="syz.5.2414" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53e27e159 code=0x7ffc0000 [ 148.178897][ T29] audit: type=1326 audit(1789274016.709:1684): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10071 comm="syz.5.2414" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53e27e159 code=0x7ffc0000 [ 148.178935][ T29] audit: type=1326 audit(1789274016.709:1685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10071 comm="syz.5.2414" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53e27e159 code=0x7ffc0000 [ 148.179198][ T29] audit: type=1326 audit(1789274016.709:1686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10071 comm="syz.5.2414" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7ff53e27e159 code=0x7ffc0000 [ 148.179251][ T29] audit: type=1326 audit(1789274016.709:1687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10071 comm="syz.5.2414" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53e27e159 code=0x7ffc0000 [ 148.179291][ T29] audit: type=1326 audit(1789274016.709:1688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10071 comm="syz.5.2414" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff53e27e159 code=0x7ffc0000 [ 148.180793][ T29] audit: type=1326 audit(1789274016.709:1689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10071 comm="syz.5.2414" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff53e27e159 code=0x7ffc0000 [ 148.406234][ T29] audit: type=1326 audit(1789274016.939:1690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10071 comm="syz.5.2414" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff53e27e159 code=0x7ffc0000 [ 148.489561][T10084] loop5: detected capacity change from 0 to 512 [ 148.502897][T10084] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.2420: inode has both inline data and extents flags [ 148.502977][T10084] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 148.503302][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 148.503323][ C1] EXT4-fs (loop5): initial error at time 1789274017: ext4_orphan_get:1403: inode 15 [ 148.503355][ C1] EXT4-fs (loop5): last error at time 1789274017: ext4_orphan_get:1403: inode 15 [ 148.505263][T10084] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.2420: couldn't read orphan inode 15 (err -117) [ 148.505354][T10084] loop5: lost filesystem error report for type 5 error -117 [ 148.507039][T10084] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 148.546902][ T29] audit: type=1400 audit(1789274017.079:1691): avc: denied { write } for pid=10083 comm="syz.5.2420" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 148.631102][ T3721] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 148.733759][T10096] loop9: detected capacity change from 0 to 128 [ 148.733953][T10097] loop8: detected capacity change from 0 to 1024 [ 148.734212][T10096] FAT-fs (loop9): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 148.750236][T10096] FAT-fs (loop9): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 148.776012][T10097] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 148.776193][T10097] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 148.779951][T10097] EXT4-fs error (device loop8): ext4_xattr_block_get:608: inode #15: comm syz.8.2425: corrupted xattr block 128: overlapping e_value [ 148.780158][T10097] EXT4-fs (loop8): Remounting filesystem read-only [ 148.780193][T10097] SELinux: inode_doinit_use_xattr: getxattr returned 117 for dev=loop8 ino=15 [ 148.893051][ T7741] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 148.983303][ C1] bridge0: port 1(bridge_slave_0) entered learning state [ 148.983380][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 149.012911][T10092] loop5: detected capacity change from 0 to 512 [ 149.018850][T10092] ext4: Unknown parameter 'uid' [ 149.412175][T10140] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2445'. [ 149.514115][T10151] ip_tables: iptables: counters copy to user failed while replacing table [ 149.699395][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 149.814888][T10168] loop9: detected capacity change from 0 to 512 [ 149.826963][T10168] EXT4-fs: Ignoring removed oldalloc option [ 149.826995][T10168] EXT4-fs: inline encryption not supported [ 149.832155][T10168] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.873052][ T7976] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.713472][ T3587] Bluetooth: hci0: command 0x1003 tx timeout [ 151.713510][ T4537] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 151.756411][T10178] loop9: detected capacity change from 0 to 256 [ 151.791979][T10178] FAT-fs (loop9): IO charset cp1255 not found [ 151.822719][T10178] netlink: 136 bytes leftover after parsing attributes in process `syz.9.2469'. [ 151.897959][T10191] FAULT_INJECTION: forcing a failure. [ 151.897959][T10191] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 151.898020][T10191] CPU: 1 UID: 0 PID: 10191 Comm: syz.9.2465 Not tainted syzkaller #0 PREEMPT(lazy) [ 151.898050][T10191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 151.898127][T10191] Call Trace: [ 151.898135][T10191] [ 151.898144][T10191] __dump_stack+0x1d/0x30 [ 151.898241][T10191] dump_stack_lvl+0x95/0xd0 [ 151.898267][T10191] dump_stack+0x15/0x1b [ 151.898290][T10191] should_fail_ex+0x262/0x280 [ 151.898318][T10191] should_fail+0xb/0x20 [ 151.898341][T10191] should_fail_usercopy+0x1a/0x20 [ 151.898372][T10191] _copy_from_user+0x1c/0xb0 [ 151.898403][T10191] core_sys_select+0x331/0x730 [ 151.898466][T10191] __se_sys_pselect6+0x23f/0x2a0 [ 151.898556][T10191] __x64_sys_pselect6+0x78/0x90 [ 151.898595][T10191] x64_sys_call+0x1dfc/0x2550 [ 151.898624][T10191] do_syscall_64+0x112/0x360 [ 151.898676][T10191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.898701][T10191] RIP: 0033:0x7f40b813e159 [ 151.898796][T10191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 151.898916][T10191] RSP: 002b:00007f40b6b97028 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 151.898942][T10191] RAX: ffffffffffffffda RBX: 00007f40b83c5fa0 RCX: 00007f40b813e159 [ 151.898997][T10191] RDX: 0000200000000180 RSI: 00002000000000c0 RDI: 0000000000000040 [ 151.899013][T10191] RBP: 00007f40b81d503b R08: 0000200000000400 R09: 0000200000000480 [ 151.899029][T10191] R10: 00002000000003c0 R11: 0000000000000246 R12: 0000000000000000 [ 151.899044][T10191] R13: 00007f40b83c6038 R14: 00007f40b83c5fa0 R15: 00007ffe80ec4db8 [ 151.899067][T10191] [ 152.359767][T10203] loop9: detected capacity change from 0 to 512 [ 152.384436][T10205] tipc: Started in network mode [ 152.384454][T10205] tipc: Node identity 2007ff, cluster identity 4711 [ 152.384465][T10205] tipc: Node number set to 2099199 [ 152.387175][T10203] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.463960][ T7976] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.521757][T10210] loop8: detected capacity change from 0 to 8192 [ 152.605452][T10220] IPVS: ovf: UDP 224.0.0.2:0 - no destination available [ 152.735613][T10233] loop8: detected capacity change from 0 to 1024 [ 152.738462][T10233] EXT4-fs: Ignoring removed bh option [ 152.767904][T10233] EXT4-fs (loop8): stripe (17) is not aligned with cluster size (16), stripe is disabled [ 152.794619][T10233] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 152.929358][ T7741] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 152.987523][T10258] ip6gretap1: entered allmulticast mode [ 152.988930][T10258] batman_adv: batadv0: Adding interface: ip6gretap1 [ 152.988943][T10258] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 152.988974][T10258] batman_adv: batadv0: Interface activated: ip6gretap1 [ 153.316673][ T29] kauditd_printk_skb: 35 callbacks suppressed [ 153.316693][ T29] audit: type=1400 audit(1789274021.849:1727): avc: denied { name_bind } for pid=10299 comm="syz.2.2514" src=28196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 153.430058][ T29] audit: type=1326 audit(1789274021.959:1728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10312 comm="syz.9.2520" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b813e159 code=0x7ffc0000 [ 153.431219][ T29] audit: type=1326 audit(1789274021.959:1729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10312 comm="syz.9.2520" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b813e159 code=0x7ffc0000 [ 153.431536][ T29] audit: type=1326 audit(1789274021.959:1730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10312 comm="syz.9.2520" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f40b813e159 code=0x7ffc0000 [ 153.432231][ T29] audit: type=1326 audit(1789274021.959:1731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10312 comm="syz.9.2520" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b813e159 code=0x7ffc0000 [ 153.432386][ T29] audit: type=1326 audit(1789274021.959:1732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10312 comm="syz.9.2520" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b813e159 code=0x7ffc0000 [ 153.435415][ T29] audit: type=1326 audit(1789274021.969:1733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10312 comm="syz.9.2520" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b813e159 code=0x7ffc0000 [ 153.436678][ T29] audit: type=1326 audit(1789274021.969:1734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10312 comm="syz.9.2520" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b813e159 code=0x7ffc0000 [ 153.438654][ T29] audit: type=1326 audit(1789274021.969:1735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10312 comm="syz.9.2520" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f40b813e159 code=0x7ffc0000 [ 153.440483][ T29] audit: type=1326 audit(1789274021.969:1736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10312 comm="syz.9.2520" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40b813e159 code=0x7ffc0000 [ 153.972178][T10348] pimreg: entered allmulticast mode [ 154.005887][T10351] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2538'. [ 154.005924][T10351] netlink: 'syz.9.2538': attribute type 20 has an invalid length. [ 154.005942][T10351] netlink: 'syz.9.2538': attribute type 21 has an invalid length. [ 154.605998][T10383] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2554'. [ 154.625462][T10379] loop5: detected capacity change from 0 to 8192 [ 154.682384][T10379] FAT-fs (loop5): error, invalid access to FAT (entry 0x0000e1b1) [ 154.682414][T10379] FAT-fs (loop5): Filesystem has been set read-only [ 154.858309][T10400] FAULT_INJECTION: forcing a failure. [ 154.858309][T10400] name failslab, interval 1, probability 0, space 0, times 0 [ 154.858344][T10400] CPU: 0 UID: 0 PID: 10400 Comm: syz.8.2561 Not tainted syzkaller #0 PREEMPT(lazy) [ 154.858370][T10400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 154.858383][T10400] Call Trace: [ 154.858390][T10400] [ 154.858399][T10400] __dump_stack+0x1d/0x30 [ 154.858472][T10400] dump_stack_lvl+0x95/0xd0 [ 154.858495][T10400] dump_stack+0x15/0x1b [ 154.858525][T10400] should_fail_ex+0x262/0x280 [ 154.858558][T10400] ? call_usermodehelper_setup+0x72/0x190 [ 154.858665][T10400] should_failslab+0x8c/0xb0 [ 154.858702][T10400] __kmalloc_cache_noprof+0x7a/0x400 [ 154.858746][T10400] ? call_usermodehelper_setup+0x72/0x190 [ 154.858822][T10400] ? __pfx_free_modprobe_argv+0x10/0x10 [ 154.858850][T10400] call_usermodehelper_setup+0x72/0x190 [ 154.858915][T10400] __request_module+0x264/0x3c0 [ 154.859030][T10400] inet6_create+0x12e/0x860 [ 154.859063][T10400] __sock_create+0x2e5/0x580 [ 154.859158][T10400] __sys_socket+0xaf/0x180 [ 154.859198][T10400] __x64_sys_socket+0x3f/0x50 [ 154.859314][T10400] x64_sys_call+0x246e/0x2550 [ 154.859349][T10400] do_syscall_64+0x112/0x360 [ 154.859396][T10400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.859469][T10400] RIP: 0033:0x7fc25b27e159 [ 154.859490][T10400] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 154.859512][T10400] RSP: 002b:00007fc259cd7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 154.859561][T10400] RAX: ffffffffffffffda RBX: 00007fc25b505fa0 RCX: 00007fc25b27e159 [ 154.859630][T10400] RDX: 0000000000000008 RSI: 000000000000000a RDI: 000000000000000a [ 154.859643][T10400] RBP: 00007fc25b31503b R08: 0000000000000000 R09: 0000000000000000 [ 154.859656][T10400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 154.859669][T10400] R13: 00007fc25b506038 R14: 00007fc25b505fa0 R15: 00007ffc31480ee8 [ 154.859696][T10400] [ 155.217617][T10418] loop9: detected capacity change from 0 to 1024 [ 155.230501][T10418] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8043c01c, mo2=0002] [ 155.231111][T10418] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 155.262419][T10418] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=8043c01c, mo2=0002] [ 155.305583][T10418] EXT4-fs warning (device loop9): ext4_multi_mount_protect:327: MMP startup interrupted, failing mount [ 155.305583][T10418] [ 155.342596][ T7976] EXT4-fs error (device loop9): ext4_readdir:280: inode #11: block 32: comm syz-executor: path /176/file1/lost+found: bad entry in directory: directory entry overrun - offset=12, inode=16777218, rec_len=196620, size=1024 fake=1 [ 155.369940][ T7976] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.495102][T10448] loop9: detected capacity change from 0 to 512 [ 155.496465][T10448] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 155.519817][T10448] EXT4-fs (loop9): 1 truncate cleaned up [ 155.520155][T10448] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.560491][ T7976] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.796508][T10466] 9p: Bad value for 'rfdno' [ 155.866632][T10472] xt_hashlimit: size too large, truncated to 1048576 [ 156.131308][T10480] loop9: detected capacity change from 0 to 128 [ 156.338756][T10502] loop8: detected capacity change from 0 to 256 [ 156.347434][T10502] vfat: Unknown parameter 'gi1/3' [ 156.472568][T10511] IPVS: sync thread started: state = BACKUP, mcast_ifn = macsec0, syncid = 3, id = 0 [ 156.607769][T10507] ================================================================== [ 156.607811][T10507] BUG: KCSAN: data-race in shmem_fallocate / shmem_writeout [ 156.607852][T10507] [ 156.607860][T10507] read-write to 0xffffc90004b97cc0 of 8 bytes by task 10512 on cpu 1: [ 156.607883][T10507] shmem_writeout+0x2eb/0x8f0 [ 156.607924][T10507] shrink_folio_list+0x1a81/0x26f0 [ 156.607960][T10507] evict_folios+0x1c6e/0x2830 [ 156.607989][T10507] try_to_shrink_lruvec+0x8fd/0xb30 [ 156.608012][T10507] shrink_lruvec+0x252/0x1d40 [ 156.608041][T10507] shrink_node+0x67c/0x2000 [ 156.608064][T10507] do_try_to_free_pages+0x408/0xca0 [ 156.608105][T10507] try_to_free_mem_cgroup_pages+0x201/0x420 [ 156.608147][T10507] mem_cgroup_resize_max+0x13d/0x290 [ 156.608184][T10507] mem_cgroup_write+0x132/0x1c0 [ 156.608215][T10507] cgroup_file_write+0x197/0x350 [ 156.608254][T10507] kernfs_fop_write_iter+0x1d2/0x2e0 [ 156.608282][T10507] vfs_write+0x57f/0x9a0 [ 156.608308][T10507] ksys_write+0xdc/0x1a0 [ 156.608334][T10507] __x64_sys_write+0x40/0x50 [ 156.608384][T10507] x64_sys_call+0x154e/0x2550 [ 156.608412][T10507] do_syscall_64+0x112/0x360 [ 156.608442][T10507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.608469][T10507] [ 156.608477][T10507] read to 0xffffc90004b97cc0 of 8 bytes by task 10507 on cpu 0: [ 156.608499][T10507] shmem_fallocate+0x5cb/0x8d0 [ 156.608523][T10507] vfs_fallocate+0x3ac/0x400 [ 156.608560][T10507] file_ioctl+0x4e1/0x5b0 [ 156.608589][T10507] do_vfs_ioctl+0x7c4/0xe50 [ 156.608617][T10507] __se_sys_ioctl+0x82/0x140 [ 156.608644][T10507] __x64_sys_ioctl+0x43/0x50 [ 156.608675][T10507] x64_sys_call+0x239d/0x2550 [ 156.608705][T10507] do_syscall_64+0x112/0x360 [ 156.608743][T10507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.608763][T10507] [ 156.608767][T10507] value changed: 0x000000000000015a -> 0x000000000000015d [ 156.608780][T10507] [ 156.608785][T10507] Reported by Kernel Concurrency Sanitizer on: [ 156.608799][T10507] CPU: 0 UID: 0 PID: 10507 Comm: syz.5.2609 Not tainted syzkaller #0 PREEMPT(lazy) [ 156.608832][T10507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/08/2026 [ 156.608848][T10507] ================================================================== [ 156.961949][T10517] loop9: detected capacity change from 0 to 512 [ 157.009362][T10517] EXT4-fs error (device loop9): ext4_validate_block_bitmap:436: comm syz.9.2612: bg 0: block 4: invalid block bitmap [ 157.009503][T10517] loop9: lost filesystem error report for type 5 error -117 [ 157.011936][T10517] EXT4-fs error (device loop9) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 157.012022][T10517] loop9: lost filesystem error report for type 5 error -117 [ 157.013045][T10517] EXT4-fs error (device loop9): ext4_free_branches:1023: inode #11: comm syz.9.2612: invalid indirect mapped block 1 (level 1) [ 157.013184][T10517] loop9: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 157.013445][ C0] EXT4-fs (loop9): error count since last fsck: 2 [ 157.013475][ C0] EXT4-fs (loop9): initial error at time 1789274025: ext4_validate_block_bitmap:436 [ 157.013756][ C0] EXT4-fs (loop9): last error at time 1789274025: ext4_mb_clear_bb:6680 [ 157.104449][T10517] EXT4-fs (loop9): 1 truncate cleaned up [ 157.124924][T10517] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.223631][ T7976] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 162.424501][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 162.424525][ C1] bridge0: topology change detected, propagating [ 162.424630][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.424657][ C1] bridge0: topology change detected, propagating [ 164.343287][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.343315][ C1] bridge0: topology change detected, propagating [ 164.343393][ C1] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.343413][ C1] bridge0: topology change detected, propagating