last executing test programs: 5m5.328935055s ago: executing program 32 (id=82): r0 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = memfd_secret(0x80000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r1, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mlockall(0x7) 5m5.274010721s ago: executing program 33 (id=85): r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1}, 0x40084) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x2, {0x2, 0x0, @empty}}, 0x80, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x0) r1 = socket$kcm(0xa, 0x5, 0x0) close(0x3) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000002280)=ANY=[@ANYBLOB="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"/3636], &(0x7f0000000040)='GPL\x00', 0x4, 0xfdc0, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) setsockopt$sock_attach_bpf(r1, 0x29, 0x22, &(0x7f0000000100)=r2, 0x120) 4m59.138131753s ago: executing program 34 (id=167): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000940)={0x0, 0x7}, 0x8) perf_event_open(&(0x7f0000000e80)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x10ecc8, 0xc, 0x40, 0x8, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000980)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000009c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, &(0x7f0000000a00)=[{{&(0x7f0000000a40)={0xa, 0x4e23, 0x0, @loopback, 0x50000000}, 0x1c, &(0x7f0000000a80)=[{&(0x7f0000000ac0)='\x00', 0x1}], 0x1}}], 0x1, 0x80) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000b00)=ANY=[@ANYBLOB="12e01b3989"], 0x1000f) 4m46.266429325s ago: executing program 35 (id=319): syz_pidfd_open(0x0, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x24004010) r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000003c0), 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1, 0x8, &(0x7f0000000800)=@framed={{}, [@generic={0x61, 0x8, 0x1}, @map_fd={0x18, 0x1}, @map_fd={0x18, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000400)={0x1, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r0, &(0x7f00000004c0)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000500)={0x32b, @tick=0x440, 0xff}) 4m18.923466485s ago: executing program 36 (id=670): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x76, 0x1) ioctl$USBDEVFS_GET_SPEED(r0, 0x551f) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x40d, 0x1, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2404, 0x9}, [@IFLA_ADDRESS={0xa, 0x1, @random="4af29c3ff049"}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan0\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x8000) 3m33.430141885s ago: executing program 37 (id=1339): openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000100000100000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c00098008000140", @ANYRES8=r0], 0xb0}, 0x1, 0x0, 0x0, 0x8000}, 0x40010) 3m4.07402954s ago: executing program 38 (id=1576): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000340)=@mangle={'mangle\x00', 0x1f, 0x6, 0x4f8, 0x0, 0xd0, 0x1a0, 0x270, 0x428, 0x0, 0xd0, 0x1a0, 0x358, 0x428, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}, {{@ipv6={@empty, @empty, [], [], '\x00', '\x00', {}, {}, 0x6, 0x0, 0x1}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffff}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x558) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045430, 0xffffffffffffffff) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x1, 0x0, @remote, 0x3}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000001840), 0x4) 2m45.926047667s ago: executing program 4 (id=2071): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r2 = socket$netlink(0x10, 0x3, 0x0) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/18, 0x12}], 0x1, 0x9, 0x6) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) 2m45.197637259s ago: executing program 4 (id=2082): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) unshare(0x22020600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x8}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 2m45.168105482s ago: executing program 39 (id=2082): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$int_in(r0, 0x5452, &(0x7f0000000280)=0xffffffffffffffff) sendto$inet6(r0, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) unshare(0x22020600) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ppoll(&(0x7f0000000180)=[{r0, 0x8}], 0x1, &(0x7f00000001c0), 0x0, 0x0) 2m38.510793942s ago: executing program 40 (id=2176): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x35, 0x0, @perf_config_ext={0x2, 0x6}, 0x100, 0x0, 0x0, 0x5, 0x2, 0x1}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f0000001140)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$unix(0x1, 0x2, 0x0) connect$unix(r1, &(0x7f00000012c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(r1, &(0x7f0000001340)=[{&(0x7f0000001380)="f1", 0x1}], 0x1) recvmmsg(r0, &(0x7f0000001440), 0x40000000000049e, 0x1000000000fe, 0x0) 2m2.333742905s ago: executing program 41 (id=2695): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@updpolicy={0xfc, 0x19, 0x1, 0x70bd2d, 0x0, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0xffffffff, 0x0, 0x1, 0x0, 0x6}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d6, 0x3c}, 0x2, @in=@loopback, 0x6, 0x4, 0x3}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, 0x0, 0x800) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000380)=0x1, 0x4) r2 = socket(0xa, 0x3, 0xff) sendto$inet6(r2, 0x0, 0xff32, 0x8fc, &(0x7f00000003c0)={0xa, 0x3a, 0x9, @loopback={0xff00000000000000}, 0x2}, 0x1c) 1m33.108808945s ago: executing program 1 (id=3263): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000000)=0x2, 0x4) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setns(0xc9, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000340)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x80, r3}) 1m33.06602344s ago: executing program 1 (id=3264): r0 = socket(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r1}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {0x4, 0xfff3}, {0x0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x48080}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000840)=@bpf_ext={0x1c, 0xf, &(0x7f0000000600)=ANY=[], &(0x7f00000006c0)='GPL\x00', 0x7, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x30d33, r2, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 1m32.720981559s ago: executing program 1 (id=3271): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newqdisc={0x94, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r3, {0xfff3}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xe, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x10, 0x4], 0x3, [0xb, 0x3, 0xad1e, 0x2002, 0x1, 0x4, 0x2, 0xd06, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x5, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x1]}}]}}, @TCA_RATE={0x6, 0x5, {0x3, 0xfb}}]}, 0x94}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 1m32.637920948s ago: executing program 1 (id=3276): bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000e00)={0xffffffffffffffff, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000140)='hugetlbfs\x00', 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180)={[{@noquota}, {@norecovery}, {@bh}, {@sysvgroups}, {}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000200)="$eJzs3c9rXNUeAPDvzDRpkua9/niPR9sHr4U+6HtKM/mBNFEXulIXBbHgRqHGZBprJpmQmdQmdJHqrgsXoiiIC/f+BW7syiKIa92LC6lojaCCMHLvzKT5NXXQNAO5nw/czrn33M73nAzfw51z750bQGadTv7JRQxGxBcRcbixunmH042XtbvXp5IlF/X6xe9z6X7JemvX1v87FBGrEdEXEc89FfFybnvc6vLK7GS5XFpsrhdrcwvF6vLKuStzkzOlmdL8yPj5iYnx4bHRiV3r6803X7154eNnej/6+Y07t9/69JOkWYPNuo392E2NrvfE0Q3bDkTE4w8iWBcUmv3p73ZD+FOSz+8fEXEmzf/DUUg/TSAL6vV6/bf6wXbVq3Vg38qnx8C5/FBENMr5/NBQ4xj+nzGQL1eqtYcvV5bmpxvHykeiJ3/5Srk03PyucCR6csn6SFq+tz66ZX0sIj0GfrvQn64PTVXK03s71AFbHNqS/z8VGvkPZISv/JBd8h+yS/5Ddsl/yC75D9kl/yG75D9kl/yH7JL/kF3yH7JL/kMmPXvhQrLUW/e/T19dXpqtXD03XarODs0tTQ1NVRYXhmYqlZn0np25P3q/cqWyMPJILF0r1krVWrG6vHJprrI0X7uU3td/qdSzJ70COnH01K2vchGx+mh/uiR6m3VyFfa3ej0X3b4HGeiOQrcHIKBrTP1BdvmOD+zwE72b9LWrWNj9tgB7I9/tBgBdc/aE83+QVeb/IbvM/0N2OcYHzP9D9pj/h+wabPP8r79teHbXcET8PSK+LPQcbD3rC9gP8t/mmsf/Zw//d3BrbW/ul/QUQW9EvPb+xXevTdZqiyPJ9h/Wt9fea24f7Ub7gU618rSVxwBAdq3dvT7VWvYy7ndPNi5C2B7/QHNusi89Rzmwltt0rUJul65dWL0REcd3ip9rPu+8ceZjYK2wLf6x5muu8RZpew+kz03fm/gnNsT/z4b4J//yXwWy4VYy/gzvlH/5NKdjPf82jz+Du3TtRPvxL78+/hXajH+nOozxygevf9M2/o2IkzvGb8XrS2NtjZ+07WyH8e+8+Py/2tXVP2y8z07xW5JSsTa3UKwur5xLf0dupjQ/Mn5+YmJ8eGx0opjOURdbM9XbPXb889v36/9Am/jt+v9Es03/77D/v/77sxdO3yf+/87s/PkfaxM/0R8RD3UY/8fRr19qV5fEn27T//x94ifbxjqMX33n6YMd7goA7IHq8srsZLlcWlRQUFBYL3R7ZAIetHtJ3+2WAAAAAAAAAAAAAJ3ai8uJu91HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID94PcAAAD//5j81ps=") syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 1m32.163285231s ago: executing program 1 (id=3284): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'virt_wifi0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) write$P9_RLERRORu(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="c5"], 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, 0x0) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0) 1m31.971402552s ago: executing program 1 (id=3285): ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x5, 0x2000001, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0xc030a011, 0x0, 0x0, 0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @local}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @broadcast}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}) 1m31.971298832s ago: executing program 42 (id=3285): ioctl$KDSKBENT(0xffffffffffffffff, 0x4b47, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x5, 0x2000001, 0x401d031, 0xffffffffffffffff, 0x0) syz_clone(0xc030a011, 0x0, 0x0, 0x0, 0x0, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x4000000, {}, {0x2, 0x0, @local}, {0x2, 0x0, @empty}, 0x2a0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4}) ioctl$sock_inet_SIOCDELRT(r0, 0x890c, &(0x7f0000000080)={0x0, {}, {0x2, 0x0, @broadcast}, {0x2, 0x0, @broadcast}, 0xab852ebbeefbd6b1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}) 1m14.586711085s ago: executing program 8 (id=3575): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc093, 0x2, @perf_bp={0x0, 0xa}, 0x4, 0x1, 0xfffc, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0xb) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) sched_setattr(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000680)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'lo\x00', 0x0}) sendto$packet(r1, &(0x7f0000000700)="0b0312002e0064000200475400f6a13bb1000000086086dd4803", 0x100a6, 0x0, &(0x7f0000000740)={0x11, 0x8100, r2}, 0x14) 1m14.503929214s ago: executing program 8 (id=3576): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x50) close(0x3) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x2, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x15, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000080850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f00000021c0)={r3, 0x0, 0x0}, 0x10) 1m14.445806711s ago: executing program 8 (id=3577): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r0, &(0x7f00000000c0)='\x00', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000380)="ee", 0x1, 0x4091, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000180)='|Z', 0x2, 0x4010, 0x0, 0x0) shutdown(r0, 0x1) 1m14.360157881s ago: executing program 8 (id=3582): bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000e00)={0xffffffffffffffff, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000140)='hugetlbfs\x00', 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180)={[{@noquota}, {@norecovery}, {@bh}, {@sysvgroups}, {}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000200)="$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") syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 1m14.062359354s ago: executing program 8 (id=3588): bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect$printer(0x4, 0x36, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) syz_mount_image$msdos(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000400), 0x1, 0x52e, &(0x7f0000000a40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x1e, 0x4, &(0x7f0000000680)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x22}]}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) syz_mount_image$vfat(&(0x7f0000000f80), &(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f00000010c0)) 1m13.441856873s ago: executing program 8 (id=3600): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0x80000, 0x100003, 0xc4}) sendmsg(0xffffffffffffffff, 0x0, 0x44004) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, @perf_bp={0x0, 0xa}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x1, 0x0, 0x0) 1m13.441632913s ago: executing program 43 (id=3600): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ff0000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ff0000/0x2000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1195, &(0x7f0000000040)={0x0, 0x2150, 0x80000, 0x100003, 0xc4}) sendmsg(0xffffffffffffffff, 0x0, 0x44004) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc, 0x4, @perf_bp={0x0, 0xa}, 0x2000, 0x2, 0xfffffffe, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_udp_int(r0, 0x11, 0x1, 0x0, 0x0) 1m9.188740076s ago: executing program 0 (id=3656): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x58eb, &(0x7f0000000040)={0x0, 0x2000c8a2, 0xc000, 0x8, 0xc4}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, &(0x7f0000000300), 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='+'], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32], 0x20) io_uring_enter(r0, 0x2219, 0xcf74, 0x16, 0x0, 0x0) 1m8.490042713s ago: executing program 0 (id=3662): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000000d40)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) shutdown(r0, 0x0) connect$unix(r0, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = accept(r1, 0x0, 0x0) sendto$inet6(r2, &(0x7f0000000e40)="8c", 0x1, 0x20004000, 0x0, 0x0) 1m8.469912176s ago: executing program 0 (id=3663): socket$rds(0x15, 0x5, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) openat(0xffffffffffffff9c, &(0x7f0000002a80)='./file0\x00', 0x42, 0x71) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b80)=""/4096, 0x1000}, 0x7}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001b80)=""/119, 0x77}, 0x6}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=""/255, 0xff}, 0x80}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001d00)=""/201, 0xc9}, 0x2}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e00)=""/32, 0x20}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001e40)=""/144, 0x90}, 0x8000}], 0x4000000000002ba, 0x40000002, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 1m8.379614956s ago: executing program 0 (id=3664): bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000e00)={0xffffffffffffffff, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000140)='hugetlbfs\x00', 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180)={[{@noquota}, {@norecovery}, {@bh}, {@sysvgroups}, {}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000200)="$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") syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 1m7.034358345s ago: executing program 0 (id=3675): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/thread-self/fail-nth\x00', 0x202, 0x0) write(r0, &(0x7f0000000140)='27', 0x2) ioctl$BLKTRACESETUP(r0, 0xc0481273, 0x0) r1 = add_key$keyring(&(0x7f0000000180), &(0x7f00000001c0)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000200)='asymmetric\x00', &(0x7f0000000240)=@keyring={'key_or_keyring:', r1}) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000280)='asymmetric\x00', &(0x7f00000002c0)=@keyring={'key_or_keyring:', r1}) 1m6.775382314s ago: executing program 0 (id=3677): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000240)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) 1m6.775214474s ago: executing program 44 (id=3677): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x10, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], 0x0}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r2, 0x0, &(0x7f0000000240)=@tcp6=r0}, 0x20) sendmmsg$inet6(r0, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000340)="50558c", 0x3}], 0x1}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000003c0)="fb24ba96", 0xc3fd}, {0x0, 0x11}], 0x2}}], 0x2, 0x20004810) 1m4.764101988s ago: executing program 4 (id=3678): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)={0x1c, 0x2, 0x3, 0x5, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x4) r1 = fsopen(&(0x7f0000000b00)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchdir(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b40)='./net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) read(r3, &(0x7f0000000b80)=""/1024, 0x400) 1m4.670930398s ago: executing program 4 (id=3686): bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f0000000e00)={0xffffffffffffffff, 0x0, 0x0}, 0x20) perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x6}, 0x0, 0x0, 0x10005}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsopen(&(0x7f0000000140)='hugetlbfs\x00', 0x1) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000180)={[{@noquota}, {@norecovery}, {@bh}, {@sysvgroups}, {}, {@noquota}]}, 0x1, 0x4a6, &(0x7f0000000200)="$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") syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x1) 1m2.297972982s ago: executing program 4 (id=3720): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000340)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000006c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff1, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000840)=@newtfilter={0x3c, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}, {0x300, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x10}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24004800}, 0x0) close(r0) 1m0.69539811s ago: executing program 4 (id=3753): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x3, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x2f) 1m0.69523936s ago: executing program 45 (id=3753): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x973, 0x1c080, 0x3, 0x44a}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x2f) 37.2311783s ago: executing program 9 (id=4103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x48, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000020900020073797a31000000000900010073797a310000000014000380100000800c000180060001000000000014000000110001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a01010000000000f9ff000a0000090900020073797a31000000200900010073797a310000000014000380100000800c0001800600010058"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x40) 37.151672559s ago: executing program 9 (id=4104): r0 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000d40)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000e40)={0x11, 0x3, &(0x7f0000000f00)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000f40)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000f80)={0x0, 0x1}, 0x1}, 0x94) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000fc0), 0x0) close(r4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000001000)=@bpf_ext={0x1a, 0xf, &(0x7f00000010c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001140)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r3, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000001180)={r4, r4, 0x19, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x9f1e}}, 0x40) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000011c0)={r0, r0, 0x19, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x9f1e}}, 0x40) 37.039916741s ago: executing program 9 (id=4108): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r1, 0x84, 0x82, &(0x7f0000000000)="c90a378f0b6db4b2", 0x8) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f00000000c0)={0x84, @empty, 0x15, 0x3, 'dh\x00', 0x30, 0x10001, 0x6b}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @remote, 0x4e21, 0x3, 'wlc\x00', 0x11, 0x4}, {@loopback, 0x4e23, 0x10000, 0xc3, 0x12d5c, 0x12d5c}}, 0x44) setsockopt$IP_VS_SO_SET_DELDEST(r2, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) ptrace(0x4206, r0) 36.822071145s ago: executing program 9 (id=4121): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mount$bpf(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x84000, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x200000000000, &(0x7f0000000440)='./file0/../file0\x00', 0x0, 0x2042, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x100) 36.730137155s ago: executing program 9 (id=4113): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f00000000c0)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) bind$tipc(r1, &(0x7f0000000180)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}, 0x4}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x1}}}, 0x10) bind$tipc(r1, &(0x7f0000000440)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x3}}, 0x10) bind$tipc(r0, 0x0, 0x0) 36.447293817s ago: executing program 9 (id=4115): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x26, 0x301, 0x670bd28, 0x25dfdbfc, {0x15}}, 0x14}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r0}, 0x20) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x8020, 0x8388, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10, 0x2, @perf_bp={0x0}, 0x8224, 0x2, 0x3, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r0}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x8808) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000080), &(0x7f0000000100)=r4}, 0x20) 36.447146227s ago: executing program 46 (id=4115): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, 0x26, 0x301, 0x670bd28, 0x25dfdbfc, {0x15}}, 0x14}, 0x1, 0x0, 0x0, 0x40008840}, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="12000000220000000400000002"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f0000000140)=r0}, 0x20) perf_event_open(&(0x7f0000000240)={0x2, 0x80, 0x0, 0x0, 0x0, 0x20, 0x0, 0x8020, 0x8388, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x10, 0x2, @perf_bp={0x0}, 0x8224, 0x2, 0x3, 0x7, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r2, 0xffffffffffffffff}, &(0x7f0000000280), &(0x7f00000002c0)=r0}, 0x20) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r4, &(0x7f0000001f40)={0x0, 0x0, 0x0}, 0x8808) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r3}, &(0x7f0000000080), &(0x7f0000000100)=r4}, 0x20) 2.447842558s ago: executing program 5 (id=4661): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x79, 0x4) r1 = perf_event_open(&(0x7f00000018c0)={0x2, 0x80, 0x32, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x0, @perf_config_ext={0x7, 0x15}, 0x8, 0x8, 0x43a1bd76, 0x8, 0xb, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4400000000, 0xffffffffffffffff, 0x8) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001940)={0x5, 0x5, &(0x7f0000001a00)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000001a40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000100)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000640)="17", 0x59a, 0x10008095, 0x0, 0x0) 2.228084763s ago: executing program 2 (id=4664): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000300)='./file2\x00', 0x8, &(0x7f0000000340), 0x4, 0x526, &(0x7f0000000700)="$eJzs3cFvG1kZAPBvnLhJs+mmC3sABGxZFgqq6iTubrTaC90LCFWVEBUnDm1I3CiKXUexK5rQQ3rkXolKnID/gBsHpJ44cOMGNy7lgFSgAjVIHIxmPEndxE4CceIm/v2kycx7M/X3Xtz3nudFnhfA0LoUEZsRcS4i7kTEVJ6f5Ftcb2/pdS9fPFzYevFwIYlW69bfk+x8mhcd/yb1Vv6a4xHx/e9E/CjZG7exvrEyX61W1vL0dLO2Ot1Y37i6XMhzynOzczMfX/uo3Le6vlf79fNvL9/4wW9/86Vnf9j85k/SYk3+9EJ2rrMe/dSuejEmO/JGI+LGcQQbkNH8/w+nT9raPhMR72ftfypGsncTADjLWq2paE11pgGAsy69/5+MpFDK5wImo1AoldpzeO/GRKFabzSvTNXv31uMbA7rYhQLd5erlZl8rvBiFJM0PZsdv0qXX0s/rlyLiHci4vHY+ex8aaFeXRzkBx8AGGJv7Rr//zXWHv87FQdVOADg+IwPugAAwIkz/gPA8DH+A8Dw+R/Gf98OBIAzwv0/AAwf4z8ADJ8Dx/9HJ1MOAOBEfO/mzXRrbbWff739pO6ri5XGSql2f6G0UF9bLS3V60vVSmmh1Tro9ar1+urshzvJxvrG7Vr9/r3m7eXa/FLldsWzBABg8N557+mf0kF/85Pz2RYdazkYq+FsKwy6AMDAjAy6AMDA+D4PDK9D3OObBoAzrssSvW35BEHS64InFn+F0+ry583/w7A6yvy/uQM43f6/+f9v9b0cwMkzhsPwarUSa/4DwJAxxw/0/Pt/rucjQp70vywAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwWkxmW1IoZWuBb6Y/C6VSxIWIuBjF5O5ytTITEW9HxB/HimNpenbQhQYAjqjw1yRf/+vy1AeTu8+eS/49lu0j4sc/v/WzB/PN5tpsmv+PnfzmkzT/fHOtfG4QFQAAOl3fm5WN3+V833Ej//LFw4Xt7SSL+PzT9uKiadytfGufGY3RbD8exYiY+GeSp9vSzysjfYi/+SgiPrdd//F40BFhMpsDaa98ujt+GvtC3+N3/v53xy+8Vt9Cdi7dF7PfxWdjV+GAAz39tN1P5m0vbeJ5+yvEpWzfvf2PZz3U0aX9X9pct/b0f4Wd/m9kT/wka/OXdtL7l+T5h7/77p7M1lT73KOIL4x2i5/sxE+697/FDw5Zxz9/8cvv9zrX+kXE5a71316RupZ1s9PN2up0Y33j6nJtfqmyVLlXLs/Nzs18fO2j8nQ2R93++ftuMf72yZW3e8VP6z/RI/74/vWPrx2y/r/8z50ffmWf+N/4avf3/9194qdj4tcPGX9+4nrP5bvT+Is96n/A+x9XDhn/2V82Fg95KQBwAhrrGyvz1Wpl7YCD9LPmQdc4OPxBem//BhQjO4jNiM6ckSO8YDYpERFdr0k/Ub8ZVT6ug2Rg0X/V7xccdM8EHLdXjX7QJQEAAAAAAAAAAAAAAHpprG+sjHX/tlbfDgZdRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAM6u/wYAAP//ydTDwA==") perf_event_open(&(0x7f0000000c40)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_bp={0x0}, 0x1, 0xb8e9, 0x0, 0x8, 0x0, 0x64c, 0x4}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x3) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x281c2, 0x10) linkat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./file2\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000140)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x800, 0x0, 0x3, 0x9}, 0x24) 1.904116219s ago: executing program 2 (id=4667): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000200)={@multicast2, @local, @loopback}, 0xc) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x27, &(0x7f0000000240)={@multicast2, @local}, 0xc) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f00000002c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) syz_emit_ethernet(0x36, &(0x7f0000000300)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10001}}}}}, 0x0) openat(0xffffffffffffff9c, 0x0, 0x800, 0x0) 1.860435243s ago: executing program 2 (id=4668): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x2a05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) mount$bind(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x80000, 0x0) 1.755408945s ago: executing program 2 (id=4669): open(&(0x7f0000000000)='./bus\x00', 0x4427e, 0x9a) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setstatus(r0, 0x4, 0x42000) write(r0, &(0x7f0000000340), 0x11000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.580295114s ago: executing program 7 (id=4671): r0 = perf_event_open(&(0x7f0000000d80)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x2, @perf_config_ext={0x1, 0x8}, 0x10040, 0x4, 0x402, 0x9, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) mmap(&(0x7f0000008000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) pselect6(0x40, &(0x7f00000002c0)={0x9, 0x0, 0x4000000000, 0x0, 0xa48f, 0x0, 0x800010100000}, 0x0, 0x0, 0x0, 0x0) syz_clone3(0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) write$qrtrtun(0xffffffffffffffff, 0x0, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002700)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) 1.491369114s ago: executing program 5 (id=4672): close(0x3) r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @dev={0xfe, 0x80, '\x00', 0xf}, 0x8}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000180)={r2, 0x9}, 0x8) 1.483353905s ago: executing program 5 (id=4673): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000001940)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) sendmsg$nl_xfrm(r0, &(0x7f0000001980)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000001a00)=ANY=[@ANYBLOB="60010000100033062cbd7000ffdbdf250000000000000007ddffffff00000001fe800000000000050080effd000000003a000000000000000000000000800000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0x20040}, 0x80) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000001b80)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000001bc0)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000001c00)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0xffff, 0xfffffffffffffffd, 0x2}, {0x1, 0x0, 0x400000000}, 0x0, 0x0, 0x1, 0x0, 0x3, 0x3}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x32}, 0x0, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0x0, 0x0, 0xb7, 0x2, 0xfffffffe}}, 0xe8) write(r2, 0x0, 0x0) 1.43914006s ago: executing program 7 (id=4674): pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001400b59527bd7000ffdbdf250a1700ff", @ANYRES32=r4, @ANYBLOB="14000200fef8e53f3800000000000000000000bb140006007f0000004a09"], 0x40}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, 0x0) sendmsg$nl_route(r0, 0x0, 0x40000) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0) 1.401365204s ago: executing program 5 (id=4675): r0 = socket$kcm(0x1e, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f0000000a40), 0x43) r1 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f0000000a80), 0x43) r2 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r2, 0x10f, 0x87, &(0x7f0000000cc0), 0x43) write$cgroup_subtree(r2, &(0x7f0000000d00)=ANY=[], 0xfdef) close(r2) recvmsg(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000001bc0)=""/4096, 0xfdef}], 0x1}, 0x10021) 1.367369998s ago: executing program 5 (id=4677): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, 0x0, 0x0) prlimit64(0x0, 0x3, 0x0, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000300), 0x0, 0x0) syz_usb_disconnect(r1) syz_usb_connect$printer(0x6, 0x2d, &(0x7f0000000340)=ANY=[], 0x0) ioctl$EVIOCRMFF(r1, 0x5509, &(0x7f0000000380)=0x6ea7) 1.228391064s ago: executing program 3 (id=4680): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x7, 0x4, 0x81, 0xffffffff}) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x18, &(0x7f0000000580)=@ringbuf={{0x18, 0x6, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x3, 0x3, 0x3, 0x9}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x24}}]}, &(0x7f0000000640)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x11}, 0x94) getpid() syz_emit_ethernet(0x0, 0x0, 0x0) 1.07790126s ago: executing program 3 (id=4682): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0x44, 0x24, 0xd0f, 0x70bd2c, 0x25dfdbfc, {0x60, 0x0, 0x0, r3, {}, {0xfff2, 0xa}, {0xfff3, 0x7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x4}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xb}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0xc5}, 0x400c010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000100)="20e9af", 0x3}], 0x1}, 0x0) 895.482511ms ago: executing program 2 (id=4685): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./dev\x00', 0x15) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x10, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f0000000080)='.\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x100000, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x8000, &(0x7f0000000280)={0xb, 0x0, 0x100000}, 0x20) 895.317031ms ago: executing program 2 (id=4686): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000040), 0x8, 0x800) mount$9p_fd(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x40, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) signalfd4(r1, &(0x7f0000000140), 0x8, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0x20520, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xfffffffffffffffd}, 0x10ecc8, 0xc, 0x40, 0x8, 0x80000000, 0x7, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), r0) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r3 = ioctl$LOOP_CTL_ADD(0xffffffffffffffff, 0x4c80, 0xa) ioctl$LOOP_CTL_REMOVE(r2, 0x4c81, r3) 641.529889ms ago: executing program 5 (id=4688): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x52) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r3, &(0x7f0000004200)='t', 0x1) sendfile(r3, r2, 0x0, 0x3ffff) write(r1, &(0x7f0000000200)="c78885", 0x3) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 587.327145ms ago: executing program 7 (id=4691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000380), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x20702, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000480)={'syzkaller0\x00', 0xca58c30f81b6079f}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x2901, 0x0) close(r2) socket$can_raw(0x1d, 0x3, 0x1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000500)={'syzkaller0\x00', @link_local}) write$tun(r1, &(0x7f0000000540)=ANY=[], 0x16) 467.182638ms ago: executing program 6 (id=4693): bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) perf_event_open(&(0x7f0000001800)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x7, 0x4, 0x81, 0xffffffff}) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x18, &(0x7f0000000580)=@ringbuf={{0x18, 0x6, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x3, 0x3, 0x3, 0x9}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x24}}]}, &(0x7f0000000640)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x11}, 0x94) getpid() syz_emit_ethernet(0x0, 0x0, 0x0) 458.617369ms ago: executing program 7 (id=4694): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./cgroup.cpu/cgroup.procs\x00', 0x28301, 0xc) write$binfmt_format(r0, &(0x7f0000000800)='-1\x00', 0x3) r1 = socket(0xa, 0x1, 0x84) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000bc0)={0x1, {{0x2, 0x4e22, @multicast2}}, {{0x2, 0x4e22, @multicast2}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000d00)={0x1, {{0x2, 0x4e20, @multicast2}}}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="010000000300000004000000ff"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000880), 0xce4, r2}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000008c0)={0x0, &(0x7f0000000900)=""/152, &(0x7f00000009c0), &(0x7f0000000a00), 0x4, r2}, 0x38) 421.999253ms ago: executing program 7 (id=4695): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x4008, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000100)=[@in6={0xa, 0x4e21, 0x80000001, @private1, 0x3}], 0x1c) shutdown(r0, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x33, 0x0, 0x0) 316.470125ms ago: executing program 6 (id=4696): getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000780)=""/4102, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat(0xffffffffffffff9c, 0x0, 0x20003, 0x0) perf_event_open(&(0x7f0000000480)={0x2, 0x80, 0x31, 0x1, 0x0, 0x0, 0x0, 0x7, 0xd0141, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x5, @perf_bp={0x0}, 0x10ecc8, 0xc, 0x40, 0x8, 0x8, 0x20015, 0x0, 0x0, 0x0, 0x0, 0xc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000001900)={&(0x7f0000001940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) 280.634919ms ago: executing program 7 (id=4697): socketpair$unix(0x1, 0x5, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0xf3a, 0x0) write$cgroup_pid(r2, &(0x7f0000000100), 0xffffff98) unshare(0x400) vmsplice(r2, &(0x7f0000000140)=[{&(0x7f0000000800)="f9", 0x1}], 0x1, 0xf) splice(r1, 0x0, r2, 0x0, 0xc, 0x4) write(r0, 0x0, 0x0) 229.544065ms ago: executing program 6 (id=4698): r0 = socket(0x10, 0x3, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) recvmsg$can_raw(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000000740)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000780)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendto(r2, &(0x7f00000007c0)="340000001a00010001000000000000000220000000000000000000000800030001000000080002000101010108000100e1010203", 0x34, 0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000700)={0x80002000, 0x0, 0xfffffff9}, 0x10) write(r0, &(0x7f0000000840)="240000001a005f0214f9f407000982001f000000fe0000000000000008000f00fd000000", 0x24) 222.674575ms ago: executing program 3 (id=4699): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1b, 0x0, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x94) socketpair(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000880)=ANY=[], 0xfdef) ioctl$PERF_EVENT_IOC_SET_FILTER(r0, 0x89a0, &(0x7f0000000080)) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x0, 0x80, 0xbd, 0x5, 0x80, 0x7, 0x0, 0x7fffffff, 0x7a5d4, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0xdfffffff, 0x6, @perf_bp={0x0, 0xe}, 0x1906, 0xfffffffffffffffe, 0x7, 0x4, 0x81, 0x8, 0x9, 0x0, 0x20002, 0x0, 0x4}, 0x0, 0x8, 0xffffffffffffffff, 0x8) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x89f0, &(0x7f0000000080)) 187.626109ms ago: executing program 3 (id=4700): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @broadcast}) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000000)="89e7f22c7cdad9b4b47380c988ca", 0xe}, {&(0x7f0000001040)="4d5e945c3ce0b5e3810b382d4c4e5b4c26a85ffee3e1324e617a0d6e763fc62d9e9e94", 0x23}, {&(0x7f0000000300)="d313fcc3b3a9", 0x6}], 0x3) 99.147059ms ago: executing program 6 (id=4701): setns(0xc9, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='fdinfo\x00') lseek(r0, 0x7f, 0x0) getdents64(r0, 0xffffffffffffffff, 0x18) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x2180040, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/sys/fs\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000002c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3b8, 0x0, 0x98, 0x130, 0x1c8, 0x288, 0x0, 0x98, 0x130, 0x288, 0x320, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@ip={@empty, @empty, 0x0, 0x0, '\x00', '\x00', {}, {}, 0x6}, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x10}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x450) 43.353886ms ago: executing program 6 (id=4702): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xfeffff, 0x34, 0x0, 0x0, 0x0, 0x67, 0x0, 0x20, 0x0, 0x0, 0x0, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0xe) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x30, &(0x7f0000000100)="b9ff030f6044238cb89e14f088a81bff88f7ffff4000630677fbac14142c88a8a0a688a89f4b4d2f87e56dca6aab84fe13f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0xfe, 0x60000000, 0x43, 0xffffffffffffff11, &(0x7f0000000000), &(0x7f0000000540)="9c18a537674b5d9e9185cd0add6d6d4c9e63ece1b58d7b42c6c27a5f1671fdf94432fc1baaef86573fc9fbb426f9284a6bd47174eb6fb9f893c18421d26d649d633a0f459969df8d3284737c5586cd696884192ce10db91e21fd978337408b7bd1cbb6789b51d63c8e68dab5da01c8e19d572950cfe2142e244990624270eaa2a2ded01d820cec011a6b05192b91cd193b1995bc296c249e1ef1570000000000000f75eec7040de10b5d8c536e5b5ce39ab84e658eb8f02fe112a5136cd3ac5c06848a40ec335a", 0x0, 0x0, 0x800006}, 0x3b) 42.993026ms ago: executing program 3 (id=4703): socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000002c0)={0xffffffffffffffff, 0x4, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x6}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket$kcm(0x10, 0x2, 0x0) r0 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r0, 0x0, 0x23, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xe8001, 0x0) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x17, 0xb0}, [@ldst={0x5}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48) 30.459397ms ago: executing program 3 (id=4704): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x5d0b40cba755cd46, 0x4008032, 0xffffffffffffffff, 0x17177000) syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000380)='./file2\x00', 0x2010410, &(0x7f00000003c0)=ANY=[@ANYBLOB='nodots,dmask=00000000000000000000003,usefree,nodots,flush,dots,dots,gid=', @ANYRESHEX=0x0, @ANYBLOB], 0x1, 0x214, &(0x7f0000000440)="$eJzs3D1rW1cYB/AjWa6tlhZPhXbpoV3a5bb10qVDS3GhVNCSRCEv0zWWEyFFAl8NksmgOVM+RwhkCWQL+QL+DFmymYDx5Ck3OJKs2NixE0dy4vx+ix6e/z1X5+jARVy9bP5+91ZjNUtW004ozRdC8Y/QDzuFsBCKYaQffnpwZfvOxavX/v2zUlm6MDvsx/jVd4+v377//ZPOF5cf7nYKIYStxWcbX298s/ni0s16FutZbLU7MY3L7XYnXW7W4ko9ayQx/t+spVkt1ltZbW1fvtpsj5861LIspq1ebNR6sdOOnbVeTG+k9VZMkiTOB06lem8nz8NWnuf5XD/kef62JyhMZl5Myyn3n4/c3kU97l5Nn/e71W518DjI//6nsvRLfGVhPGq7263O7OW/DvK4P58Nnw/zxUPzz8KPPwzy3eyv/yoH8nJYmfzyAQAAAADgXErinkPv7yfJUfmgeu3zgQP370vh29K4MzP5pQAAAABHyHrrjbS5Mrs2KJq1Myvmwv7Ob4+GUzxu+M9Pjz9mQsWXwyK843nKIYSjjymGM9+U6RSj75EPO6PfF5xseOl9TaP8gbwao2I+HBaVw3pjbjqbAgAAnC/jN/0nHlKc6IQAAAAAAAAAAAAAAAAAAADgEzSNPzM76zUCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALzJywAAAP//ixdW4w==") r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x101042, 0x15) socket$netlink(0x10, 0x3, 0x0) pwrite64(r0, &(0x7f0000001080)='2', 0xfdef, 0xe7c) 0s ago: executing program 6 (id=4705): ppoll(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001740)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x21) syz_emit_ethernet(0x6f, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x4d, 0x0, @opaque="6046bcac7ead75b79a775a498827ca82717eaf2f40827015aa936726371a1f8259cbe4f0a9063097ea65b9cab7bfe2b309214596e1e5b6e0f29044411d1e17912370b7070a"}}}}}, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x9}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000800)=""/4096, 0x1000}], 0x1}, 0xb}], 0x12, 0x40000021, 0x0) kernel console output (not intermixed with test programs): 00 [ 280.495869][T16628] R13: 00007fccf4ab6038 R14: 00007fccf4ab5fa0 R15: 00007ffc159d8198 [ 280.495964][T16628] [ 280.638274][T16556] loop4: detected capacity change from 0 to 512 [ 280.687028][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.687125][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 280.707151][ T6567] tipc: Node number set to 43690 [ 280.814866][T16556] EXT4-fs: Ignoring removed bh option [ 281.183071][T16671] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.272036][T16679] FAULT_INJECTION: forcing a failure. [ 281.272036][T16679] name failslab, interval 1, probability 0, space 0, times 0 [ 281.272072][T16679] CPU: 1 UID: 0 PID: 16679 Comm: syz.5.3711 Not tainted syzkaller #0 PREEMPT(lazy) [ 281.272101][T16679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 281.272182][T16679] Call Trace: [ 281.272191][T16679] [ 281.272201][T16679] __dump_stack+0x1d/0x30 [ 281.272231][T16679] dump_stack_lvl+0x95/0xd0 [ 281.272258][T16679] dump_stack+0x15/0x1b [ 281.272282][T16679] should_fail_ex+0x259/0x270 [ 281.272338][T16679] ? x509_get_sig_params+0x1cd/0x2c0 [ 281.272362][T16679] should_failslab+0x8c/0xb0 [ 281.272395][T16679] __kmalloc_noprof+0xb6/0x4b0 [ 281.272470][T16679] ? crypto_alloc_tfm_node+0x24f/0x280 [ 281.272496][T16679] ? x509_get_sig_params+0x1cd/0x2c0 [ 281.272568][T16679] x509_get_sig_params+0x1cd/0x2c0 [ 281.272594][T16679] x509_cert_parse+0x2f9/0x450 [ 281.272625][T16679] x509_key_preparse+0x3c/0x420 [ 281.272649][T16679] ? selinux_key_permission+0x161/0x190 [ 281.272683][T16679] asymmetric_key_preparse+0x68/0xb0 [ 281.272773][T16679] __key_create_or_update+0x29e/0x820 [ 281.272806][T16679] ? key_task_permission+0x2ac/0x2c0 [ 281.272840][T16679] key_create_or_update+0x42/0x60 [ 281.272907][T16679] __se_sys_add_key+0x2a5/0x360 [ 281.272935][T16679] __x64_sys_add_key+0x67/0x80 [ 281.272958][T16679] x64_sys_call+0x1fa9/0x2550 [ 281.272990][T16679] do_syscall_64+0x112/0x360 [ 281.273037][T16679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.273136][T16679] RIP: 0033:0x7fe937e2f559 [ 281.273153][T16679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 281.273171][T16679] RSP: 002b:00007fe936887028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 281.273196][T16679] RAX: ffffffffffffffda RBX: 00007fe9380b5fa0 RCX: 00007fe937e2f559 [ 281.273220][T16679] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000000 [ 281.273237][T16679] RBP: 00007fe937ec6b20 R08: ffffffffffffffff R09: 0000000000000000 [ 281.273255][T16679] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 281.273333][T16679] R13: 00007fe9380b6038 R14: 00007fe9380b5fa0 R15: 00007fffef4d1268 [ 281.273356][T16679] [ 281.274084][T16556] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 281.274218][T16556] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 281.482490][T12139] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 281.630091][T16711] xt_recent: Need "+ip", "-ip" or "/" [ 281.819910][T16727] bridge0: port 1(syz_tun) entered blocking state [ 281.820029][T16727] bridge0: port 1(syz_tun) entered disabled state [ 281.820227][T16727] syz_tun: entered allmulticast mode [ 281.820705][T16727] syz_tun: entered promiscuous mode [ 281.820951][T16727] bridge0: port 1(syz_tun) entered blocking state [ 281.820979][T16727] bridge0: port 1(syz_tun) entered listening state [ 282.576537][T16762] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3737'. [ 282.705726][T16773] FAULT_INJECTION: forcing a failure. [ 282.705726][T16773] name failslab, interval 1, probability 0, space 0, times 0 [ 282.705827][T16773] CPU: 1 UID: 0 PID: 16773 Comm: syz.5.3742 Not tainted syzkaller #0 PREEMPT(lazy) [ 282.705857][T16773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 282.705872][T16773] Call Trace: [ 282.705882][T16773] [ 282.705888][T16773] __dump_stack+0x1d/0x30 [ 282.705950][T16773] dump_stack_lvl+0x95/0xd0 [ 282.705965][T16773] dump_stack+0x15/0x1b [ 282.705978][T16773] should_fail_ex+0x259/0x270 [ 282.705995][T16773] ? x509_cert_parse+0xa7/0x450 [ 282.706062][T16773] should_failslab+0x8c/0xb0 [ 282.706080][T16773] __kmalloc_cache_noprof+0x5d/0x3e0 [ 282.706154][T16773] ? x509_cert_parse+0xa7/0x450 [ 282.706173][T16773] x509_cert_parse+0xa7/0x450 [ 282.706193][T16773] x509_key_preparse+0x3c/0x420 [ 282.706211][T16773] ? selinux_key_permission+0x161/0x190 [ 282.706272][T16773] asymmetric_key_preparse+0x68/0xb0 [ 282.706298][T16773] __key_create_or_update+0x29e/0x820 [ 282.706316][T16773] ? key_task_permission+0x2ac/0x2c0 [ 282.706336][T16773] key_create_or_update+0x42/0x60 [ 282.706502][T16773] __se_sys_add_key+0x2a5/0x360 [ 282.706518][T16773] __x64_sys_add_key+0x67/0x80 [ 282.706556][T16773] x64_sys_call+0x1fa9/0x2550 [ 282.706573][T16773] do_syscall_64+0x112/0x360 [ 282.706597][T16773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 282.706611][T16773] RIP: 0033:0x7fe937e2f559 [ 282.706703][T16773] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 282.706716][T16773] RSP: 002b:00007fe936887028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 282.706731][T16773] RAX: ffffffffffffffda RBX: 00007fe9380b5fa0 RCX: 00007fe937e2f559 [ 282.706749][T16773] RDX: 0000200000000200 RSI: 0000200000000100 RDI: 0000200000000000 [ 282.706803][T16773] RBP: 00007fe937ec6b20 R08: ffffffffffffffff R09: 0000000000000000 [ 282.706813][T16773] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 282.706821][T16773] R13: 00007fe9380b6038 R14: 00007fe9380b5fa0 R15: 00007fffef4d1268 [ 282.706834][T16773] [ 282.777509][T16771] EXT4-fs error (device sda1): ext4_validate_block_bitmap:427: comm syz.2.3741: bg 4: bad block bitmap checksum [ 282.777553][T16771] EXT4-fs warning (device sda1): ext4_trim_all_free:7003: Error -74 loading buddy information for 4 [ 283.244845][T16714] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 283.281462][T15678] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.340608][T15678] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.399921][T15678] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.437901][T15678] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.586937][T15678] bridge_slave_1: left allmulticast mode [ 283.586963][T15678] bridge_slave_1: left promiscuous mode [ 283.587118][T15678] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.588321][T15678] bridge_slave_0: left allmulticast mode [ 283.588341][T15678] bridge_slave_0: left promiscuous mode [ 283.588528][T15678] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.750147][T15678] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.762749][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 283.762769][ T29] audit: type=1400 audit(1793305476.753:2986): avc: denied { write } for pid=16822 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.792906][ T29] audit: type=1400 audit(1793305476.773:2987): avc: denied { write } for pid=16836 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.815492][T15678] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.816520][T15678] bond0 (unregistering): Released all slaves [ 283.831299][ T3018] 8021q: adding VLAN 0 to HW filter on device eth1 [ 283.852592][T16801] rxe_eth0 speed is unknown, defaulting to 1000 [ 283.930218][T16842] FAULT_INJECTION: forcing a failure. [ 283.930218][T16842] name failslab, interval 1, probability 0, space 0, times 0 [ 283.930255][T16842] CPU: 1 UID: 0 PID: 16842 Comm: syz.9.3769 Not tainted syzkaller #0 PREEMPT(lazy) [ 283.930285][T16842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 283.930301][T16842] Call Trace: [ 283.930309][T16842] [ 283.930320][T16842] __dump_stack+0x1d/0x30 [ 283.930371][T16842] dump_stack_lvl+0x95/0xd0 [ 283.930398][T16842] dump_stack+0x15/0x1b [ 283.930422][T16842] should_fail_ex+0x259/0x270 [ 283.930453][T16842] ? __alloc_skb+0x2e0/0x6f0 [ 283.930539][T16842] should_failslab+0x8c/0xb0 [ 283.930574][T16842] kmem_cache_alloc_node_noprof+0x60/0x3e0 [ 283.930608][T16842] ? __alloc_skb+0x2e0/0x6f0 [ 283.930731][T16842] __alloc_skb+0x2e0/0x6f0 [ 283.930957][T16842] ? __alloc_skb+0x209/0x6f0 [ 283.930990][T16842] kcm_sendmsg+0x618/0x1630 [ 283.931024][T16842] ? __pfx_kcm_sendmsg+0x10/0x10 [ 283.931049][T16842] sock_sendmsg+0x209/0x230 [ 283.931226][T16842] splice_to_socket+0x745/0xb00 [ 283.931325][T16842] ? __pfx_splice_to_socket+0x10/0x10 [ 283.931361][T16842] direct_splice_actor+0x153/0x270 [ 283.931389][T16842] ? __pfx_shmem_file_splice_read+0x10/0x10 [ 283.931504][T16842] splice_direct_to_actor+0x2f5/0x680 [ 283.931533][T16842] ? __pfx_direct_splice_actor+0x10/0x10 [ 283.931565][T16842] do_splice_direct+0x119/0x1a0 [ 283.931665][T16842] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 283.931691][T16842] do_sendfile+0x37d/0x640 [ 283.931796][T16842] __x64_sys_sendfile64+0x105/0x150 [ 283.931880][T16842] x64_sys_call+0x1015/0x2550 [ 283.932038][T16842] do_syscall_64+0x112/0x360 [ 283.932073][T16842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.932098][T16842] RIP: 0033:0x7f2f2041f559 [ 283.932147][T16842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 283.932244][T16842] RSP: 002b:00007f2f1ee6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 283.932314][T16842] RAX: ffffffffffffffda RBX: 00007f2f206a5fa0 RCX: 00007f2f2041f559 [ 283.932332][T16842] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004 [ 283.932348][T16842] RBP: 00007f2f204b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 283.932373][T16842] R10: 000000008000fb00 R11: 0000000000000246 R12: 0000000000000000 [ 283.932397][T16842] R13: 00007f2f206a6038 R14: 00007f2f206a5fa0 R15: 00007ffd8a068788 [ 283.932420][T16842] [ 284.093991][T15678] hsr_slave_0: left promiscuous mode [ 284.103720][T15678] hsr_slave_1: left promiscuous mode [ 284.104773][T15678] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.104791][T15678] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.114413][T15678] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.114432][T15678] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.150119][T15678] veth1_macvtap: left promiscuous mode [ 284.150147][T15678] veth0_macvtap: left promiscuous mode [ 284.150251][T15678] veth1_vlan: left promiscuous mode [ 284.150284][T15678] veth0_vlan: left promiscuous mode [ 284.292035][ T29] audit: type=1400 audit(1793305477.283:2988): avc: denied { write } for pid=16843 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.317811][ T29] audit: type=1400 audit(1793305477.293:2989): avc: denied { write } for pid=16868 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.341535][T15678] team0 (unregistering): Port device team_slave_1 removed [ 284.352409][T15678] team0 (unregistering): Port device team_slave_0 removed [ 284.389578][ T3018] 8021q: adding VLAN 0 to HW filter on device eth2 [ 284.513615][T16801] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.513655][T16801] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.513819][T16801] bridge_slave_0: entered allmulticast mode [ 284.521628][T16801] bridge_slave_0: entered promiscuous mode [ 284.522679][T16801] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.522712][T16801] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.522901][T16801] bridge_slave_1: entered allmulticast mode [ 284.523493][T16801] bridge_slave_1: entered promiscuous mode [ 284.536920][T16801] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.538272][T16801] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.550425][T16801] team0: Port device team_slave_0 added [ 284.551405][T16801] team0: Port device team_slave_1 added [ 284.570138][T16801] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 284.570202][T16801] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.570230][T16801] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 284.570911][T16801] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 284.570924][T16801] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 284.570954][T16801] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 284.597024][T16801] hsr_slave_0: entered promiscuous mode [ 284.597489][T16801] hsr_slave_1: entered promiscuous mode [ 284.605599][T16801] debugfs: 'hsr0' already exists in 'hsr' [ 284.605618][T16801] Cannot create hsr debugfs directory [ 284.761846][ T29] audit: type=1400 audit(1793305477.753:2990): avc: denied { write } for pid=16876 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.809442][ T29] audit: type=1400 audit(1793305477.803:2991): avc: denied { write } for pid=16903 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.847850][ T6567] net_ratelimit: 21 callbacks suppressed [ 284.847870][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 284.852970][T16908] FAULT_INJECTION: forcing a failure. [ 284.852970][T16908] name failslab, interval 1, probability 0, space 0, times 0 [ 284.853245][T16908] CPU: 0 UID: 0 PID: 16908 Comm: syz.9.3772 Not tainted syzkaller #0 PREEMPT(lazy) [ 284.853271][T16908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 284.853283][T16908] Call Trace: [ 284.853291][T16908] [ 284.853301][T16908] __dump_stack+0x1d/0x30 [ 284.853327][T16908] dump_stack_lvl+0x95/0xd0 [ 284.853348][T16908] dump_stack+0x15/0x1b [ 284.853368][T16908] should_fail_ex+0x259/0x270 [ 284.853393][T16908] ? mas_alloc_nodes+0x1a2/0x210 [ 284.853419][T16908] should_failslab+0x8c/0xb0 [ 284.853447][T16908] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 284.853478][T16908] ? mas_alloc_nodes+0x1a2/0x210 [ 284.853514][T16908] mas_alloc_nodes+0x1a2/0x210 [ 284.853548][T16908] mas_preallocate+0x2ca/0x500 [ 284.853583][T16908] __split_vma+0x334/0x7c0 [ 284.853605][T16908] vms_gather_munmap_vmas+0x265/0x7f0 [ 284.853632][T16908] do_vmi_align_munmap+0x1e1/0x400 [ 284.853665][T16908] do_vmi_munmap+0x1da/0x220 [ 284.853691][T16908] mremap_to+0x12d/0x470 [ 284.853722][T16908] __se_sys_mremap+0x73e/0xcc0 [ 284.853755][T16908] ? tick_program_event+0x79/0xc0 [ 284.853787][T16908] ? _raw_spin_unlock+0x9/0x30 [ 284.853808][T16908] ? __hrtimer_rearm_deferred+0x571/0x650 [ 284.853843][T16908] __x64_sys_mremap+0x67/0x80 [ 284.853871][T16908] x64_sys_call+0x1072/0x2550 [ 284.853900][T16908] do_syscall_64+0x112/0x360 [ 284.853928][T16908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.853950][T16908] RIP: 0033:0x7f2f2041f559 [ 284.853970][T16908] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 284.853992][T16908] RSP: 002b:00007f2f1ee6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 284.854015][T16908] RAX: ffffffffffffffda RBX: 00007f2f206a5fa0 RCX: 00007f2f2041f559 [ 284.854032][T16908] RDX: 0000000000002000 RSI: 0000000000003000 RDI: 0000200000001000 [ 284.854048][T16908] RBP: 00007f2f204b6b20 R08: 0000200000006000 R09: 0000000000000000 [ 284.854064][T16908] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 284.854079][T16908] R13: 00007f2f206a6038 R14: 00007f2f206a5fa0 R15: 00007ffd8a068788 [ 284.854101][T16908] [ 284.940005][ T3018] 8021q: adding VLAN 0 to HW filter on device eth3 [ 284.999256][ T6578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.207067][T16801] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 285.223835][T16801] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 285.226380][T16801] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 285.233882][T16801] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 285.234812][T16801] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 285.245410][T16801] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 285.246063][T16801] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 285.257635][T16801] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 285.282707][T16930] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.309189][ T29] audit: type=1400 audit(1793305478.303:2992): avc: denied { write } for pid=16922 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.314520][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.314583][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.371501][T16801] 8021q: adding VLAN 0 to HW filter on device bond0 [ 285.388503][T16801] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.392943][T15678] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.392982][T15678] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.422082][ T4170] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.422118][ T4170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.440823][ T29] audit: type=1400 audit(1793305478.443:2993): avc: denied { write } for pid=16949 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 285.482942][T16801] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 285.482971][T16801] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.524417][ T3018] 8021q: adding VLAN 0 to HW filter on device eth4 [ 285.574145][ T29] audit: type=1326 audit(1793305478.543:2994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16951 comm="syz.2.3781" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf482f559 code=0x7ffc0000 [ 285.574184][ T29] audit: type=1326 audit(1793305478.543:2995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16951 comm="syz.2.3781" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf482f559 code=0x7ffc0000 [ 285.802541][T16801] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.879770][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 285.966781][T16801] veth0_vlan: entered promiscuous mode [ 285.974002][T16801] veth1_vlan: entered promiscuous mode [ 286.008896][T16801] veth0_macvtap: entered promiscuous mode [ 286.011591][T16801] veth1_macvtap: entered promiscuous mode [ 286.019972][T16801] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.026482][T16801] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.065037][T12139] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.065243][T12139] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.065422][T12139] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.065560][T12139] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.252633][T17004] team0: Port device bond0 removed [ 286.291265][T17004] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 286.313169][T17017] team0: Mode changed to "loadbalance" [ 286.924605][ T6568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.024174][T17075] loop3: detected capacity change from 0 to 1024 [ 287.069896][T17075] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 287.613558][T17123] No such timeout policy "syz1" [ 287.635376][ T6575] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 287.875745][ T6576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 288.914281][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 288.914329][ T29] audit: type=1400 audit(1793305481.903:3058): avc: denied { write } for pid=17229 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.005959][T17251] team0: No ports can be present during mode change [ 289.014536][ T29] audit: type=1400 audit(1793305482.003:3059): avc: denied { write } for pid=17253 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.131248][T17256] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 289.131600][T17256] batman_adv: batadv0: Adding interface: gretap1 [ 289.131614][T17256] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.131648][T17256] batman_adv: batadv0: Interface activated: gretap1 [ 290.099576][ T6567] net_ratelimit: 6 callbacks suppressed [ 290.099597][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.159573][ T29] audit: type=1400 audit(1793305483.153:3060): avc: denied { create } for pid=17296 comm="syz.6.3842" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 290.349893][T17308] netlink: 27 bytes leftover after parsing attributes in process `syz.3.3846'. [ 290.503901][T17221] loop9: detected capacity change from 0 to 1764 [ 290.688191][ T6576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 290.725676][ T29] audit: type=1400 audit(1793305483.723:3061): avc: denied { mount } for pid=17219 comm="syz.9.3821" name="/" dev="loop9" ino=1920 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 290.852350][ T29] audit: type=1400 audit(1793305483.843:3062): avc: denied { unmount } for pid=16001 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 291.076597][ T6579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.155719][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 291.272361][T17313] No such timeout policy "syz1" [ 291.314593][T17323] loop9: detected capacity change from 0 to 256 [ 291.463688][T17350] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3862'. [ 291.635469][ T29] audit: type=1326 audit(1793305484.623:3063): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17354 comm="syz.2.3864" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf482f559 code=0x7ffc0000 [ 291.635506][ T29] audit: type=1326 audit(1793305484.623:3064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17354 comm="syz.2.3864" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf482f559 code=0x7ffc0000 [ 291.635569][ T29] audit: type=1326 audit(1793305484.623:3065): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17354 comm="syz.2.3864" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf482f559 code=0x7ffc0000 [ 291.635598][ T29] audit: type=1326 audit(1793305484.623:3066): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17354 comm="syz.2.3864" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf482f559 code=0x7ffc0000 [ 291.635628][ T29] audit: type=1326 audit(1793305484.623:3067): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17354 comm="syz.2.3864" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccf482f559 code=0x7ffc0000 [ 291.957299][T17358] rxe_eth0 speed is unknown, defaulting to 1000 [ 291.975348][T17373] SELinux: Context system_u: is not valid (left unmapped). [ 292.197436][ T6565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 292.567808][T17406] FAULT_INJECTION: forcing a failure. [ 292.567808][T17406] name failslab, interval 1, probability 0, space 0, times 0 [ 292.567841][T17406] CPU: 0 UID: 0 PID: 17406 Comm: syz.2.3878 Not tainted syzkaller #0 PREEMPT(lazy) [ 292.567967][T17406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 292.567987][T17406] Call Trace: [ 292.567995][T17406] [ 292.568004][T17406] __dump_stack+0x1d/0x30 [ 292.568035][T17406] dump_stack_lvl+0x95/0xd0 [ 292.568062][T17406] dump_stack+0x15/0x1b [ 292.568109][T17406] should_fail_ex+0x259/0x270 [ 292.568148][T17406] ? do_getname+0x2e/0x1c0 [ 292.568172][T17406] should_failslab+0x8c/0xb0 [ 292.568219][T17406] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 292.568251][T17406] ? do_getname+0x2e/0x1c0 [ 292.568312][T17406] do_getname+0x2e/0x1c0 [ 292.568337][T17406] __se_sys_symlinkat+0x32/0x1b0 [ 292.568362][T17406] __x64_sys_symlinkat+0x43/0x50 [ 292.568385][T17406] x64_sys_call+0x1cf4/0x2550 [ 292.568483][T17406] do_syscall_64+0x112/0x360 [ 292.568518][T17406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.568560][T17406] RIP: 0033:0x7fccf482f559 [ 292.568603][T17406] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 292.568625][T17406] RSP: 002b:00007fccf327f028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 292.568650][T17406] RAX: ffffffffffffffda RBX: 00007fccf4ab5fa0 RCX: 00007fccf482f559 [ 292.568667][T17406] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000000 [ 292.568681][T17406] RBP: 00007fccf48c6b20 R08: 0000000000000000 R09: 0000000000000000 [ 292.568746][T17406] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 292.568763][T17406] R13: 00007fccf4ab6038 R14: 00007fccf4ab5fa0 R15: 00007ffc159d8198 [ 292.568786][T17406] [ 293.237283][ T6565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.529523][T17470] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3891'. [ 293.687561][T17485] ip_tables: iptables: counters copy to user failed while replacing table [ 293.714945][ T6578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 293.806132][T17494] bond4: entered allmulticast mode [ 293.838660][T17494] wireguard0: entered promiscuous mode [ 293.838681][T17494] wireguard0: entered allmulticast mode [ 293.838890][T17494] bond4: (slave wireguard0): The slave device specified does not support setting the MAC address [ 293.839681][T17494] bond4: (slave wireguard0): Error -95 calling set_mac_address [ 293.984382][T17505] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 293.984624][T17505] batman_adv: batadv0: Adding interface: gretap1 [ 293.984639][T17505] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 293.987110][T17505] batman_adv: batadv0: Interface activated: gretap1 [ 294.115073][ T6579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 294.174599][T17515] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 294.569114][T17537] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap3 [ 294.569372][T17537] batman_adv: batadv0: Adding interface: gretap3 [ 294.569387][T17537] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 294.569423][T17537] batman_adv: batadv0: Interface activated: gretap3 [ 294.908671][T17555] netlink: 32 bytes leftover after parsing attributes in process `syz.6.3921'. [ 295.040797][T17561] FAULT_INJECTION: forcing a failure. [ 295.040797][T17561] name failslab, interval 1, probability 0, space 0, times 0 [ 295.040864][T17561] CPU: 1 UID: 0 PID: 17561 Comm: syz.3.3923 Not tainted syzkaller #0 PREEMPT(lazy) [ 295.040904][T17561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 295.040930][T17561] Call Trace: [ 295.040937][T17561] [ 295.040946][T17561] __dump_stack+0x1d/0x30 [ 295.040976][T17561] dump_stack_lvl+0x95/0xd0 [ 295.041002][T17561] dump_stack+0x15/0x1b [ 295.041024][T17561] should_fail_ex+0x259/0x270 [ 295.041092][T17561] ? alloc_empty_file+0x70/0x1e0 [ 295.041120][T17561] should_failslab+0x8c/0xb0 [ 295.041154][T17561] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 295.041203][T17561] ? alloc_empty_file+0x70/0x1e0 [ 295.041293][T17561] ? kvm_sched_clock_read+0x11/0x20 [ 295.041324][T17561] alloc_empty_file+0x70/0x1e0 [ 295.041351][T17561] path_openat+0x50/0x11c0 [ 295.041463][T17561] do_file_open+0x16c/0x290 [ 295.041498][T17561] do_sys_openat2+0xa1/0x140 [ 295.041527][T17561] __x64_sys_openat+0xf2/0x120 [ 295.041564][T17561] x64_sys_call+0x1f72/0x2550 [ 295.041612][T17561] do_syscall_64+0x112/0x360 [ 295.041651][T17561] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.041675][T17561] RIP: 0033:0x7f113d6dfd8e [ 295.041691][T17561] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 295.041792][T17561] RSP: 002b:00007f113c16eec8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 295.041825][T17561] RAX: ffffffffffffffda RBX: 00007f113c16f6c0 RCX: 00007f113d6dfd8e [ 295.041840][T17561] RDX: 0000000000000002 RSI: 00007f113c16ef90 RDI: ffffffffffffff9c [ 295.041854][T17561] RBP: 00007f113d7b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 295.041921][T17561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.041936][T17561] R13: 00007f113d9a6038 R14: 00007f113d9a5fa0 R15: 00007ffcca6c6b68 [ 295.041957][T17561] [ 295.144370][T17566] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 295.144370][T17566] The task syz.9.3922 (17566) triggered the difference, watch for misbehavior. [ 295.326790][ T6567] net_ratelimit: 3 callbacks suppressed [ 295.326809][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 295.399793][T17577] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 296.358128][ T6565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.507228][T17627] xt_hashlimit: size too large, truncated to 1048576 [ 296.755561][ T6578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 296.834143][ C1] bridge0: port 1(syz_tun) entered learning state [ 296.935542][ T29] kauditd_printk_skb: 296 callbacks suppressed [ 296.935559][ T29] audit: type=1400 audit(1793305489.933:3364): avc: denied { write } for pid=17641 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 296.989581][ T29] audit: type=1400 audit(1793305489.983:3365): avc: denied { write } for pid=17652 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 297.155472][ T6579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.400322][ T6565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.478042][ T6578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 297.675241][T17691] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3967'. [ 297.713318][ T29] audit: type=1326 audit(1793305490.703:3366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17692 comm="syz.6.3968" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090837f559 code=0x7ffc0000 [ 297.713797][ T29] audit: type=1326 audit(1793305490.703:3367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17692 comm="syz.6.3968" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090837f559 code=0x7ffc0000 [ 297.714091][ T29] audit: type=1326 audit(1793305490.703:3368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17692 comm="syz.6.3968" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090837f559 code=0x7ffc0000 [ 297.721986][ T29] audit: type=1326 audit(1793305490.713:3369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17692 comm="syz.6.3968" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f090837f559 code=0x7ffc0000 [ 297.722545][ T29] audit: type=1326 audit(1793305490.713:3370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17692 comm="syz.6.3968" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090837f559 code=0x7ffc0000 [ 297.722973][ T29] audit: type=1326 audit(1793305490.713:3371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17692 comm="syz.6.3968" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090837f559 code=0x7ffc0000 [ 297.723154][ T29] audit: type=1326 audit(1793305490.713:3372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17692 comm="syz.6.3968" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f090837f559 code=0x7ffc0000 [ 297.726117][ T29] audit: type=1326 audit(1793305490.723:3373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17692 comm="syz.6.3968" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f090837f559 code=0x7ffc0000 [ 298.053687][T17704] sctp: [Deprecated]: syz.6.3970 (pid 17704) Use of int in maxseg socket option. [ 298.053687][T17704] Use struct sctp_assoc_value instead [ 298.065517][T17705] loop9: detected capacity change from 0 to 512 [ 298.083073][T17705] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 298.099633][T17705] EXT4-fs error (device loop9): ext4_orphan_get:1404: inode #15: comm syz.9.3973: iget: bad i_size value: 38620345925642 [ 298.099673][T17705] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 298.104064][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 298.104107][ C0] EXT4-fs (loop9): initial error at time 1793305491: ext4_orphan_get:1404: inode 15 [ 298.104144][ C0] EXT4-fs (loop9): last error at time 1793305491: ext4_orphan_get:1404: inode 15 [ 298.104772][T17705] EXT4-fs error (device loop9): ext4_orphan_get:1409: comm syz.9.3973: couldn't read orphan inode 15 (err -117) [ 298.104820][T17705] loop9: lost filesystem error report for type 5 error -117 [ 298.106772][T17705] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.310355][T16001] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.380936][T17724] xt_hashlimit: max too large, truncated to 1048576 [ 298.399915][T17727] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 298.399942][T17727] FAULT_INJECTION: forcing a failure. [ 298.399942][T17727] name failslab, interval 1, probability 0, space 0, times 0 [ 298.399965][T17727] CPU: 1 UID: 0 PID: 17727 Comm: syz.9.3980 Not tainted syzkaller #0 PREEMPT(lazy) [ 298.400069][T17727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 298.400084][T17727] Call Trace: [ 298.400092][T17727] [ 298.400181][T17727] __dump_stack+0x1d/0x30 [ 298.400211][T17727] dump_stack_lvl+0x95/0xd0 [ 298.400256][T17727] dump_stack+0x15/0x1b [ 298.400394][T17727] should_fail_ex+0x259/0x270 [ 298.400424][T17727] should_failslab+0x8c/0xb0 [ 298.400452][T17727] __kvmalloc_node_noprof+0x14f/0x5b0 [ 298.400487][T17727] ? __nf_hook_entries_try_shrink+0x272/0x430 [ 298.400627][T17727] ? __nf_hook_entries_try_shrink+0x272/0x430 [ 298.400653][T17727] __nf_hook_entries_try_shrink+0x272/0x430 [ 298.400742][T17727] __nf_unregister_net_hook+0x2ca/0x390 [ 298.400769][T17727] nf_unregister_net_hooks+0xab/0xe0 [ 298.400797][T17727] nf_ct_netns_do_put+0x1c6/0x260 [ 298.400834][T17727] ? __pfx_state_mt_destroy+0x10/0x10 [ 298.400859][T17727] nf_ct_netns_put+0xea/0x1f0 [ 298.400885][T17727] ? __pfx_state_mt_destroy+0x10/0x10 [ 298.400963][T17727] state_mt_destroy+0x2f/0x40 [ 298.400983][T17727] translate_table+0xec6/0x1120 [ 298.401016][T17727] do_ipt_set_ctl+0x735/0x970 [ 298.401158][T17727] ? _raw_spin_lock_bh+0x57/0xb0 [ 298.401196][T17727] nf_setsockopt+0x199/0x1b0 [ 298.401227][T17727] ip_setsockopt+0x102/0x110 [ 298.401255][T17727] tcp_setsockopt+0x98/0xb0 [ 298.401285][T17727] sock_common_setsockopt+0x69/0x80 [ 298.401314][T17727] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 298.401345][T17727] __sys_setsockopt+0x184/0x200 [ 298.401386][T17727] __x64_sys_setsockopt+0x64/0x80 [ 298.401416][T17727] x64_sys_call+0x248f/0x2550 [ 298.401489][T17727] do_syscall_64+0x112/0x360 [ 298.401546][T17727] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.401572][T17727] RIP: 0033:0x7f2f2041f559 [ 298.401655][T17727] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 298.401678][T17727] RSP: 002b:00007f2f1ee6f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 298.401704][T17727] RAX: ffffffffffffffda RBX: 00007f2f206a5fa0 RCX: 00007f2f2041f559 [ 298.401721][T17727] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000003 [ 298.401736][T17727] RBP: 00007f2f204b6b20 R08: 00000000000003c8 R09: 0000000000000000 [ 298.401752][T17727] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000000 [ 298.401792][T17727] R13: 00007f2f206a6038 R14: 00007f2f206a5fa0 R15: 00007ffd8a068788 [ 298.401815][T17727] [ 298.448734][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 298.453013][T17729] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3981'. [ 298.879685][T17752] rxe_eth0 speed is unknown, defaulting to 1000 [ 299.395053][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 299.395128][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.272075][T17906] loop9: detected capacity change from 0 to 512 [ 300.339171][T17906] ext2: Unknown parameter 'subj_user' [ 300.434168][ T53] rpcbind: server 127.0.0.1 not responding, timed out [ 300.475090][T17939] netlink: 108 bytes leftover after parsing attributes in process `syz.6.4012'. [ 300.476071][T17939] netlink: 80 bytes leftover after parsing attributes in process `syz.6.4012'. [ 300.518093][ T6567] net_ratelimit: 5 callbacks suppressed [ 300.518113][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.577735][T17953] netlink: 'syz.5.4019': attribute type 1 has an invalid length. [ 300.583801][T17953] 8021q: adding VLAN 0 to HW filter on device bond5 [ 300.607075][T17953] vlan3: entered allmulticast mode [ 300.607095][T17953] bond0: entered allmulticast mode [ 300.607875][T17953] bond5: (slave vlan3): Opening slave failed [ 300.676014][ T6579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 300.828148][T17973] xt_hashlimit: size too large, truncated to 1048576 [ 301.019477][T17987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4033'. [ 301.343150][T18023] FAULT_INJECTION: forcing a failure. [ 301.343150][T18023] name failslab, interval 1, probability 0, space 0, times 0 [ 301.343204][T18023] CPU: 1 UID: 0 PID: 18023 Comm: syz.9.4041 Not tainted syzkaller #0 PREEMPT(lazy) [ 301.343229][T18023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 301.343244][T18023] Call Trace: [ 301.343257][T18023] [ 301.343268][T18023] __dump_stack+0x1d/0x30 [ 301.343299][T18023] dump_stack_lvl+0x95/0xd0 [ 301.343376][T18023] dump_stack+0x15/0x1b [ 301.343400][T18023] should_fail_ex+0x259/0x270 [ 301.343501][T18023] should_failslab+0x8c/0xb0 [ 301.343562][T18023] kmem_cache_alloc_lru_noprof+0x61/0x3e0 [ 301.343663][T18023] ? hugetlbfs_alloc_inode+0xbc/0x100 [ 301.343689][T18023] ? hugetlbfs_alloc_inode+0xbc/0x100 [ 301.343756][T18023] ? resv_map_alloc+0x57/0x190 [ 301.343781][T18023] hugetlbfs_alloc_inode+0xbc/0x100 [ 301.343843][T18023] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 301.343871][T18023] alloc_inode+0x40/0x170 [ 301.343899][T18023] new_inode+0x1d/0xe0 [ 301.343927][T18023] hugetlbfs_get_inode+0x7b/0x350 [ 301.344015][T18023] hugetlb_file_setup+0x192/0x3d0 [ 301.344050][T18023] memfd_alloc_file+0x70/0x300 [ 301.344108][T18023] __se_sys_memfd_create+0x2e1/0x3c0 [ 301.344215][T18023] __x64_sys_memfd_create+0x31/0x40 [ 301.344249][T18023] x64_sys_call+0x1955/0x2550 [ 301.344350][T18023] do_syscall_64+0x112/0x360 [ 301.344400][T18023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.344451][T18023] RIP: 0033:0x7f2f2041f559 [ 301.344470][T18023] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 301.344492][T18023] RSP: 002b:00007f2f1ee6f028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 301.344526][T18023] RAX: ffffffffffffffda RBX: 00007f2f206a5fa0 RCX: 00007f2f2041f559 [ 301.344551][T18023] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000200000000840 [ 301.344568][T18023] RBP: 00007f2f204b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 301.344604][T18023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.344620][T18023] R13: 00007f2f206a6038 R14: 00007f2f206a5fa0 R15: 00007ffd8a068788 [ 301.344643][T18023] [ 301.568822][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 301.673368][T18029] xt_hashlimit: size too large, truncated to 1048576 [ 301.813137][T18036] netlink: 104 bytes leftover after parsing attributes in process `syz.6.4045'. [ 302.424811][T18050] loop9: detected capacity change from 0 to 128 [ 302.597460][ T6568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 302.763088][T18060] netlink: 'syz.6.4053': attribute type 10 has an invalid length. [ 302.763109][T18060] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4053'. [ 302.868745][T18067] bond0: option mode: unable to set because the bond device has slaves [ 302.873818][T18067] netlink: 'syz.2.4055': attribute type 10 has an invalid length. [ 303.170619][T18097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.185709][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.235153][ T6576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.238291][T18097] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.253467][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 303.367503][T18101] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 304.469005][T18196] batman_adv: batadv0: Adding interface: gretap1 [ 304.469024][T18196] batman_adv: batadv0: The MTU of interface gretap1 is too small (1442) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 304.469152][T18196] batman_adv: batadv0: Interface activated: gretap1 [ 304.870261][T18236] FAULT_INJECTION: forcing a failure. [ 304.870261][T18236] name failslab, interval 1, probability 0, space 0, times 0 [ 304.870330][T18236] CPU: 0 UID: 0 PID: 18236 Comm: syz.9.4082 Not tainted syzkaller #0 PREEMPT(lazy) [ 304.870360][T18236] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 304.870375][T18236] Call Trace: [ 304.870428][T18236] [ 304.870439][T18236] __dump_stack+0x1d/0x30 [ 304.870469][T18236] dump_stack_lvl+0x95/0xd0 [ 304.870493][T18236] dump_stack+0x15/0x1b [ 304.870517][T18236] should_fail_ex+0x259/0x270 [ 304.870589][T18236] ? percpu_ref_init+0x9c/0x250 [ 304.870615][T18236] should_failslab+0x8c/0xb0 [ 304.870650][T18236] __kmalloc_cache_noprof+0x5d/0x3e0 [ 304.870763][T18236] ? percpu_ref_init+0x33/0x250 [ 304.870858][T18236] ? percpu_ref_init+0x9c/0x250 [ 304.870882][T18236] ? __pfx_io_ring_ctx_ref_free+0x10/0x10 [ 304.870917][T18236] percpu_ref_init+0x9c/0x250 [ 304.870955][T18236] io_ring_ctx_alloc+0x1b8/0x650 [ 304.870989][T18236] io_uring_create+0x4d/0x4f0 [ 304.871026][T18236] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 304.871145][T18236] __x64_sys_io_uring_setup+0x31/0x40 [ 304.871178][T18236] x64_sys_call+0x1fbf/0x2550 [ 304.871208][T18236] do_syscall_64+0x112/0x360 [ 304.871255][T18236] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.871329][T18236] RIP: 0033:0x7f2f2041f559 [ 304.871353][T18236] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 304.871377][T18236] RSP: 002b:00007f2f1ee6efb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 304.871405][T18236] RAX: ffffffffffffffda RBX: 0000200000000400 RCX: 00007f2f2041f559 [ 304.871486][T18236] RDX: 00002000000004c0 RSI: 0000200000000400 RDI: 0000000000000002 [ 304.871504][T18236] RBP: 00007f2f204b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 304.871520][T18236] R10: 0000200000000500 R11: 0000000000000206 R12: 00002000000004c0 [ 304.871537][T18236] R13: 0000200000000500 R14: 0000200000000480 R15: 00007ffd8a068788 [ 304.871626][T18236] [ 305.794410][ C1] net_ratelimit: 7 callbacks suppressed [ 305.794431][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 305.798711][ T6565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.064312][ T6576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.312414][T18288] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4094'. [ 306.420809][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 306.420828][ T29] audit: type=1326 audit(1793305499.403:3421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.5.4096" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe937e2f559 code=0x7ffc0000 [ 306.420917][ T29] audit: type=1326 audit(1793305499.403:3422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.5.4096" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe937e2f559 code=0x7ffc0000 [ 306.420941][ T29] audit: type=1326 audit(1793305499.403:3423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.5.4096" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe937e2f559 code=0x7ffc0000 [ 306.420966][ T29] audit: type=1326 audit(1793305499.403:3424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.5.4096" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe937e2f559 code=0x7ffc0000 [ 306.421055][ T29] audit: type=1326 audit(1793305499.403:3425): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.5.4096" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe937e2f559 code=0x7ffc0000 [ 306.421155][ T29] audit: type=1326 audit(1793305499.403:3426): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.5.4096" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe937e2f559 code=0x7ffc0000 [ 306.421184][ T29] audit: type=1326 audit(1793305499.403:3427): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.5.4096" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe937e2f559 code=0x7ffc0000 [ 306.421283][ T29] audit: type=1326 audit(1793305499.403:3428): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.5.4096" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe937e2f559 code=0x7ffc0000 [ 306.421410][ T29] audit: type=1326 audit(1793305499.403:3429): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.5.4096" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fe937e2f559 code=0x7ffc0000 [ 306.421434][ T29] audit: type=1326 audit(1793305499.403:3430): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18291 comm="syz.5.4096" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe937e2f559 code=0x7ffc0000 [ 306.757125][ T6578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 306.835546][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.035297][ T72] IPVS: starting estimator thread 0... [ 307.075116][ T6579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 307.134972][T18326] IPVS: using max 2592 ests per chain, 129600 per kthread [ 307.341030][T16001] tipc: Resetting bearer [ 307.367695][T16001] tipc: Disabling bearer [ 307.874356][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.081870][T18371] loop3: detected capacity change from 0 to 128 [ 308.091064][T18371] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 308.091296][T18371] ext4 filesystem being mounted at /51/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 308.178949][T18373] rxe_eth0 speed is unknown, defaulting to 1000 [ 308.294121][T16801] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 308.386867][T18353] rxe_eth0 speed is unknown, defaulting to 1000 [ 308.796126][T18388] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4128'. [ 308.915651][ T6565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 308.953830][T18388] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4128'. [ 309.075073][ T6579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.265387][T18353] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.265424][T18353] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.265564][T18353] bridge_slave_0: entered allmulticast mode [ 309.266125][T18353] bridge_slave_0: entered promiscuous mode [ 309.268870][T18353] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.268922][T18353] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.269201][T18353] bridge_slave_1: entered allmulticast mode [ 309.271283][T18353] bridge_slave_1: entered promiscuous mode [ 309.317262][T18353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 309.318334][T18353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.328215][T18353] team0: Port device team_slave_0 added [ 309.329214][T18353] team0: Port device team_slave_1 added [ 309.339632][T18353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.339679][T18353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.339707][T18353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.340382][T18353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.340395][T18353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.340424][T18353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 309.363718][T18353] hsr_slave_0: entered promiscuous mode [ 309.364401][T18353] hsr_slave_1: entered promiscuous mode [ 309.364655][T18353] debugfs: 'hsr0' already exists in 'hsr' [ 309.364671][T18353] Cannot create hsr debugfs directory [ 309.403303][T18408] FAULT_INJECTION: forcing a failure. [ 309.403303][T18408] name failslab, interval 1, probability 0, space 0, times 0 [ 309.403413][T18408] CPU: 0 UID: 0 PID: 18408 Comm: syz.2.4133 Not tainted syzkaller #0 PREEMPT(lazy) [ 309.403439][T18408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 309.403453][T18408] Call Trace: [ 309.403460][T18408] [ 309.403468][T18408] __dump_stack+0x1d/0x30 [ 309.403504][T18408] dump_stack_lvl+0x95/0xd0 [ 309.403546][T18408] dump_stack+0x15/0x1b [ 309.403568][T18408] should_fail_ex+0x259/0x270 [ 309.403652][T18408] ? batadv_tvlv_handler_register+0xbd/0x2c0 [ 309.403680][T18408] should_failslab+0x8c/0xb0 [ 309.403762][T18408] __kmalloc_cache_noprof+0x5d/0x3e0 [ 309.403795][T18408] ? batadv_tvlv_handler_register+0xbd/0x2c0 [ 309.403821][T18408] ? __pfx_batadv_roam_tvlv_unicast_handler_v1+0x10/0x10 [ 309.403908][T18408] batadv_tvlv_handler_register+0xbd/0x2c0 [ 309.403955][T18408] ? __pfx_batadv_roam_tvlv_unicast_handler_v1+0x10/0x10 [ 309.403993][T18408] batadv_tt_init+0x10c/0x1f0 [ 309.404029][T18408] batadv_mesh_init+0x2b9/0x410 [ 309.404100][T18408] batadv_meshif_init_late+0x3e1/0x460 [ 309.404131][T18408] register_netdevice+0x234/0x13f0 [ 309.404163][T18408] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 309.404219][T18408] batadv_meshif_newlink+0x7d/0x90 [ 309.404248][T18408] rtnl_newlink_create+0x1e4/0x4a0 [ 309.404350][T18408] ? security_capable+0x7b/0x90 [ 309.404373][T18408] ? netlink_ns_capable+0x86/0xa0 [ 309.404400][T18408] rtnl_newlink+0x1255/0x1510 [ 309.404430][T18408] ? __kfree_skb+0x109/0x150 [ 309.404519][T18408] ? nlmon_xmit+0x4f/0x60 [ 309.404544][T18408] ? consume_skb+0x4b/0x130 [ 309.404573][T18408] ? nlmon_xmit+0x4f/0x60 [ 309.404596][T18408] ? __rcu_read_unlock+0x4e/0x70 [ 309.404624][T18408] ? avc_has_perm_noaudit+0xac/0x160 [ 309.404649][T18408] ? cred_has_capability+0x224/0x2a0 [ 309.404675][T18408] ? selinux_capable+0x31/0x40 [ 309.404701][T18408] ? security_capable+0x7b/0x90 [ 309.404792][T18408] ? ns_capable+0x80/0xb0 [ 309.404815][T18408] ? __pfx_rtnl_newlink+0x10/0x10 [ 309.404841][T18408] rtnetlink_rcv_msg+0x64b/0x720 [ 309.404889][T18408] netlink_rcv_skb+0x11e/0x220 [ 309.404920][T18408] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 309.404970][T18408] rtnetlink_rcv+0x1c/0x30 [ 309.405068][T18408] netlink_unicast+0x665/0x740 [ 309.405171][T18408] netlink_sendmsg+0x5ef/0x740 [ 309.405255][T18408] ? __pfx_netlink_sendmsg+0x10/0x10 [ 309.405311][T18408] ____sys_sendmsg+0x54a/0x590 [ 309.405361][T18408] ___sys_sendmsg+0x195/0x1e0 [ 309.405402][T18408] __x64_sys_sendmsg+0xd4/0x160 [ 309.405437][T18408] x64_sys_call+0x22ab/0x2550 [ 309.405463][T18408] do_syscall_64+0x112/0x360 [ 309.405501][T18408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.405524][T18408] RIP: 0033:0x7fccf482f559 [ 309.405542][T18408] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 309.405641][T18408] RSP: 002b:00007fccf327f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 309.405730][T18408] RAX: ffffffffffffffda RBX: 00007fccf4ab5fa0 RCX: 00007fccf482f559 [ 309.405825][T18408] RDX: 0000000020000840 RSI: 0000200000000480 RDI: 0000000000000006 [ 309.405840][T18408] RBP: 00007fccf48c6b20 R08: 0000000000000000 R09: 0000000000000000 [ 309.405862][T18408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.405876][T18408] R13: 00007fccf4ab6038 R14: 00007fccf4ab5fa0 R15: 00007ffc159d8198 [ 309.405897][T18408] [ 309.425236][T18408] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 309.776633][T18353] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.795060][ T6578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 309.943176][T18353] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.915144][ C1] net_ratelimit: 6 callbacks suppressed [ 310.915164][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.918697][ T6565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.926821][ T4181] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.931251][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.932329][T18353] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 310.948681][ T6568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 310.996732][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 311.001936][T18353] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.101188][T18353] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 311.105105][T18353] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 311.105674][T18353] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 311.109871][T18353] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 311.110320][T18353] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 311.113559][T18353] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 311.115451][T18353] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 311.118896][T18353] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 311.212891][T18480] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4161'. [ 311.483041][T18353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.515608][T18353] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.525972][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.526007][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.526978][ T72] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.527078][ T72] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.657604][T18501] syzkaller0: entered promiscuous mode [ 311.657628][T18501] syzkaller0: entered allmulticast mode [ 311.862567][T18353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.035834][ T6565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.066176][T18353] veth0_vlan: entered promiscuous mode [ 312.069296][T18353] veth1_vlan: entered promiscuous mode [ 312.091959][T18353] veth0_macvtap: entered promiscuous mode [ 312.101160][T18353] veth1_macvtap: entered promiscuous mode [ 312.115620][ T6579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 312.121343][T18353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 312.141276][T18353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 312.204052][ C1] bridge0: port 1(syz_tun) entered forwarding state [ 312.204076][ C1] bridge0: topology change detected, propagating [ 312.207059][ T7183] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.208195][ T7183] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.234389][T15678] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.234973][T15678] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.323944][T18567] IPv6: NLM_F_CREATE should be specified when creating new route [ 312.500475][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 312.500513][ T29] audit: type=1400 audit(1793305505.493:3459): avc: denied { sys_admin } for pid=18572 comm="syz.2.4185" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 313.084716][ T6565] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 313.301734][T18607] FAULT_INJECTION: forcing a failure. [ 313.301734][T18607] name failslab, interval 1, probability 0, space 0, times 0 [ 313.301763][T18607] CPU: 0 UID: 0 PID: 18607 Comm: syz.7.4198 Not tainted syzkaller #0 PREEMPT(lazy) [ 313.301861][T18607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 313.301877][T18607] Call Trace: [ 313.301885][T18607] [ 313.301895][T18607] __dump_stack+0x1d/0x30 [ 313.301987][T18607] dump_stack_lvl+0x95/0xd0 [ 313.302015][T18607] dump_stack+0x15/0x1b [ 313.302039][T18607] should_fail_ex+0x259/0x270 [ 313.302069][T18607] ? alloc_vfsmnt+0x5d/0x380 [ 313.302111][T18607] should_failslab+0x8c/0xb0 [ 313.302147][T18607] __kmalloc_cache_noprof+0x5d/0x3e0 [ 313.302290][T18607] ? alloc_vfsmnt+0x5d/0x380 [ 313.302324][T18607] alloc_vfsmnt+0x5d/0x380 [ 313.302355][T18607] clone_mnt+0x30/0x610 [ 313.302382][T18607] mnt_clone_internal+0x39/0x80 [ 313.302470][T18607] __se_sys_acct+0xfa/0x500 [ 313.302501][T18607] __x64_sys_acct+0x1f/0x30 [ 313.302524][T18607] x64_sys_call+0x1461/0x2550 [ 313.302592][T18607] do_syscall_64+0x112/0x360 [ 313.302650][T18607] ? generic_smp_call_function_single_interrupt+0x13/0x20 [ 313.302695][T18607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.302766][T18607] RIP: 0033:0x7f873c3ff559 [ 313.302783][T18607] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 313.302805][T18607] RSP: 002b:00007f873ae57028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a3 [ 313.302830][T18607] RAX: ffffffffffffffda RBX: 00007f873c685fa0 RCX: 00007f873c3ff559 [ 313.302856][T18607] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000240 [ 313.302924][T18607] RBP: 00007f873c496b20 R08: 0000000000000000 R09: 0000000000000000 [ 313.302939][T18607] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 313.302953][T18607] R13: 00007f873c686038 R14: 00007f873c685fa0 R15: 00007ffff7efda28 [ 313.302972][T18607] [ 313.402172][T18605] netlink: 14 bytes leftover after parsing attributes in process `syz.3.4197'. [ 313.402271][T18605] openvswitch: netlink: Message has 6 unknown bytes. [ 313.620296][ T29] audit: type=1400 audit(1793305506.613:3460): avc: denied { create } for pid=18619 comm="syz.3.4203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 313.625906][ T29] audit: type=1400 audit(1793305506.623:3461): avc: denied { write } for pid=18619 comm="syz.3.4203" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 314.008308][T18643] loop3: detected capacity change from 0 to 512 [ 314.008906][T18643] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 314.072015][T18646] netlink: 'syz.6.4213': attribute type 1 has an invalid length. [ 314.110641][T18646] 8021q: adding VLAN 0 to HW filter on device bond3 [ 314.259502][T18658] xt_hashlimit: size too large, truncated to 1048576 [ 314.314332][T18646] bond3: (slave geneve3): making interface the new active one [ 314.318452][T18646] bond3: (slave geneve3): Enslaving as an active interface with an up link [ 314.397429][T18666] loop3: detected capacity change from 0 to 512 [ 314.428780][T18666] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 314.428982][T18666] ext4 filesystem being mounted at /68/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 315.045919][ T29] audit: type=1400 audit(1793305508.043:3462): avc: denied { shutdown } for pid=18702 comm="syz.6.4225" lport=7 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 315.448796][T16801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 315.492849][T18738] FAULT_INJECTION: forcing a failure. [ 315.492849][T18738] name failslab, interval 1, probability 0, space 0, times 0 [ 315.492898][T18738] CPU: 1 UID: 0 PID: 18738 Comm: syz.3.4228 Not tainted syzkaller #0 PREEMPT(lazy) [ 315.492931][T18738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 315.492946][T18738] Call Trace: [ 315.492954][T18738] [ 315.493016][T18738] __dump_stack+0x1d/0x30 [ 315.493089][T18738] dump_stack_lvl+0x95/0xd0 [ 315.493116][T18738] dump_stack+0x15/0x1b [ 315.493140][T18738] should_fail_ex+0x259/0x270 [ 315.493240][T18738] ? security_inode_alloc+0x37/0x100 [ 315.493265][T18738] should_failslab+0x8c/0xb0 [ 315.493292][T18738] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 315.493332][T18738] ? security_inode_alloc+0x37/0x100 [ 315.493372][T18738] security_inode_alloc+0x37/0x100 [ 315.493504][T18738] inode_init_always_gfp+0x495/0x4e0 [ 315.493636][T18738] ? __pfx_bpf_fill_super+0x10/0x10 [ 315.493662][T18738] ? __pfx_bpf_fs_alloc_inode+0x10/0x10 [ 315.493683][T18738] alloc_inode+0x58/0x170 [ 315.493721][T18738] new_inode+0x1d/0xe0 [ 315.493749][T18738] ? __pfx_bpf_fill_super+0x10/0x10 [ 315.493809][T18738] bpf_fill_super+0x102/0x7f0 [ 315.493862][T18738] ? __pfx_bpf_fill_super+0x10/0x10 [ 315.493910][T18738] get_tree_nodev+0x83/0x100 [ 315.493944][T18738] bpf_get_tree+0x1c/0x30 [ 315.493967][T18738] vfs_get_tree+0x57/0x1d0 [ 315.494062][T18738] vfs_cmd_create+0x8a/0x140 [ 315.494095][T18738] vfs_fsconfig_locked+0x6f/0x210 [ 315.494133][T18738] __se_sys_fsconfig+0x671/0x7e0 [ 315.494163][T18738] __x64_sys_fsconfig+0x67/0x80 [ 315.494241][T18738] x64_sys_call+0xaa0/0x2550 [ 315.494275][T18738] do_syscall_64+0x112/0x360 [ 315.494318][T18738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.494343][T18738] RIP: 0033:0x7f113d71f559 [ 315.494368][T18738] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.494452][T18738] RSP: 002b:00007f113c16f028 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 315.494475][T18738] RAX: ffffffffffffffda RBX: 00007f113d9a5fa0 RCX: 00007f113d71f559 [ 315.494491][T18738] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000003 [ 315.494504][T18738] RBP: 00007f113d7b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 315.494518][T18738] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.494531][T18738] R13: 00007f113d9a6038 R14: 00007f113d9a5fa0 R15: 00007ffcca6c6b68 [ 315.494551][T18738] [ 315.781020][T18755] netlink: 'syz.2.4232': attribute type 4 has an invalid length. [ 315.869837][T18761] FAULT_INJECTION: forcing a failure. [ 315.869837][T18761] name failslab, interval 1, probability 0, space 0, times 0 [ 315.869871][T18761] CPU: 1 UID: 0 PID: 18761 Comm: syz.7.4233 Not tainted syzkaller #0 PREEMPT(lazy) [ 315.869969][T18761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 315.869984][T18761] Call Trace: [ 315.869993][T18761] [ 315.870001][T18761] __dump_stack+0x1d/0x30 [ 315.870030][T18761] dump_stack_lvl+0x95/0xd0 [ 315.870076][T18761] dump_stack+0x15/0x1b [ 315.870101][T18761] should_fail_ex+0x259/0x270 [ 315.870198][T18761] ? __addrconf_sysctl_register+0x60/0x340 [ 315.870235][T18761] should_failslab+0x8c/0xb0 [ 315.870269][T18761] __kmalloc_node_track_caller_noprof+0xb6/0x4d0 [ 315.870395][T18761] ? _raw_spin_unlock+0x9/0x30 [ 315.870416][T18761] ? __register_sysctl_table+0xbbe/0xbe0 [ 315.870475][T18761] ? __addrconf_sysctl_register+0x60/0x340 [ 315.870523][T18761] kmemdup_noprof+0x2b/0x70 [ 315.870547][T18761] __addrconf_sysctl_register+0x60/0x340 [ 315.870616][T18761] ? neigh_sysctl_register+0x682/0x6d0 [ 315.870652][T18761] ? proc_create_single_data+0xfb/0x140 [ 315.870719][T18761] addrconf_sysctl_register+0xe6/0x130 [ 315.870744][T18761] ipv6_add_dev+0x8f9/0xb20 [ 315.870798][T18761] addrconf_notify+0x3ad/0x8e0 [ 315.870847][T18761] ? __pfx_addrconf_notify+0x10/0x10 [ 315.870884][T18761] raw_notifier_call_chain+0x72/0x1a0 [ 315.870955][T18761] ? blake2s_update+0x12b/0x150 [ 315.870989][T18761] call_netdevice_notifiers+0xb5/0x110 [ 315.871139][T18761] register_netdevice+0x122d/0x13f0 [ 315.871172][T18761] ? __pfx_batadv_meshif_newlink+0x10/0x10 [ 315.871204][T18761] batadv_meshif_newlink+0x7d/0x90 [ 315.871298][T18761] rtnl_newlink_create+0x1e4/0x4a0 [ 315.871328][T18761] ? security_capable+0x7b/0x90 [ 315.871356][T18761] ? netlink_ns_capable+0x86/0xa0 [ 315.871389][T18761] rtnl_newlink+0x1255/0x1510 [ 315.871506][T18761] ? __siphash_unaligned+0xab/0x2d0 [ 315.871545][T18761] ? __memcg_slab_free_hook+0x154/0x340 [ 315.871574][T18761] ? __rcu_read_unlock+0x4e/0x70 [ 315.871660][T18761] ? avc_has_perm_noaudit+0xac/0x160 [ 315.871691][T18761] ? cred_has_capability+0x224/0x2a0 [ 315.871718][T18761] ? selinux_capable+0x31/0x40 [ 315.871811][T18761] ? security_capable+0x7b/0x90 [ 315.871910][T18761] ? ns_capable+0x80/0xb0 [ 315.871933][T18761] ? __pfx_rtnl_newlink+0x10/0x10 [ 315.871963][T18761] rtnetlink_rcv_msg+0x64b/0x720 [ 315.871996][T18761] netlink_rcv_skb+0x11e/0x220 [ 315.872093][T18761] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 315.872128][T18761] rtnetlink_rcv+0x1c/0x30 [ 315.872235][T18761] netlink_unicast+0x665/0x740 [ 315.872279][T18761] netlink_sendmsg+0x5ef/0x740 [ 315.872312][T18761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 315.872339][T18761] ____sys_sendmsg+0x54a/0x590 [ 315.872427][T18761] ___sys_sendmsg+0x195/0x1e0 [ 315.872475][T18761] __x64_sys_sendmsg+0xd4/0x160 [ 315.872563][T18761] x64_sys_call+0x22ab/0x2550 [ 315.872594][T18761] do_syscall_64+0x112/0x360 [ 315.872683][T18761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 315.872709][T18761] RIP: 0033:0x7f873c3ff559 [ 315.872731][T18761] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.872752][T18761] RSP: 002b:00007f873ae57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 315.872778][T18761] RAX: ffffffffffffffda RBX: 00007f873c685fa0 RCX: 00007f873c3ff559 [ 315.872803][T18761] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000005 [ 315.872818][T18761] RBP: 00007f873c496b20 R08: 0000000000000000 R09: 0000000000000000 [ 315.872834][T18761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.872869][T18761] R13: 00007f873c686038 R14: 00007f873c685fa0 R15: 00007ffff7efda28 [ 315.872892][T18761] [ 315.942188][T18766] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4234'. [ 315.964386][T11664] net_ratelimit: 14 callbacks suppressed [ 315.964404][T11664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 315.964602][T11664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.047062][ T4170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.047868][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.085500][ T6568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.110054][T18776] bond0: (slave geneve1): Enslaving as an active interface with an up link [ 316.179495][T18776] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.193277][ T29] audit: type=1400 audit(1793305509.183:3463): avc: denied { name_bind } for pid=18773 comm="syz.7.4236" src=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 316.217344][ T6568] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.227256][T18788] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4239'. [ 316.290301][T18776] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.398212][T18776] bond0 (unregistering): (slave geneve1): Releasing backup interface [ 316.399777][T18776] bond0 (unregistering): Released all slaves [ 316.486631][ T4170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.486825][ T4170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.629626][T18815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4246'. [ 316.655843][ T7183] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.655904][ T7183] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.655942][ T7183] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.656056][ T7183] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.669133][T18815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4246'. [ 316.669831][T18815] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4246'. [ 316.683831][ T6579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 316.685630][T18823] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 317.380096][T18873] loop7: detected capacity change from 0 to 512 [ 317.407385][T18873] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 317.407479][T18873] ext4 filesystem being mounted at /14/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 317.854778][T18353] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 318.069329][T18895] xt_hashlimit: size too large, truncated to 1048576 [ 318.243894][T18904] netlink: 'syz.6.4268': attribute type 2 has an invalid length. [ 318.538873][T18922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4276'. [ 318.538897][T18922] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4276'. [ 318.666929][T18928] loop3: detected capacity change from 0 to 128 [ 318.866210][T18928] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 318.867127][T18928] ext4 filesystem being mounted at /90/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 319.021862][T18945] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 319.021881][T18945] block device autoloading is deprecated and will be removed. [ 319.044705][T16801] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 319.113857][T18949] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.113935][T18949] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.248955][T18949] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.249001][T18949] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.258501][T18957] loop3: detected capacity change from 0 to 512 [ 319.266802][T18957] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 319.268435][T18957] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 319.268475][T18957] EXT4-fs error (device loop3): ext4_iget_extra_inode:6027: inode #15: comm syz.3.4290: corrupted in-inode xattr: e_value size too large [ 319.268553][T18957] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 319.269260][T18957] EXT4-fs error (device loop3): ext4_orphan_get:1409: comm syz.3.4290: couldn't read orphan inode 15 (err -117) [ 319.269287][T18957] loop3: lost filesystem error report for type 5 error -117 [ 319.270020][T18957] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 319.314626][T16801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 319.349770][T18949] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.349871][T18949] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.422422][T18962] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=18962 comm=syz.3.4292 [ 319.422777][T18962] FAULT_INJECTION: forcing a failure. [ 319.422777][T18962] name failslab, interval 1, probability 0, space 0, times 0 [ 319.422863][T18962] CPU: 0 UID: 0 PID: 18962 Comm: syz.3.4292 Not tainted syzkaller #0 PREEMPT(lazy) [ 319.422900][T18962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 319.422915][T18962] Call Trace: [ 319.422923][T18962] [ 319.422932][T18962] __dump_stack+0x1d/0x30 [ 319.422963][T18962] dump_stack_lvl+0x95/0xd0 [ 319.422997][T18962] dump_stack+0x15/0x1b [ 319.423022][T18962] should_fail_ex+0x259/0x270 [ 319.423054][T18962] ? mempool_alloc_slab+0x1a/0x30 [ 319.423133][T18962] should_failslab+0x8c/0xb0 [ 319.423168][T18962] kmem_cache_alloc_noprof+0x5e/0x3d0 [ 319.423200][T18962] ? mempool_alloc_slab+0x1a/0x30 [ 319.423238][T18962] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 319.423270][T18962] mempool_alloc_slab+0x1a/0x30 [ 319.423311][T18962] mempool_init_node+0x139/0x260 [ 319.423342][T18962] ? __pfx_mempool_free_slab+0x10/0x10 [ 319.423415][T18962] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 319.423509][T18962] mempool_init_noprof+0x3a/0x50 [ 319.423540][T18962] bioset_init+0x177/0x480 [ 319.423570][T18962] ? __alloc_disk_node+0x3c/0x2f0 [ 319.423595][T18962] __alloc_disk_node+0x59/0x2f0 [ 319.423665][T18962] __blk_alloc_disk+0x68/0xd0 [ 319.423695][T18962] dm_create+0x36d/0x850 [ 319.423718][T18962] dev_create+0x141/0x290 [ 319.423748][T18962] dm_ctl_ioctl+0x80b/0xad0 [ 319.423784][T18962] ? __pfx_dev_create+0x10/0x10 [ 319.423899][T18962] ? __pfx_dm_ctl_ioctl+0x10/0x10 [ 319.423937][T18962] __se_sys_ioctl+0xce/0x140 [ 319.423974][T18962] __x64_sys_ioctl+0x43/0x50 [ 319.424009][T18962] x64_sys_call+0x239d/0x2550 [ 319.424052][T18962] do_syscall_64+0x112/0x360 [ 319.424087][T18962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.424111][T18962] RIP: 0033:0x7f113d71f559 [ 319.424128][T18962] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.424177][T18962] RSP: 002b:00007f113c16f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 319.424202][T18962] RAX: ffffffffffffffda RBX: 00007f113d9a5fa0 RCX: 00007f113d71f559 [ 319.424218][T18962] RDX: 00002000000018c0 RSI: 00000000c138fd03 RDI: 0000000000000005 [ 319.424235][T18962] RBP: 00007f113d7b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 319.424250][T18962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.424342][T18962] R13: 00007f113d9a6038 R14: 00007f113d9a5fa0 R15: 00007ffcca6c6b68 [ 319.424366][T18962] [ 319.451856][T18949] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 319.451894][T18949] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.521407][ T4181] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.521444][ T4181] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.544122][ T4181] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.544158][ T4181] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.557950][ T4181] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.558060][ T4181] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.574884][ T4181] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 319.574950][ T4181] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.767136][T18976] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4294'. [ 319.936363][T18983] FAULT_INJECTION: forcing a failure. [ 319.936363][T18983] name failslab, interval 1, probability 0, space 0, times 0 [ 319.936428][T18983] CPU: 1 UID: 0 PID: 18983 Comm: syz.5.4296 Not tainted syzkaller #0 PREEMPT(lazy) [ 319.936459][T18983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 319.936475][T18983] Call Trace: [ 319.936488][T18983] [ 319.936498][T18983] __dump_stack+0x1d/0x30 [ 319.936547][T18983] dump_stack_lvl+0x95/0xd0 [ 319.936633][T18983] dump_stack+0x15/0x1b [ 319.936658][T18983] should_fail_ex+0x259/0x270 [ 319.936683][T18983] ? nf_tables_newchain+0x1292/0x1610 [ 319.936710][T18983] should_failslab+0x8c/0xb0 [ 319.936765][T18983] __kmalloc_cache_noprof+0x5d/0x3e0 [ 319.936794][T18983] ? nf_tables_newchain+0x1292/0x1610 [ 319.936903][T18983] nf_tables_newchain+0x1292/0x1610 [ 319.936989][T18983] ? perf_trace_kmalloc+0xec/0x130 [ 319.937015][T18983] ? nft_trans_table_add+0x36/0x190 [ 319.937042][T18983] ? __kmalloc_cache_noprof+0x314/0x3e0 [ 319.937140][T18983] nfnetlink_rcv+0xbf7/0x1740 [ 319.937252][T18983] netlink_unicast+0x665/0x740 [ 319.937356][T18983] netlink_sendmsg+0x5ef/0x740 [ 319.937376][T18983] ? __pfx_netlink_sendmsg+0x10/0x10 [ 319.937395][T18983] ____sys_sendmsg+0x54a/0x590 [ 319.937447][T18983] ___sys_sendmsg+0x195/0x1e0 [ 319.937495][T18983] __x64_sys_sendmsg+0xd4/0x160 [ 319.937550][T18983] x64_sys_call+0x22ab/0x2550 [ 319.937596][T18983] do_syscall_64+0x112/0x360 [ 319.937631][T18983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.937655][T18983] RIP: 0033:0x7fe937e2f559 [ 319.937746][T18983] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.937768][T18983] RSP: 002b:00007fe936887028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 319.937796][T18983] RAX: ffffffffffffffda RBX: 00007fe9380b5fa0 RCX: 00007fe937e2f559 [ 319.937813][T18983] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 319.937829][T18983] RBP: 00007fe937ec6b20 R08: 0000000000000000 R09: 0000000000000000 [ 319.937845][T18983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 319.937906][T18983] R13: 00007fe9380b6038 R14: 00007fe9380b5fa0 R15: 00007fffef4d1268 [ 319.937929][T18983] [ 320.173691][T18995] uprobe: syz.6.4300:18995 failed to unregister, leaking uprobe [ 320.481107][ T29] audit: type=1326 audit(1793305513.473:3464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.7.4312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873c3ff559 code=0x7ffc0000 [ 320.481430][ T29] audit: type=1326 audit(1793305513.473:3465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.7.4312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873c3ff559 code=0x7ffc0000 [ 320.481541][ T29] audit: type=1326 audit(1793305513.473:3466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.7.4312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873c3ff559 code=0x7ffc0000 [ 320.481839][ T29] audit: type=1326 audit(1793305513.473:3467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.7.4312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f873c400dc7 code=0x7ffc0000 [ 320.482331][ T29] audit: type=1326 audit(1793305513.473:3468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.7.4312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f873c3bfd8e code=0x7ffc0000 [ 320.482460][ T29] audit: type=1326 audit(1793305513.473:3469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.7.4312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f873c3bfd8e code=0x7ffc0000 [ 320.482610][ T29] audit: type=1326 audit(1793305513.473:3470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.7.4312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7f873c3bfd8e code=0x7ffc0000 [ 320.489048][ T29] audit: type=1326 audit(1793305513.473:3471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.7.4312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f873c3bfd8e code=0x7ffc0000 [ 320.489383][ T29] audit: type=1326 audit(1793305513.483:3472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.7.4312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873c3ff559 code=0x7ffc0000 [ 320.489806][ T29] audit: type=1326 audit(1793305513.483:3473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19020 comm="syz.7.4312" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f873c3ff559 code=0x7ffc0000 [ 320.902328][T19032] FAULT_INJECTION: forcing a failure. [ 320.902328][T19032] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 320.902364][T19032] CPU: 1 UID: 0 PID: 19032 Comm: syz.7.4315 Not tainted syzkaller #0 PREEMPT(lazy) [ 320.902395][T19032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 320.902411][T19032] Call Trace: [ 320.902420][T19032] [ 320.902429][T19032] __dump_stack+0x1d/0x30 [ 320.902485][T19032] dump_stack_lvl+0x95/0xd0 [ 320.902514][T19032] dump_stack+0x15/0x1b [ 320.902541][T19032] should_fail_ex+0x259/0x270 [ 320.902573][T19032] should_fail+0xb/0x20 [ 320.902596][T19032] should_fail_usercopy+0x1a/0x20 [ 320.902777][T19032] _copy_from_user+0x1c/0xb0 [ 320.902851][T19032] ___sys_sendmsg+0xc1/0x1e0 [ 320.902898][T19032] __x64_sys_sendmsg+0xd4/0x160 [ 320.902931][T19032] x64_sys_call+0x22ab/0x2550 [ 320.902965][T19032] do_syscall_64+0x112/0x360 [ 320.903072][T19032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.903099][T19032] RIP: 0033:0x7f873c3ff559 [ 320.903116][T19032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 320.903139][T19032] RSP: 002b:00007f873ae57028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 320.903239][T19032] RAX: ffffffffffffffda RBX: 00007f873c685fa0 RCX: 00007f873c3ff559 [ 320.903257][T19032] RDX: 0000000004006140 RSI: 0000200000000180 RDI: 0000000000000004 [ 320.903275][T19032] RBP: 00007f873c496b20 R08: 0000000000000000 R09: 0000000000000000 [ 320.903293][T19032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 320.903309][T19032] R13: 00007f873c686038 R14: 00007f873c685fa0 R15: 00007ffff7efda28 [ 320.903332][T19032] [ 321.024222][T19034] netlink: 'syz.5.4317': attribute type 1 has an invalid length. [ 321.047127][T19034] 8021q: adding VLAN 0 to HW filter on device bond6 [ 321.090486][T19034] bond6: (slave geneve3): making interface the new active one [ 321.097895][T19034] bond6: (slave geneve3): Enslaving as an active interface with an up link [ 321.135132][ T7183] net_ratelimit: 29 callbacks suppressed [ 321.135151][ T7183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.135273][ T7183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.156731][T11664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.157496][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.212687][ T7183] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.212759][ T7183] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 321.258994][ T7183] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.259029][ T7183] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 321.310763][T19051] FAULT_INJECTION: forcing a failure. [ 321.310763][T19051] name fail_futex, interval 1, probability 0, space 0, times 0 [ 321.310799][T19051] CPU: 1 UID: 0 PID: 19051 Comm: syz.7.4323 Not tainted syzkaller #0 PREEMPT(lazy) [ 321.310830][T19051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 321.310912][T19051] Call Trace: [ 321.310981][T19051] [ 321.310991][T19051] __dump_stack+0x1d/0x30 [ 321.311023][T19051] dump_stack_lvl+0x95/0xd0 [ 321.311048][T19051] dump_stack+0x15/0x1b [ 321.311098][T19051] should_fail_ex+0x259/0x270 [ 321.311129][T19051] should_fail+0xb/0x20 [ 321.311151][T19051] get_futex_key+0x12c/0xc40 [ 321.311174][T19051] futex_wake+0x89/0x400 [ 321.311278][T19051] ? security_file_alloc+0x32/0xf0 [ 321.311327][T19051] do_futex+0x3f8/0x460 [ 321.311361][T19051] __se_sys_futex+0x2f6/0x370 [ 321.311441][T19051] __x64_sys_futex+0x78/0x90 [ 321.311467][T19051] x64_sys_call+0x22e2/0x2550 [ 321.311491][T19051] do_syscall_64+0x112/0x360 [ 321.311523][T19051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.311569][T19051] RIP: 0033:0x7f873c3ff559 [ 321.311586][T19051] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 321.311605][T19051] RSP: 002b:00007f873ae570e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 321.311630][T19051] RAX: ffffffffffffffda RBX: 00007f873c685fa8 RCX: 00007f873c3ff559 [ 321.311725][T19051] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f873c685fac [ 321.311743][T19051] RBP: 00007f873c685fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 321.311813][T19051] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 321.311826][T19051] R13: 00007f873c686038 R14: 00007ffff7efd940 R15: 00007ffff7efda28 [ 321.311918][T19051] [ 321.328261][ T7183] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.328396][ T7183] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 321.426372][ T7183] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.426408][ T7183] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 321.495307][ T6567] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.551184][T19062] device-mapper: ioctl: Unable to rename non-existent device, syzh1 to uuid LVM-syzh3 [ 321.551879][ T7183] bridge_slave_1: left allmulticast mode [ 321.551900][ T7183] bridge_slave_1: left promiscuous mode [ 321.552048][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.552897][ T7183] bridge_slave_0: left allmulticast mode [ 321.552916][ T7183] bridge_slave_0: left promiscuous mode [ 321.553091][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.559224][ T7183] pimreg: left allmulticast mode [ 322.068651][T19072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.068731][T19072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.068816][T19072] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.085591][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.085623][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.647319][ T7183] bond1 (unregistering): (slave geneve2): Releasing active interface [ 322.667652][T19090] 9p: Bad value for 'rfdno' [ 322.688740][ T7183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.704989][ T7183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.708760][ T7183] bond0 (unregistering): Released all slaves [ 322.710755][ T7183] bond1 (unregistering): Released all slaves [ 322.713703][ T7183] bond2 (unregistering): Released all slaves [ 322.913381][T19104] loop3: detected capacity change from 0 to 512 [ 322.927010][T19104] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4340'. [ 322.933009][T19073] bridge0: port 1(vlan2) entered disabled state [ 323.197889][T19073] bridge1: left promiscuous mode [ 323.198334][T19073] bond2: left promiscuous mode [ 323.198371][T19073] ip6gre2: left promiscuous mode [ 323.202100][T19073] batman_adv: batadv0: Interface deactivated: gretap1 [ 323.224114][T11664] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.224151][T11664] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.224285][T11664] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.224315][T11664] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.224422][T11664] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.224451][T11664] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.224485][T11664] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.224584][T11664] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.263446][ T7183] hsr_slave_0: left promiscuous mode [ 323.272362][ T7183] hsr_slave_1: left promiscuous mode [ 323.272865][ T7183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.272883][ T7183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.291283][ T7183] veth1_macvtap: left promiscuous mode [ 323.291311][ T7183] veth0_macvtap: left promiscuous mode [ 323.291376][ T7183] veth1_vlan: left promiscuous mode [ 323.291409][ T7183] veth0_vlan: left promiscuous mode [ 323.420619][T19148] netlink: 'syz.6.4350': attribute type 4 has an invalid length. [ 323.457088][ T7183] team0 (unregistering): Port device team_slave_1 removed [ 323.460592][ T7183] team0 (unregistering): Port device team_slave_0 removed [ 323.482130][T19153] netlink: 'syz.6.4350': attribute type 4 has an invalid length. [ 323.501812][ T3018] 8021q: adding VLAN 0 to HW filter on device eth5 [ 323.562443][T19159] uprobe: syz.5.4354:19159 failed to unregister, leaking uprobe [ 323.645811][T19168] br_netfilter no longer supported in user namespaces [ 323.649712][T19168] rxe_eth0 speed is unknown, defaulting to 1000 [ 323.672132][T19174] netlink: 'syz.5.4359': attribute type 1 has an invalid length. [ 323.776767][T19174] 8021q: adding VLAN 0 to HW filter on device bond8 [ 323.777725][T19174] bond7: (slave bond8): making interface the new active one [ 323.777958][T19174] bond7: (slave bond8): Enslaving as an active interface with an up link [ 323.820365][ T7183] IPVS: stop unused estimator thread 0... [ 323.960349][T19193] loop7: detected capacity change from 0 to 8192 [ 323.961299][ T3018] 8021q: adding VLAN 0 to HW filter on device eth6 [ 324.683438][ T3018] 8021q: adding VLAN 0 to HW filter on device eth7 [ 325.240392][T19164] loop3: detected capacity change from 0 to 512 [ 325.337918][ T3018] 8021q: adding VLAN 0 to HW filter on device eth8 [ 325.646418][T19301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4387'. [ 325.646440][T19301] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4387'. [ 325.898134][ T29] kauditd_printk_skb: 29 callbacks suppressed [ 325.898157][ T29] audit: type=1400 audit(1793305518.883:3503): avc: denied { ioctl } for pid=19309 comm="syz.6.4392" path="socket:[61581]" dev="sockfs" ino=61581 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 325.898206][ T29] audit: type=1400 audit(1793305518.883:3504): avc: denied { getopt } for pid=19309 comm="syz.6.4392" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 326.196322][ T6579] net_ratelimit: 28 callbacks suppressed [ 326.196341][ T6579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.220694][T19164] EXT4-fs error (device loop3): ext4_validate_block_bitmap:445: comm syz.3.4356: bg 0: block 385: padding at end of block bitmap is not set [ 326.221084][T19164] loop3: lost filesystem error report for type 5 error -117 [ 326.238361][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 326.238388][ C1] EXT4-fs (loop3): initial error at time 1793305519: ext4_validate_block_bitmap:445 [ 326.238416][ C1] EXT4-fs (loop3): last error at time 1793305519: ext4_validate_block_bitmap:445 [ 326.274798][T19164] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6678: Corrupt filesystem [ 326.274960][ T6577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.275975][T19164] loop3: lost filesystem error report for type 5 error -117 [ 326.305700][ T6579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.306466][ T7183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.346457][ T3376] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.354120][ T6577] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.384518][ T4170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.385346][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.535101][T19164] EXT4-fs (loop3): 2 truncates cleaned up [ 326.614284][T19164] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 326.725210][T16801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 326.778981][T19334] loop3: detected capacity change from 0 to 512 [ 326.863475][T19334] EXT4-fs: Ignoring removed nobh option [ 326.915096][ T6564] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.045359][ T7183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 327.178079][T19349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4407'. [ 327.178102][T19349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4407'. [ 327.180657][T19349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4407'. [ 327.180675][T19349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4407'. [ 327.212668][T19355] netlink: 'syz.2.4410': attribute type 1 has an invalid length. [ 327.326136][T19355] 8021q: adding VLAN 0 to HW filter on device bond4 [ 327.369516][T19366] netlink: 'syz.5.4412': attribute type 4 has an invalid length. [ 327.384147][T19355] bond4: (slave geneve2): making interface the new active one [ 327.392181][T19355] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 327.396484][T19366] netlink: 'syz.5.4412': attribute type 4 has an invalid length. [ 327.427972][T19369] netlink: 'syz.6.4413': attribute type 1 has an invalid length. [ 327.464489][T19334] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.464564][T19334] ext4 filesystem being mounted at /108/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 327.535040][T19369] 8021q: adding VLAN 0 to HW filter on device bond5 [ 327.539621][T19369] bond4: (slave bond5): making interface the new active one [ 327.539927][T19369] bond4: (slave bond5): Enslaving as an active interface with an up link [ 327.553734][ T29] audit: type=1400 audit(1793305520.543:3505): avc: denied { write } for pid=19332 comm="syz.3.4399" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 327.774045][T19334] EXT4-fs error (device loop3): ext4_do_update_inode:6701: inode #2: comm syz.3.4399: corrupted inode contents [ 327.774765][T19334] EXT4-fs (loop3): Remounting filesystem read-only [ 327.791492][ T29] audit: type=1400 audit(1793305520.783:3506): avc: denied { write } for pid=19332 comm="syz.3.4399" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 327.882497][T16801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.057044][T19407] loop7: detected capacity change from 0 to 512 [ 328.069517][T19407] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 328.069606][T19407] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 328.097672][T19407] EXT4-fs (loop7): 1 truncate cleaned up [ 328.098128][T19407] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 328.116661][ T29] audit: type=1400 audit(1793305521.103:3507): avc: denied { write } for pid=19403 comm="syz.7.4424" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 328.154678][ T29] audit: type=1400 audit(1793305521.153:3508): avc: denied { write } for pid=19403 comm="syz.7.4424" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 328.162350][ T29] audit: type=1400 audit(1793305521.153:3509): avc: denied { read append open } for pid=19403 comm="syz.7.4424" path="/45/file1/blkio.bfq.io_service_bytes" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 328.174105][ T29] audit: type=1400 audit(1793305521.153:3510): avc: denied { map } for pid=19403 comm="syz.7.4424" path="/45/file1/blkio.bfq.io_service_bytes" dev="loop7" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 328.243977][T18353] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.457792][T19415] netlink: 20 bytes leftover after parsing attributes in process `syz.5.4427'. [ 328.550468][T19411] loop7: detected capacity change from 0 to 1024 [ 328.563624][T19411] EXT4-fs: Ignoring removed bh option [ 328.591818][T19411] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 328.616939][ T29] audit: type=1400 audit(1793305521.613:3511): avc: denied { write } for pid=19410 comm="syz.7.4425" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 328.669266][T18353] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.900139][ T29] audit: type=1400 audit(1793305521.893:3512): avc: denied { map } for pid=19438 comm="syz.3.4435" path="/dev/usbmon2" dev="devtmpfs" ino=148 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 328.944503][T19443] rxe_eth0 speed is unknown, defaulting to 1000 [ 329.298556][T19458] loop3: detected capacity change from 0 to 1024 [ 329.301622][T19458] EXT4-fs: Ignoring removed bh option [ 329.321339][T19458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 329.363855][T16801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 329.424156][T19467] netlink: 'syz.5.4445': attribute type 5 has an invalid length. [ 329.451716][T19471] netlink: 220 bytes leftover after parsing attributes in process `syz.5.4447'. [ 329.762266][T19485] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4450'. [ 329.762319][T19485] netlink: 28 bytes leftover after parsing attributes in process `syz.7.4450'. [ 329.762334][T19485] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4450'. [ 329.942985][T19512] sctp: [Deprecated]: syz.5.4458 (pid 19512) Use of int in max_burst socket option. [ 329.942985][T19512] Use struct sctp_assoc_value instead [ 329.981597][T19516] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4456'. [ 330.607603][T19558] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.4475'. [ 330.899309][T19570] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 331.414561][ T7183] bridge_slave_1: left allmulticast mode [ 331.414589][ T7183] bridge_slave_1: left promiscuous mode [ 331.414701][ T7183] bridge0: port 2(bridge_slave_1) entered disabled state [ 331.415433][ T7183] bridge_slave_0: left allmulticast mode [ 331.415453][ T7183] bridge_slave_0: left promiscuous mode [ 331.415603][ T7183] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.445651][ T7183] pimreg: left allmulticast mode [ 331.584680][ T72] net_ratelimit: 17 callbacks suppressed [ 331.584699][ T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.584799][ T72] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.671406][ T7183] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 331.684554][ T7183] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 331.686815][ T7183] bond0 (unregistering): Released all slaves [ 331.689954][T19611] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 331.690104][T19616] sch_tbf: burst 6281 is lower than device lo mtu (65550) ! [ 331.841340][ T7183] hsr_slave_0: left promiscuous mode [ 331.844210][ T7183] hsr_slave_1: left promiscuous mode [ 331.844657][ T7183] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.844675][ T7183] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.851422][ T7183] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.851439][ T7183] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.864560][ T7183] veth1_macvtap: left promiscuous mode [ 331.864588][ T7183] veth0_macvtap: left promiscuous mode [ 331.882214][T19636] FAULT_INJECTION: forcing a failure. [ 331.882214][T19636] name failslab, interval 1, probability 0, space 0, times 0 [ 331.882387][T19636] CPU: 1 UID: 0 PID: 19636 Comm: syz.3.4502 Not tainted syzkaller #0 PREEMPT(lazy) [ 331.882414][T19636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 331.882428][T19636] Call Trace: [ 331.882457][T19636] [ 331.882465][T19636] __dump_stack+0x1d/0x30 [ 331.882493][T19636] dump_stack_lvl+0x95/0xd0 [ 331.882517][T19636] dump_stack+0x15/0x1b [ 331.882539][T19636] should_fail_ex+0x259/0x270 [ 331.882682][T19636] ? load_msg+0xa6/0x2e0 [ 331.882712][T19636] should_failslab+0x8c/0xb0 [ 331.882744][T19636] __kmalloc_noprof+0xb6/0x4b0 [ 331.882795][T19636] ? load_msg+0xa6/0x2e0 [ 331.882826][T19636] load_msg+0xa6/0x2e0 [ 331.882856][T19636] do_msgsnd+0xe4/0xba0 [ 331.882956][T19636] ? trace_event_buffer_commit+0x174/0x590 [ 331.882981][T19636] ? trace_event_raw_event_x86_fpu+0x18a/0x200 [ 331.883006][T19636] __x64_sys_msgsnd+0xa8/0xc0 [ 331.883073][T19636] x64_sys_call+0x227f/0x2550 [ 331.883098][T19636] do_syscall_64+0x112/0x360 [ 331.883201][T19636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 331.883224][T19636] RIP: 0033:0x7f113d71f559 [ 331.883242][T19636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.883268][T19636] RSP: 002b:00007f113c16f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000045 [ 331.883291][T19636] RAX: ffffffffffffffda RBX: 00007f113d9a5fa0 RCX: 00007f113d71f559 [ 331.883363][T19636] RDX: 0000000000002000 RSI: 0000200000000240 RDI: 0000000000000000 [ 331.883378][T19636] RBP: 00007f113d7b6b20 R08: 0000000000000000 R09: 0000000000000000 [ 331.883392][T19636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.883406][T19636] R13: 00007f113d9a6038 R14: 00007f113d9a5fa0 R15: 00007ffcca6c6b68 [ 331.883426][T19636] [ 332.047488][T15678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.047641][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.091985][ T7183] team0 (unregistering): Port device team_slave_1 removed [ 332.106302][ T7183] team0 (unregistering): Port device team_slave_0 removed [ 332.275190][ T6579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.410554][T19647] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.508161][T19647] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.523858][T19656] netlink: 76 bytes leftover after parsing attributes in process `syz.6.4506'. [ 332.617449][T19647] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.757799][T11664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.757892][T11664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.980506][T19677] loop2: detected capacity change from 0 to 7 [ 332.981168][T19677] loop2: [ 333.017491][T19674] bond6: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 333.195348][T19674] bond6 (unregistering): Released all slaves [ 333.224613][T19647] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.254070][T11664] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.286402][ T7183] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.307556][ T7183] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.307603][ T7183] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.482863][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 333.482985][ T29] audit: type=1400 audit(1793305526.473:3515): avc: denied { lock } for pid=19708 comm="syz.5.4527" path="/827/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=2354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 333.537247][ T29] audit: type=1400 audit(1793305526.513:3516): avc: denied { map } for pid=19708 comm="syz.5.4527" path="/827/tracing/per_cpu/cpu0/trace_pipe_raw" dev="tracefs" ino=2354 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 333.593450][T19718] ip_tables: iptables: counters copy to user failed while replacing table [ 333.594438][T19718] IPv6: NLM_F_CREATE should be specified when creating new route [ 333.594473][T19718] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 333.594482][T19718] IPv6: NLM_F_CREATE should be set when creating new route [ 333.594491][T19718] IPv6: NLM_F_CREATE should be set when creating new route [ 333.594502][T19718] IPv6: NLM_F_CREATE should be set when creating new route [ 333.804678][T19732] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4537'. [ 333.819863][T19732] 8021q: adding VLAN 0 to HW filter on device bond6 [ 333.837175][T19732] macvlan0: entered promiscuous mode [ 333.837204][T19732] macvlan0: entered allmulticast mode [ 333.948370][T15678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.948590][T15678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.029222][T19752] netlink: 'syz.7.4544': attribute type 1 has an invalid length. [ 334.084164][T19752] 8021q: adding VLAN 0 to HW filter on device bond1 [ 334.093188][T19752] bond1: (slave gretap1): making interface the new active one [ 334.093614][T19752] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 334.153057][T19752] bond1 (unregistering): (slave gretap1): Releasing active interface [ 334.194818][T19752] bond1 (unregistering): Released all slaves [ 334.323939][T19784] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4552'. [ 334.485086][ T29] audit: type=1400 audit(1793305783.475:3517): avc: denied { write } for pid=19770 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.564404][ T29] audit: type=1400 audit(1793305783.555:3518): avc: denied { write } for pid=19800 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 334.753502][T19818] netlink: 'syz.7.4562': attribute type 1 has an invalid length. [ 334.760978][T19818] 8021q: adding VLAN 0 to HW filter on device bond1 [ 334.823648][T19818] bond1: (slave veth3): Enslaving as an active interface with a down link [ 334.847610][T19818] veth0_virt_wifi: entered promiscuous mode [ 334.866652][T19818] bond1: (slave veth0_virt_wifi): making interface the new active one [ 334.869581][T19818] bond1: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 334.893648][T19818] bond1: (slave veth0_virt_wifi): Releasing active interface [ 334.969766][ T29] audit: type=1400 audit(1793305783.965:3519): avc: denied { write } for pid=19822 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 335.291252][ T29] audit: type=1400 audit(1793305784.285:3520): avc: denied { write } for pid=19840 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 336.472557][T19895] loop7: detected capacity change from 0 to 512 [ 336.498323][T19899] loop3: detected capacity change from 0 to 512 [ 336.529107][T19899] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 336.529126][T19899] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 336.572698][T19895] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.572780][T19895] ext4 filesystem being mounted at /72/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 336.575223][T19909] tipc: Started in network mode [ 336.575252][T19909] tipc: Node identity ac1414aa, cluster identity 4711 [ 336.575387][T19909] tipc: Enabling of bearer rejected, failed to enable media [ 336.581939][T19899] EXT4-fs (loop3): 1 truncate cleaned up [ 336.582382][T19899] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.690042][ T29] audit: type=1400 audit(1793305785.675:3521): avc: denied { write } for pid=19888 comm="syz.3.4585" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 336.727182][ T29] audit: type=1400 audit(1793305785.725:3522): avc: denied { write } for pid=19892 comm="syz.7.4587" name="/" dev="loop7" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 336.744205][ T29] audit: type=1400 audit(1793305785.735:3523): avc: denied { audit_read } for pid=19917 comm="syz.5.4593" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 336.758988][ T29] audit: type=1400 audit(1793305785.755:3524): avc: denied { write } for pid=19888 comm="syz.3.4585" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 336.759707][T18353] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.830120][T16801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 336.890928][T19933] net_ratelimit: 10 callbacks suppressed [ 336.890949][T19933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 336.919278][T19934] IPv6: NLM_F_CREATE should be specified when creating new route [ 336.919317][T19934] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 336.919326][T19934] IPv6: NLM_F_CREATE should be set when creating new route [ 336.919338][T19934] IPv6: NLM_F_CREATE should be set when creating new route [ 336.919348][T19934] IPv6: NLM_F_CREATE should be set when creating new route [ 336.970111][T19930] ip_tables: iptables: counters copy to user failed while replacing table [ 337.062619][T19945] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.156191][ T4170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.156321][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.457015][T11664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.457125][T11664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.641314][T19972] IPv6: NLM_F_CREATE should be specified when creating new route [ 337.641354][T19972] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 337.641365][T19972] IPv6: NLM_F_CREATE should be set when creating new route [ 337.641378][T19972] IPv6: NLM_F_CREATE should be set when creating new route [ 337.641389][T19972] IPv6: NLM_F_CREATE should be set when creating new route [ 337.911489][T19984] netlink: 'syz.3.4616': attribute type 3 has an invalid length. [ 337.911512][T19984] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4616'. [ 338.359763][ T6576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.555855][ T7183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.556070][ T7183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.969467][T20036] netlink: 'syz.5.4624': attribute type 1 has an invalid length. [ 338.979452][T20036] 8021q: adding VLAN 0 to HW filter on device bond9 [ 339.082835][ T6576] kernel read not supported for file /sysvipc/msg (pid: 6576 comm: kworker/0:10) [ 339.296066][T20036] bond9: (slave veth5): Enslaving as an active interface with a down link [ 339.296251][T20042] veth0_virt_wifi: entered promiscuous mode [ 339.298218][T20042] bond9: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 339.329803][T20043] bond9: (slave veth0_virt_wifi): Releasing active interface [ 339.458298][T20057] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.531262][T20057] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.586476][T20061] erspan0: entered promiscuous mode [ 339.588275][T20061] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4630'. [ 339.590852][T20062] lo: entered allmulticast mode [ 339.592458][T20054] lo: left allmulticast mode [ 340.574102][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 340.574123][ T29] audit: type=1400 audit(1793305789.565:3529): avc: denied { unmount } for pid=18353 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 340.834078][ T6576] page_pool_release_retry() stalled pool shutdown: id 26, 1 inflight 302 sec [ 340.888365][T20147] netlink: 104 bytes leftover after parsing attributes in process `syz.5.4648'. [ 340.961728][T20151] netlink: 'syz.5.4650': attribute type 1 has an invalid length. [ 341.000698][T20151] 8021q: adding VLAN 0 to HW filter on device bond10 [ 341.041860][T20151] bond10: (slave dummy0): making interface the new active one [ 341.042458][T20151] bond10: (slave dummy0): Enslaving as an active interface with an up link [ 341.075174][T20151] : renamed from dummy0 (while UP) [ 341.089502][T20166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4654'. [ 341.089525][T20166] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4654'. [ 341.119428][T20160] netlink: 'syz.6.4653': attribute type 1 has an invalid length. [ 341.197791][T20160] 8021q: adding VLAN 0 to HW filter on device bond7 [ 341.199668][T20174] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4657'. [ 341.290071][T20175] bond7: (slave veth11): Enslaving as an active interface with a down link [ 341.305324][ T29] audit: type=1326 audit(1793305790.305:3530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20181 comm="syz.5.4659" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe937e2f559 code=0x7ffc0000 [ 341.305368][ T29] audit: type=1326 audit(1793305790.305:3531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20181 comm="syz.5.4659" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe937e2f559 code=0x7ffc0000 [ 341.340210][ T29] audit: type=1326 audit(1793305790.315:3532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20181 comm="syz.5.4659" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe937e2f559 code=0x7ffc0000 [ 341.340250][ T29] audit: type=1326 audit(1793305790.315:3533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20181 comm="syz.5.4659" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe937e2f559 code=0x7ffc0000 [ 341.340296][ T29] audit: type=1326 audit(1793305790.315:3534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20181 comm="syz.5.4659" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fe937e2f559 code=0x7ffc0000 [ 341.374255][ T29] audit: type=1326 audit(1793305790.365:3535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20181 comm="syz.5.4659" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe937e2f559 code=0x7ffc0000 [ 341.374289][ T29] audit: type=1326 audit(1793305790.365:3536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20181 comm="syz.5.4659" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe937e2f559 code=0x7ffc0000 [ 341.374409][ T29] audit: type=1326 audit(1793305790.365:3537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20181 comm="syz.5.4659" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe937defd8e code=0x7ffc0000 [ 341.374433][ T29] audit: type=1326 audit(1793305790.365:3538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20181 comm="syz.5.4659" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7fe937defd8e code=0x7ffc0000 [ 341.568123][T20160] veth0_virt_wifi: entered promiscuous mode [ 341.596073][T20160] bond7: (slave veth0_virt_wifi): making interface the new active one [ 341.596853][T20160] bond7: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 341.640805][T20160] bond7: (slave veth0_virt_wifi): Releasing active interface [ 341.930997][T11664] net_ratelimit: 5 callbacks suppressed [ 341.931018][T11664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.931160][T11664] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.278026][ T7183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.278149][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.494499][T20261] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4670'. [ 342.655544][T20290] loop3: detected capacity change from 0 to 512 [ 342.677289][T20290] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 342.677369][T20290] ext4 filesystem being mounted at /164/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 342.743780][T16801] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 343.020285][T20310] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 343.059497][T15678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.059651][T15678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.497466][T20330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.497714][T20330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.497851][T20330] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 343.839543][T20349] tipc: Started in network mode [ 343.839617][T20349] tipc: Node identity 06f4c63e1d03, cluster identity 4711 [ 343.839657][T20349] tipc: Enabled bearer , priority 0 [ 343.854525][T20349] syzkaller0: entered promiscuous mode [ 343.854550][T20349] syzkaller0: entered allmulticast mode [ 343.855298][T20349] tipc: Resetting bearer [ 343.864565][T20348] tipc: Resetting bearer [ 343.883800][T20348] tipc: Disabling bearer [ 343.899416][T20351] lo: entered allmulticast mode [ 343.900827][T20346] lo: left allmulticast mode [ 344.110544][T20364] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:36) [ 344.145502][T20324] ================================================================== [ 344.145545][T20324] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 344.145603][T20324] [ 344.145611][T20324] write to 0xffff88810cb495e0 of 8 bytes by task 20329 on cpu 0: [ 344.145632][T20324] shmem_file_splice_read+0x3eb/0x570 [ 344.145660][T20324] splice_direct_to_actor+0x25d/0x680 [ 344.145684][T20324] do_splice_direct+0x119/0x1a0 [ 344.145709][T20324] do_sendfile+0x37d/0x640 [ 344.145734][T20324] __x64_sys_sendfile64+0x105/0x150 [ 344.145758][T20324] x64_sys_call+0x1015/0x2550 [ 344.145789][T20324] do_syscall_64+0x112/0x360 [ 344.145814][T20324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.145834][T20324] [ 344.145839][T20324] write to 0xffff88810cb495e0 of 8 bytes by task 20324 on cpu 1: [ 344.145858][T20324] shmem_file_splice_read+0x3eb/0x570 [ 344.145896][T20324] splice_direct_to_actor+0x25d/0x680 [ 344.145925][T20324] do_splice_direct+0x119/0x1a0 [ 344.145946][T20324] do_sendfile+0x37d/0x640 [ 344.145964][T20324] __x64_sys_sendfile64+0x105/0x150 [ 344.145982][T20324] x64_sys_call+0x1015/0x2550 [ 344.146007][T20324] do_syscall_64+0x112/0x360 [ 344.146037][T20324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.146057][T20324] [ 344.146061][T20324] value changed: 0x0000000000015012 -> 0x000000000001502d [ 344.146073][T20324] [ 344.146077][T20324] Reported by Kernel Concurrency Sanitizer on: [ 344.146088][T20324] CPU: 1 UID: 0 PID: 20324 Comm: syz.5.4688 Not tainted syzkaller #0 PREEMPT(lazy) [ 344.146116][T20324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 344.146128][T20324] ================================================================== [ 344.731145][T20361] loop3: detected capacity change from 0 to 128 [ 344.765965][T20361] bio_check_eod: 18 callbacks suppressed [ 344.765986][T20361] syz.3.4704: attempt to access beyond end of device [ 344.765986][T20361] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128 [ 347.474619][ T6578] net_ratelimit: 8 callbacks suppressed [ 347.474656][ T6578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.544512][ T4170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 347.544620][ T4170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.045568][ T4170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.045823][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.644546][T15678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 348.644746][T15678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.744205][ T7183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 349.744313][ T7183] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 350.514964][ T6578] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.084553][ T4170] net_ratelimit: 4 callbacks suppressed [ 353.084574][ T4170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.084734][ T4170] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.154763][T15678] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.154886][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 353.554141][ T6579] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog