last executing test programs: 50.749043141s ago: executing program 4 (id=90): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x10) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4}, {}, {0x6, 0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x8, 0x2, [@TCA_FW_ACT={0x4}]}}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0x10}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 50.556406445s ago: executing program 4 (id=94): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) sendto(r2, &(0x7f0000000000), 0xfeb5, 0x0, 0x0, 0x0) recvfrom(r1, &(0x7f00000009c0)=""/65, 0x41, 0x20, 0x0, 0x0) 50.465136597s ago: executing program 4 (id=95): socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x2000800) 50.352024539s ago: executing program 4 (id=98): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x1d0) mount$bind(&(0x7f0000000300)='.\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x185093, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount$tmpfs(0x0, &(0x7f0000000540)='./file0\x00', 0x0, 0x20000, 0x0) move_mount(r0, &(0x7f0000008080)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x152) 50.3096718s ago: executing program 4 (id=101): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) write$tun(r0, &(0x7f0000001300)={@val={0x8, 0x800}, @val={0x0, 0x1, 0x6, 0x3, 0x2b, 0x2}, @llc={@snap={0xaa, 0xa8, '*', "ac0ebe", 0x4, "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"}}}, 0xfce) 50.124796184s ago: executing program 4 (id=106): prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r0) r1 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='wchan\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 50.086710444s ago: executing program 32 (id=106): prctl$PR_SET_SECUREBITS(0x1c, 0x15) setuid(0xee00) r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r0) r1 = syz_clone(0x0, 0x0, 0x1d, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f00000000c0)='wchan\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 31.723819251s ago: executing program 2 (id=386): r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(0xffffffffffffffff, 0x40042408, r0) openat$ttyS3(0xffffff9c, 0x0, 0x6001, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000080)='./tracefs\x00', 0x282, 0x84) write(r1, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9902) 31.661115452s ago: executing program 2 (id=389): perf_event_open(&(0x7f0000000380)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x80, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x6}, 0x4008, 0x400000, 0x4, 0x3, 0x7, 0x1000000, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = shmget$private(0x0, 0xe000, 0x2, &(0x7f0000ff2000/0xe000)=nil) openat$nvram(0xffffffffffffff9c, 0x0, 0x800, 0x0) shmat(r0, &(0x7f0000ff4000/0x2000)=nil, 0x7000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) timer_create(0xffffffffff600020, 0x0, 0x0) 31.345568118s ago: executing program 2 (id=390): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x5f, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000480)={'veth1\x00', 0x400}) 31.24366977s ago: executing program 2 (id=392): syz_open_dev$evdev(&(0x7f0000000000), 0xc, 0x22001) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/mapper/control\x00', 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f00007af000/0x3000)=nil, &(0x7f00007fd000/0x800000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000a4a000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x2, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1700000004"], 0x50) io_uring_enter(r0, 0x221c, 0x134d, 0x16, 0x0, 0x0) 31.140914433s ago: executing program 2 (id=404): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) exit(0x5) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0xe9d, &(0x7f0000000040)={0x0, 0xc8a0, 0xc000, 0x10000008, 0x11b}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 30.488875386s ago: executing program 2 (id=401): socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000001600)={0x38, r2, 0x421, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x1c, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2080098}, 0x54) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc048}, 0xc, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00032cbd7000fddbdf2502000000080026006c09000008000a010600000005003d00660000005ef5921029f12f2ce0eddc309b7ea46d30e9f452ebfada4b47b3373b93c2f808f104c98521331a993df62231d88f3f2c3e1bbcdf70dc78e71c4f039a1a132defc3799ab02d2697265dfbee456412aed55fd2040ce15d7fa4c37efb935cac064968ba7416e22b7913b1ed11131654df1b600bcb38967432c738b1aa993ab378a743b10fa5905013c654f61202ab1ff4f3fedfef7c9db3ddbef56084e6943de06bbc434324515f742853bfa2bef80261bc4cfbd0c0b84e89ad549b9497d4f8868a0dca769d416d9d8b8f43883d9a54659260c6dce903339825b2c4443b338977b8de9a50d0e49cea8006cd87945d46b4551ab4aedb0cc5314433f16efb5a8e79fd7d2125bcfde7c3124e7fbe7351e9a8f2389399390b3ab12f2dac0780d8fa290e401fb04e037b5cc596c9b58657c9281adcd0aa41ada4ab80d60bc5f4d2d1a094127f4ffad9606ffebbd99941dd1e9f110025216db3effd63ba7858faa2aaef1a15ac11fc0b839136f3669c4889218a767d8f2a7f0603f2cef104896a94a520ff95408bfb2b9975b4704ef6f57dbfcca897a35d32022eb980edd3310ffb1c878140261356ba"], 0x2c}, 0x1, 0x0, 0x0, 0x28000000}, 0x80) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x2900c, 0x40010}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x8}]}, 0x3c}}, 0x4) 30.471266797s ago: executing program 33 (id=401): socket$netlink(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x8518}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r1) sendmsg$NL80211_CMD_SET_REG(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000001600)={0x38, r2, 0x421, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}, @NL80211_ATTR_REG_RULES={0x1c, 0x22, 0x0, 0x1, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x2080098}, 0x54) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0xc048}, 0xc, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x2c}, 0x1, 0x0, 0x0, 0x28000000}, 0x80) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=@newlink={0x3c, 0x10, 0x401, 0x4000, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x2900c, 0x40010}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MTU={0x8, 0x4, 0x8}]}, 0x3c}}, 0x4) 10.056478985s ago: executing program 5 (id=682): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06"], 0x48) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x22, &(0x7f0000000700)=ANY=[], 0x0) 10.006007396s ago: executing program 5 (id=684): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6}]}) setsockopt$bt_l2cap_L2CAP_LM(0xffffffffffffffff, 0x6, 0x3, &(0x7f0000000580)=0x28, 0x4) close_range(r0, 0xffffffffffffffff, 0x0) io_uring_setup(0xa77, &(0x7f00000004c0)={0x0, 0x1ae0, 0x1, 0x21, 0x197}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x3bc}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r1, 0x2219, 0x771f, 0x33, 0x0, 0x0) 9.140228863s ago: executing program 5 (id=693): pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='fd', 0x0, r0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) fchdir(r2) r3 = open(&(0x7f0000000000)='.\x00', 0x0, 0x244) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r3, 0x9362, 0x0) mkdir(&(0x7f0000000080)='dir0\x00', 0x1ff) 8.621003944s ago: executing program 5 (id=694): openat$ptp0(0xffffffffffffff9c, &(0x7f0000004600), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x2bb}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r0, 0x2219, 0x7722, 0x16, 0x0, 0x0) 8.447636117s ago: executing program 5 (id=699): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0x42795000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendmmsg$unix(r2, &(0x7f000000d6c0)=[{{0x0, 0xffa4, 0x0, 0x0, 0x0, 0x0, 0x20000000}}], 0x1, 0x4018080) 8.189004583s ago: executing program 5 (id=701): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@nojournal_checksum}, {@grpjquota}]}, 0x3, 0x446, &(0x7f0000000380)="$eJzs289rHFUcAPDv7CZt06YmlvqjaavRKgZ/JE1aaw9eFAUPCoIe6jEm2xK7baSJYEvQKFKPUhCv4lHwL/CkF1FPglc9K4UiubQKwsrszia729383GRr9/OBSd6beZv3vjvzdt+blwmgaw2nP5KI/oj4LSIGKtn6AsOVX7eWFqb+XlqYSqJUeuOvpFzu5tLCVLVo9XX7qpmeiNwnSRxuUu/c5SvnJ4vFwqUsPzZ/4d2xuctXnpm5MHmucK5wceL06ZMnxp87NfFsW+JM47o59MHskUOvvHXttakz197+6ZusvXuiIY42GV7t4OOlUpur66z9Nemkp4MNYUPylW4aveX+PxD5WDl5A/Hyxx1tHLCtSqVS6f7WhxdLwF0siU63AOiM6hd9Ov+tbjs09Lgj3HihMgFK476VbZUjPZHLyvQ2zG/baTgiziz+82W6xfbchwAAqPNdOv55utn4Lxe194XuydZQBiPi3og4EBGnIuJgRNwXUS77QEQ8uMH6GxdJbh//5K5vKrB1Ssd/z2drW/Xjv+roLwbzWW5/Of7e5OxMsXA8e09Gond3mh9fpY7vX/r1s1bHasd/6ZbWXx0LZu243rO7/jXTk/OTW4m51o2PIoZ6msWfLK8EJBFxKCKGNlnHzJNfH2l1bO34V9GGdabSVxFPVM7/YjTEX5Wsvj45tieKheNj1avidj//cvX1VvVvKf42SM//3qbX/3L8g0nteu3cxuu4+vunLec0m73+dyVv1u17f3J+/tJ4xK7k1Uqja/dPNJSbWCmfxj9yrHn/PxAr78ThiEgv4qMR8VBEPJy1/ZGIeDQijq0S/48vPvZO/Z4/+tcf//ZK45/e0PlfSeyKxj3NE/nzP3xbV+ngSnJ95/9kOTWS7VnP59962lUs7N7q2wcAAAD/C7mI6I8kN7qczuVGRyv/w38w9uaKs3PzT52dfe/idOUZgcHozVXvdA3U3A8dz6b11fxEQ/5Edt/483xfOT86NVuc7nTw0OX2tej/qT/znW4dsO08rwXdS/+H7rVW//93h9oB7Dzf/9C9mvT/vk60A9h5zb7/P+xAO4Cd19D/LftBFzH/h+6l/0P30v+hK831xVoPyUvcJYkvjlbOeXv+YOTulLgktiPR6U8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9vgvAAD//+F55Qw=") truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) sendfile(r0, r0, 0x0, 0xe3aa6ea) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 8.188674163s ago: executing program 34 (id=701): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000140)={[{@init_itable_val={'init_itable', 0x3d, 0x4}}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@nojournal_checksum}, {@grpjquota}]}, 0x3, 0x446, &(0x7f0000000380)="$eJzs289rHFUcAPDv7CZt06YmlvqjaavRKgZ/JE1aaw9eFAUPCoIe6jEm2xK7baSJYEvQKFKPUhCv4lHwL/CkF1FPglc9K4UiubQKwsrszia729383GRr9/OBSd6beZv3vjvzdt+blwmgaw2nP5KI/oj4LSIGKtn6AsOVX7eWFqb+XlqYSqJUeuOvpFzu5tLCVLVo9XX7qpmeiNwnSRxuUu/c5SvnJ4vFwqUsPzZ/4d2xuctXnpm5MHmucK5wceL06ZMnxp87NfFsW+JM47o59MHskUOvvHXttakz197+6ZusvXuiIY42GV7t4OOlUpur66z9Nemkp4MNYUPylW4aveX+PxD5WDl5A/Hyxx1tHLCtSqVS6f7WhxdLwF0siU63AOiM6hd9Ov+tbjs09Lgj3HihMgFK476VbZUjPZHLyvQ2zG/baTgiziz+82W6xfbchwAAqPNdOv55utn4Lxe194XuydZQBiPi3og4EBGnIuJgRNwXUS77QEQ8uMH6GxdJbh//5K5vKrB1Ssd/z2drW/Xjv+roLwbzWW5/Of7e5OxMsXA8e09Gond3mh9fpY7vX/r1s1bHasd/6ZbWXx0LZu243rO7/jXTk/OTW4m51o2PIoZ6msWfLK8EJBFxKCKGNlnHzJNfH2l1bO34V9GGdabSVxFPVM7/YjTEX5Wsvj45tieKheNj1avidj//cvX1VvVvKf42SM//3qbX/3L8g0nteu3cxuu4+vunLec0m73+dyVv1u17f3J+/tJ4xK7k1Uqja/dPNJSbWCmfxj9yrHn/PxAr78ThiEgv4qMR8VBEPJy1/ZGIeDQijq0S/48vPvZO/Z4/+tcf//ZK45/e0PlfSeyKxj3NE/nzP3xbV+ngSnJ95/9kOTWS7VnP59962lUs7N7q2wcAAAD/C7mI6I8kN7qczuVGRyv/w38w9uaKs3PzT52dfe/idOUZgcHozVXvdA3U3A8dz6b11fxEQ/5Edt/483xfOT86NVuc7nTw0OX2tej/qT/znW4dsO08rwXdS/+H7rVW//93h9oB7Dzf/9C9mvT/vk60A9h5zb7/P+xAO4Cd19D/LftBFzH/h+6l/0P30v+hK831xVoPyUvcJYkvjlbOeXv+YOTulLgktiPR6U8mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA9vgvAAD//+F55Qw=") truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x4c142, 0x0) sendfile(r0, r0, 0x0, 0xe3aa6ea) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x8e44, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.775536744s ago: executing program 6 (id=738): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0xffffffffffffff2c}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {0xfff1, 0xffff}, {0xe, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40005}, 0x20040000) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0xfc83) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.698291446s ago: executing program 6 (id=739): pipe(0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000540), 0xbe, 0x2a5, &(0x7f0000000780)="$eJzs3btrFF0cxvFnbkn2Td4QtbFRBBHRQIiFINhoYyAgQUQEDaxItFESJSZt1srGwl4llU0QO6Ol2AQb/4CoKWJjEyxcFBQZmctmL86YITsXzXw/sDszO+fkdxb2OTMbMhkBKK0hSackWZKGJTmSjNYGB4LHULi5WFmpSq57/rPhtwu2A41+/ZJqkk5IdmPf/PLl9a+rY4fvzzmHnixfquT1/lptrK+drT+euPd8/Ni8Gb42EC5b30eajIh125B2Z1HsL2HYydr1ZT0QbOHZOy/3eyQd9PPvyAwj+2C257Wjo4+i+/XU8x0ngCy4ruMdA2sugNIx/XNgwxyRFKyb5shIcA7/3jJ0c2b2zvD1mbnpqaJnKgApMGrB9961My97X/R35P+TFeQ/keMZjxRAJrz8Xzi39MFbr1tFjwZALvYFCy//w1cWjkg/yT9QMs38c/wHyob8AztevxOzg/wDO0Bcdr3Xe+O7kX+gvMg/UF5J81/LcUwAUrL5xT86wd0f/7+Ff0G4/SECyNug/5ws/3G/PQTwL+vIf3g9bniFarKT/rFrUzeyGyCAtE02VlrzDwAAysXtLfgCZACFKXr+AQAAAAAAAAAAAAAAAAAAAAAAAAAAAPC7xcpKtfGIbGCkX/PNQ2njtCS7vX5w2wLLvx+x1Oc///fF8Jq1Dcfusv5kl/279TTlq68n/nC/hyiDH9OtH8P9P2bH2/3ZFLzbvlmJa7cwLdW8xqO23fz8WVXptu19wsxk5WJ//q4tOjpXkxVIS2eET17Mt36g+T9FfywVUb9pfFV65c0/o1Hzn6m9/jJ6/hnY/vyzGYdb37sZPQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgT78CAAD//1y8dZo=") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x380407b, 0x0, 0x1, 0x0, &(0x7f0000000140)) open(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x108843, 0x190) mknod(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8001420, 0xffffffff) mkdir(&(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) rmdir(0x0) creat(&(0x7f0000000400)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x18) 2.529786698s ago: executing program 1 (id=741): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x4e21, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) close(0x3) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000580)="9b", 0x29fff, 0x0, 0x0, 0x0) write(r2, &(0x7f0000000180)='e', 0x1) shutdown(r0, 0x1) 2.507689139s ago: executing program 6 (id=742): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x4, 0x2, 0x6, 0x1f7c, 0x5}, 0x2}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x2000c8d0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000900000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000048000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000001c00038018000380140002"], 0xd0}, 0x1, 0x0, 0x0, 0x24040841}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 2.411066621s ago: executing program 1 (id=744): bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB="7a0af8ff75256320bfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc44bc25fb591cf77b9dfb379a3f611dbc2a364916f098dab10b1a297cf528666d1ddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1aebdb638d91dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604"], 0x0}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000002240)="2d12376647d788ad2cdbd0e68c140c7f72d35ae5869c470a", 0x18, 0x4004085, 0x0, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x2, 0x0, 0x0, 0xfe, "0062ba7d82000000160000000000f738096304"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) read(r2, &(0x7f00000000c0)=""/226, 0xe2) read$watch_queue(r2, &(0x7f0000001d40)=""/4095, 0xfff) 2.243945324s ago: executing program 6 (id=746): futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000048000), 0x1) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) socket(0x10, 0x3, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x4108, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x2, @perf_config_ext={0x3, 0x1}, 0x1041e0, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x8001}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc)=0x4, 0x10b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040), &(0x7f0000048000), 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) 2.067474348s ago: executing program 7 (id=754): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'macsec0\x00', @random="343527fbcb17"}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'macsec0\x00', 0xca58c30f81b6079f}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8914, &(0x7f0000000080)) unshare(0x24020400) modify_ldt$write2(0x11, &(0x7f0000000040)={0x7ed, 0x20000000, 0x400, 0x0, 0x3, 0x0, 0x0, 0x1, 0x1, 0x1}, 0x10) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x8}, 0x10ecc8, 0x1224, 0x0, 0x5, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) syz_clone(0x20300000, 0x0, 0x0, 0x0, 0x0, 0x0) 2.011790279s ago: executing program 3 (id=756): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) io_setup(0x5, &(0x7f0000000300)=0x0) r2 = eventfd2(0x0, 0x0) io_submit(r1, 0x1, &(0x7f0000000280)=[&(0x7f0000000000)={0x1802, 0x0, 0x0, 0x5, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r2}]) ppoll(&(0x7f0000001100)=[{r2, 0x81}, {r2, 0x1001}], 0x2, 0x0, 0x0, 0x0) shutdown(r0, 0x0) 1.941100781s ago: executing program 7 (id=757): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="02098b1802"], 0x10}}, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'bridge0\x00'}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x5, 0x1}]}}}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) syz_emit_ethernet(0x35, &(0x7f0000000640)=ANY=[@ANYBLOB="0180c2000000020000000001002742420300000000ff84"], 0x0) 1.876667312s ago: executing program 7 (id=758): r0 = io_uring_setup(0x6a76, &(0x7f0000000180)={0x0, 0xaefa, 0x0, 0x40}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback, 0xfffffffe}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="04", 0x1, 0x4c090, 0x0, 0x0) dup(r0) close_range(r0, 0xffffffffffffffff, 0x0) 1.870260312s ago: executing program 3 (id=759): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x1076) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f0000000840), &(0x7f0000004880)=@udp=r0}, 0x20) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000480)=""/149, 0x95}], 0x1}, 0x22) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_type(r2, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x9, @private2, 0x5}, 0x1c) 1.841925553s ago: executing program 7 (id=760): perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x804a, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x2, 0x10, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x1) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) connect$tipc(0xffffffffffffffff, 0x0, 0x0) write(r1, &(0x7f0000000a00)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 1.770604854s ago: executing program 3 (id=762): lsetxattr$security_selinux(&(0x7f00000001c0)='.\x00', &(0x7f0000000300), &(0x7f0000000280)='system_u:object_r:hwdata_t:s0\x00', 0xffd7, 0x1) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") symlinkat(&(0x7f0000000140)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f00000009c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) rename(&(0x7f0000000f00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') stat(&(0x7f0000003a40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) 1.720893595s ago: executing program 0 (id=764): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x4, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x2}}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @address_request}}}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xe0, @multicast1=0xe000c800}, {{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4, 0x6558}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {0x8, 0x88be, 0x0, {{}, 0xfffff788}}}}}}}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r2, 0x0, 0xd4, &(0x7f0000000040)=0x9, 0x4) 1.680656636s ago: executing program 0 (id=765): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) add_key(0x0, &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffa) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x4d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x10}, 0x100000, 0x7, 0xfffffffc}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) setns(0xc9, 0x0) fchdir(0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/llc/socket\x00') sendfile(r0, r1, &(0x7f0000000100)=0x4f, 0xff) 1.624689447s ago: executing program 0 (id=766): perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x5a, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2042, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x2, @perf_config_ext={0x0, 0x1946}, 0x0, 0x0, 0x0, 0x4, 0x5, 0x7fffffff, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xa) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x268}, 0x1, 0x0, 0x0, 0x41}, 0x20004c00) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, @perf_config_ext={0x1, 0xfffffffffffffff0}, 0x3830, 0x1, 0xbd4, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x844) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x0) 1.451703291s ago: executing program 0 (id=767): r0 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x14, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20040000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000020000000000000000000000180100002020000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000808500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x15, 0x2000000000000216, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2400000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x28108, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r3, 0x40042408, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="928e04b416cac951c35f7f4586e6", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.451567841s ago: executing program 1 (id=768): mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$rxrpc(0x21, 0x2, 0x2) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x1, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f00000001c0)) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) mmap$perf(0x0, 0x2000, 0x3, 0x11, 0xffffffffffffffff, 0x0) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) 1.378559202s ago: executing program 6 (id=769): syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x2, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(0xffffffffffffffff, 0x0, 0x48000) socket$pptp(0x18, 0x1, 0x2) pselect6(0x40, &(0x7f0000000000)={0x78, 0x400, 0x0, 0x6, 0x841, 0x200000000005, 0x2, 0x2}, 0x0, 0x0, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x13, 0x0, @remote}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000400)="08001efbb07d586e", 0x8}], 0x1}, 0x804) preadv(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}], 0x1, 0x800, 0x0) 1.364598823s ago: executing program 1 (id=770): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x5, 0x0, 0x0, 0x7fffffff}]}) unshare(0x22060600) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x401c2103, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x9, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x3}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r1, 0x2) 1.096491968s ago: executing program 3 (id=771): r0 = io_uring_setup(0x6a76, &(0x7f0000000180)={0x0, 0xaefa, 0x0, 0x40}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000280)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) fcntl$dupfd(r1, 0x0, 0xffffffffffffffff) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x240540c7, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @loopback, 0xfffffffe}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="04", 0x1, 0x4c090, 0x0, 0x0) dup(r0) close_range(r0, 0xffffffffffffffff, 0x0) 979.465501ms ago: executing program 3 (id=772): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e20, @empty}, 0x10) listen(r0, 0x5) accept4(r0, 0x0, 0x0, 0x0) 454.998191ms ago: executing program 6 (id=773): r0 = perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8, 0x7}, 0x201, 0xe7e, 0x0, 0x3, 0x800000, 0x43, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$BTRFS_IOC_SEND(r0, 0x40489426, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x20000000000000bf, &(0x7f0000000480)}) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x23, &(0x7f0000000000), 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c0000000206010100000000001400000000000005000400000000000900020073797a3200000000140007800800080000000052080006400000ddaa050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f00000007c0)={[{@min_batch_time={'min_batch_time', 0x3d, 0x6}}, {@nogrpid}, {@usrquota}, {@user_xattr}]}, 0xff, 0x24f, &(0x7f0000000800)="$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") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x3, 0x2b5, &(0x7f0000000380)="$eJzs3c9qY1UYAPDvpkkaLZIsXIngXczCjWUyWxdmkApiV0oW/gEdnBkYmjDQQGBUDF35BC5c+B7uXLlR3PgGgg/gziKFIze5TWKbpk1rWun8fpsezvm+nO/k3PYuLvf0s1f7ew+fDh4ffPV7NBpZVDrRicMsWlGJY6kUAMCtcJhS/Hmp+3u1sq6aAID1mrv/184I2Tzd9da6ywIA1uiDDz967/7u7s77ed6I6H8z7GYx+TkZv/84nkQvHsXdaMbR7FlASpP2O+/u7kQ1L7TiTn807BaZ/U9/nX9sUOS3oxmtxfntfGIufzTs1uLFiCyLeNIpCrkXzXj5VH4xvnNvQX506/F6o1xkMf92NOO3z+Np9OLh+JnGbP6v23n+dvr2ry8/LoKL/Gw07G6O42bSxnXvDQAAAAAAAAAAAAAAAAAAAAAAt9d2PtWKO/2iqzx/Z+NoPL79r/Hx+TqV8fgkP4uojxsnzgcapfj++Hydu3mep2wSPzvfpxqvVKN6YwsHAAAAAAAAAAAAAAAAAACA/5HBsy/2HvR6j/b/k0b5kv/0tf7Lfk5nrue1WB68udJcsVGGF7WejGn//El/2lMsYvXiD18a1vKIZTXXTvW8UNRz/hR/p5RSlkVcbZtqF5nrnMbW8pjiC/7xu6039h5k532HjeON+2F+qB77g2cn9jSyovHTLxfb7rTS5VdfElMvr5gLfc7WFX+J3vxjMlnZk62wilrZiLMuv8ZK1/M1/QECAAAAAAAAAAAAAAAAAACmZi/9Lhg8WJpaWVtRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDNZv//f4XGqExeHJNSGk176rE/uOElAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8Bz4JwAA///l5m1V") openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x100, 0x52) 453.324631ms ago: executing program 0 (id=783): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) write(r2, 0x0, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r2, 0x10f, 0x81, &(0x7f0000000040), 0x4) write$P9_RVERSION(r2, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 452.832141ms ago: executing program 1 (id=774): r0 = perf_event_open(&(0x7f0000000fc0)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x400, 0xf6103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24000000, 0x0, @perf_bp={0x0, 0x8}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffefffffffffffff, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x7, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r3) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000880)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000980)={{r2}, &(0x7f0000000900), &(0x7f0000000940)=r1}, 0x20) syz_clone(0xc0126014, 0x0, 0x0, 0x0, 0x0, 0x0) 382.113393ms ago: executing program 0 (id=775): perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x1, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000d00)='mem', 0x3) r1 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, 0x0, &(0x7f00000004c0)) sendmmsg$inet_sctp(r1, 0x0, 0x0, 0x0) 312.957844ms ago: executing program 7 (id=776): socket$packet(0x11, 0x3, 0x300) r0 = socket(0x1e, 0x4, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0x65, 0x0, 0x0, 0x0, 0x0, 0x5, 0x20081, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x2, @perf_config_ext={0x4}, 0x2, 0x1, 0x7fffffff, 0x0, 0x2, 0x80000011, 0x1, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) r1 = socket(0x1e, 0x2, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x3514}], 0x1}}], 0x400000000000181, 0x9200000000000000) r2 = dup3(r1, r0, 0x0) recvmmsg(r2, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)=""/8, 0x8}], 0x1}, 0x7}], 0x1, 0x40010140, 0x0) 65.086409ms ago: executing program 1 (id=777): perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(0xffffffffffffffff, 0x0, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xc, 0x6c033, 0xffffffffffffffff, 0x0) set_mempolicy(0x8006, 0x0, 0x5) mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2) 39.24822ms ago: executing program 7 (id=778): r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x66, 0x2, @perf_config_ext={0x7, 0x100}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x6, 0x2, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback=0x22, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r3, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x200000000000000) 0s ago: executing program 3 (id=779): socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01000000010000000400000008"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f00000008c0)="7a7fa22c2aff88df53ef2a2d280f", 0x0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = io_uring_setup(0xa0, &(0x7f0000000080)={0x0, 0x7, 0x10, 0x400}) io_uring_register$IORING_REGISTER_BUFFERS(r2, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x60000) kernel console output (not intermixed with test programs): ing as an active interface with an up link [ 33.468819][ T3307] team0: Port device team_slave_0 added [ 33.487173][ T3307] team0: Port device team_slave_1 added [ 33.501328][ T3297] hsr_slave_0: entered promiscuous mode [ 33.502296][ T3297] hsr_slave_1: entered promiscuous mode [ 33.535246][ T3305] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.535338][ T3305] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.535402][ T3305] bridge_slave_0: entered allmulticast mode [ 33.535887][ T3305] bridge_slave_0: entered promiscuous mode [ 33.537067][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.537155][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.537242][ T3307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.538804][ T3307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.538841][ T3307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.538921][ T3307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.567783][ T3307] hsr_slave_0: entered promiscuous mode [ 33.568679][ T3307] hsr_slave_1: entered promiscuous mode [ 33.569377][ T3307] debugfs: 'hsr0' already exists in 'hsr' [ 33.569415][ T3307] Cannot create hsr debugfs directory [ 33.580390][ T3305] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.580536][ T3305] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.580690][ T3305] bridge_slave_1: entered allmulticast mode [ 33.581695][ T3305] bridge_slave_1: entered promiscuous mode [ 33.658657][ T3305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.708213][ T3305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.714086][ T3308] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.714181][ T3308] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.714340][ T3308] bridge_slave_0: entered allmulticast mode [ 33.716114][ T3308] bridge_slave_0: entered promiscuous mode [ 33.749289][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.749353][ T3308] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.749455][ T3308] bridge_slave_1: entered allmulticast mode [ 33.750091][ T3308] bridge_slave_1: entered promiscuous mode [ 33.785533][ T3305] team0: Port device team_slave_0 added [ 33.804102][ T3305] team0: Port device team_slave_1 added [ 33.804242][ T3306] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.804276][ T3306] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.804457][ T3306] bridge_slave_0: entered allmulticast mode [ 33.805084][ T3306] bridge_slave_0: entered promiscuous mode [ 33.843375][ T3308] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.848925][ T3306] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.849018][ T3306] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.849185][ T3306] bridge_slave_1: entered allmulticast mode [ 33.850277][ T3306] bridge_slave_1: entered promiscuous mode [ 33.862434][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.862467][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.862618][ T3305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.884123][ T3308] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.910941][ T3305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.910977][ T3305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.911058][ T3305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.964240][ T3308] team0: Port device team_slave_0 added [ 33.984536][ T3306] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.994475][ T3308] team0: Port device team_slave_1 added [ 33.995226][ T3306] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 34.013756][ T3305] hsr_slave_0: entered promiscuous mode [ 34.014659][ T3305] hsr_slave_1: entered promiscuous mode [ 34.015232][ T3305] debugfs: 'hsr0' already exists in 'hsr' [ 34.015283][ T3305] Cannot create hsr debugfs directory [ 34.044178][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.044209][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.044294][ T3308] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.101048][ T3306] team0: Port device team_slave_0 added [ 34.102175][ T3308] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.102211][ T3308] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.102343][ T3308] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.127385][ T3306] team0: Port device team_slave_1 added [ 34.157420][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 34.157441][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.157476][ T3306] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 34.173313][ T3307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.197577][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.200316][ T3306] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 34.200355][ T3306] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 34.200425][ T3306] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 34.226737][ T3307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.251589][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.274018][ T3308] hsr_slave_0: entered promiscuous mode [ 34.274971][ T3308] hsr_slave_1: entered promiscuous mode [ 34.275694][ T3308] debugfs: 'hsr0' already exists in 'hsr' [ 34.275732][ T3308] Cannot create hsr debugfs directory [ 34.286239][ T3307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.295382][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.316163][ T3307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.325040][ T3307] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.327706][ T3297] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.335682][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.356585][ T3297] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.360490][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.372028][ T3306] hsr_slave_0: entered promiscuous mode [ 34.372948][ T3306] hsr_slave_1: entered promiscuous mode [ 34.373469][ T3306] debugfs: 'hsr0' already exists in 'hsr' [ 34.373512][ T3306] Cannot create hsr debugfs directory [ 34.385751][ T3297] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.392619][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.393897][ T3297] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.398365][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.543849][ T3305] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.552650][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.561899][ T3305] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.571020][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.585493][ T3305] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.594259][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.603255][ T3308] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.612265][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.613265][ T3305] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.623064][ T3305] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.639772][ T3308] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.643591][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.644766][ T3308] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.650891][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.669983][ T3307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.670746][ T3308] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.681451][ T3308] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.709133][ T3306] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.717689][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.726043][ T3306] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.735015][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.742904][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.750944][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.762269][ T3306] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.771482][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.772754][ T3306] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.781943][ T3306] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.797611][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.797666][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.801101][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.801186][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.821063][ T3307] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.842641][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.842680][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.864265][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.864326][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.946824][ T3305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.968727][ T3308] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.979499][ T3305] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.995387][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.995428][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.013616][ T3306] 8021q: adding VLAN 0 to HW filter on device bond0 [ 35.022331][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.022382][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.051925][ T3308] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.060997][ T70] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.061042][ T70] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.064635][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.064737][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.077344][ T3306] 8021q: adding VLAN 0 to HW filter on device team0 [ 35.107487][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.107537][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.127126][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.127183][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.189585][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.354357][ T3307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.405280][ T3297] veth0_vlan: entered promiscuous mode [ 35.414278][ T3297] veth1_vlan: entered promiscuous mode [ 35.446746][ T3305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.459325][ T3297] veth0_macvtap: entered promiscuous mode [ 35.464374][ T3297] veth1_macvtap: entered promiscuous mode [ 35.483980][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.491235][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.518117][ T3308] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.557688][ T3306] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.568206][ T31] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.569167][ T31] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.569530][ T31] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.574831][ T31] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.641591][ T3297] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.666489][ T3307] veth0_vlan: entered promiscuous mode [ 35.679010][ T3307] veth1_vlan: entered promiscuous mode [ 35.711432][ T3307] veth0_macvtap: entered promiscuous mode [ 35.721067][ T3307] veth1_macvtap: entered promiscuous mode [ 35.740998][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.760912][ T3307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.771056][ T3305] veth0_vlan: entered promiscuous mode [ 35.793735][ T3305] veth1_vlan: entered promiscuous mode [ 35.798006][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.801377][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.801882][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.802517][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.863643][ T3305] veth0_macvtap: entered promiscuous mode [ 35.876479][ T3305] veth1_macvtap: entered promiscuous mode [ 35.880993][ T3306] veth0_vlan: entered promiscuous mode [ 35.895076][ T3306] veth1_vlan: entered promiscuous mode [ 35.902562][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.921500][ T3305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.958813][ T51] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.978056][ T365] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.978118][ T365] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.978291][ T365] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.984848][ T3308] veth0_vlan: entered promiscuous mode [ 36.015728][ T3306] veth0_macvtap: entered promiscuous mode [ 36.033724][ T3306] veth1_macvtap: entered promiscuous mode [ 36.043881][ T3308] veth1_vlan: entered promiscuous mode [ 36.077544][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.096120][ T3308] veth0_macvtap: entered promiscuous mode [ 36.108267][ T3306] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.121212][ T3308] veth1_macvtap: entered promiscuous mode [ 36.135232][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.149847][ T3308] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.181326][ T31] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.183026][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.183387][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.183914][ T51] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.189409][ T51] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.189521][ T51] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.189622][ T51] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.260100][ T70] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.294641][ T3518] netlink: 'syz.0.8': attribute type 1 has an invalid length. [ 36.432529][ T29] kauditd_printk_skb: 46 callbacks suppressed [ 36.432553][ T29] audit: type=1400 audit(1787883182.232:182): avc: denied { read append } for pid=3526 comm="syz.4.5" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.432583][ T29] audit: type=1400 audit(1787883182.232:183): avc: denied { open } for pid=3526 comm="syz.4.5" path="/dev/ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.455846][ T29] audit: type=1400 audit(1787883182.242:184): avc: denied { ioctl } for pid=3526 comm="syz.4.5" path="/dev/ppp" dev="devtmpfs" ino=140 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.508016][ T29] audit: type=1400 audit(1787883182.292:185): avc: denied { write } for pid=3526 comm="syz.4.5" name="ppp" dev="devtmpfs" ino=140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 36.551956][ T29] audit: type=1326 audit(1787883182.352:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3534 comm="syz.0.10" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb664bce0d9 code=0x7ffc0000 [ 36.552364][ T29] audit: type=1326 audit(1787883182.352:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3534 comm="syz.0.10" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb664bce0d9 code=0x7ffc0000 [ 36.552723][ T29] audit: type=1326 audit(1787883182.352:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3534 comm="syz.0.10" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb664bce0d9 code=0x7ffc0000 [ 36.555743][ T29] audit: type=1326 audit(1787883182.352:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3534 comm="syz.0.10" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7fb664bce0d9 code=0x7ffc0000 [ 36.558054][ T3532] loop3: detected capacity change from 0 to 1024 [ 36.559689][ T3532] ======================================================= [ 36.559689][ T3532] WARNING: The mand mount option has been deprecated and [ 36.559689][ T3532] and is ignored by this kernel. Remove the mand [ 36.559689][ T3532] option from the mount to silence this warning. [ 36.559689][ T3532] ======================================================= [ 36.577683][ T29] audit: type=1326 audit(1787883182.382:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3534 comm="syz.0.10" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb664bce0d9 code=0x7ffc0000 [ 36.586063][ T3532] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 36.586432][ T3532] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.586581][ T29] audit: type=1400 audit(1787883182.382:191): avc: denied { mount } for pid=3531 comm="syz.3.11" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 36.767783][ T3512] syz.1.7 (3512) used greatest stack depth: 10944 bytes left [ 36.832783][ T369] EXT4-fs error (device loop3): ext4_map_blocks:832: inode #15: comm kworker/u8:7: lblock 0 mapped to illegal pblock 0 (length 1) [ 36.846834][ T369] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 36.846872][ T369] EXT4-fs (loop3): This should not happen!! Data will be lost [ 36.846872][ T369] [ 36.870368][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 37.108952][ T3557] loop0: detected capacity change from 0 to 8192 [ 37.145911][ T3580] FAULT_INJECTION: forcing a failure. [ 37.145911][ T3580] name failslab, interval 1, probability 0, space 0, times 1 [ 37.145990][ T3580] CPU: 1 UID: 0 PID: 3580 Comm: syz.4.19 Not tainted syzkaller #0 PREEMPT(lazy) [ 37.146018][ T3580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.146039][ T3580] Call Trace: [ 37.146046][ T3580] [ 37.146055][ T3580] __dump_stack+0x1d/0x30 [ 37.146090][ T3580] dump_stack_lvl+0x95/0xd0 [ 37.146170][ T3580] dump_stack+0x15/0x1b [ 37.146194][ T3580] should_fail_ex+0x262/0x280 [ 37.146218][ T3580] ? __se_sys_mount+0xef/0x2e0 [ 37.146249][ T3580] should_failslab+0x8c/0xb0 [ 37.146318][ T3580] __kmalloc_cache_noprof+0x7a/0x400 [ 37.146351][ T3580] ? __se_sys_mount+0xef/0x2e0 [ 37.146388][ T3580] __se_sys_mount+0xef/0x2e0 [ 37.146420][ T3577] netlink: 128 bytes leftover after parsing attributes in process `syz.2.18'. [ 37.146491][ T3580] ? restore_fpregs_from_fpstate+0x61/0x110 [ 37.146516][ T3580] __x64_sys_mount+0x67/0x80 [ 37.146588][ T3580] x64_sys_call+0xc3b/0x2550 [ 37.146620][ T3580] do_syscall_64+0x112/0x360 [ 37.146654][ T3580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.146758][ T3580] RIP: 0033:0x7f8e91cbe0d9 [ 37.146785][ T3580] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.146807][ T3580] RSP: 002b:00007f8e90717028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 37.146832][ T3580] RAX: ffffffffffffffda RBX: 00007f8e91f45fa0 RCX: 00007f8e91cbe0d9 [ 37.146956][ T3580] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 37.146968][ T3580] RBP: 00007f8e91d55024 R08: 0000200000000100 R09: 0000000000000000 [ 37.146981][ T3580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.147010][ T3580] R13: 00007f8e91f46038 R14: 00007f8e91f45fa0 R15: 00007fffed317ef8 [ 37.147033][ T3580] [ 37.462393][ T3593] loop4: detected capacity change from 0 to 164 [ 37.482179][ T3593] rock: corrupted directory entry. extent=28, offset=16056320, size=0 [ 37.540391][ T3593] IPVS: Error connecting to the multicast addr [ 37.753086][ T3609] netlink: 24 bytes leftover after parsing attributes in process `syz.4.26'. [ 37.842058][ T3618] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 37.842195][ T3618] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 37.842233][ T3618] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 37.842265][ T3618] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 37.842295][ T3618] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 37.842380][ T3618] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 37.842470][ T3618] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 37.842531][ T3618] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 37.842580][ T3618] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 37.842611][ T3618] ip6_tunnel: non-ECT from db5b:6861:58bb:cfe8:875a:6596:9ff5:7b00 with DS=0x31 [ 38.861947][ T3655] netlink: 'syz.3.39': attribute type 2 has an invalid length. [ 38.981167][ T3664] loop0: detected capacity change from 0 to 512 [ 39.004487][ T3664] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 39.004587][ T3664] ext4 filesystem being mounted at /6/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 39.037491][ T3658] loop4: detected capacity change from 0 to 8192 [ 39.070716][ T3658] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 39.095088][ T3663] uprobe: syz.0.43:3663 failed to unregister, leaking uprobe [ 39.116865][ T3673] netlink: 12 bytes leftover after parsing attributes in process `syz.1.45'. [ 39.196367][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 39.331707][ T3688] netlink: 12 bytes leftover after parsing attributes in process `syz.3.52'. [ 39.659811][ T3703] l2tp_ppp: sess 2/0: no socket in recv [ 40.148824][ T3710] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.149033][ T3710] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.319758][ T3619] syz.2.29 (3619) used greatest stack depth: 10680 bytes left [ 40.417027][ T3710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 40.429837][ T3710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 40.495942][ T3729] netlink: 'syz.3.66': attribute type 39 has an invalid length. [ 40.558388][ T31] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.558448][ T31] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.558575][ T31] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.558696][ T31] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.663903][ T3731] netlink: 24 bytes leftover after parsing attributes in process `syz.1.69'. [ 40.664357][ T3731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.69'. [ 40.710549][ T3710] syz.2.61 (3710) used greatest stack depth: 10144 bytes left [ 40.718850][ T3731] bond0: (slave bond_slave_0): Releasing backup interface [ 40.825319][ T3740] loop4: detected capacity change from 0 to 128 [ 41.776825][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 41.776855][ T29] audit: type=1400 audit(1787883187.572:313): avc: denied { unmount } for pid=3307 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 41.786138][ T29] audit: type=1400 audit(1787883187.582:314): avc: denied { append } for pid=3741 comm="syz.2.74" name="001" dev="devtmpfs" ino=156 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 41.851536][ T29] audit: type=1400 audit(1787883187.652:315): avc: denied { mounton } for pid=3747 comm="syz.1.77" path="/proc/34/task" dev="proc" ino=4699 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 41.939067][ T29] audit: type=1400 audit(1787883187.742:316): avc: denied { relabelfrom } for pid=3749 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 41.939107][ T29] audit: type=1400 audit(1787883187.742:317): avc: denied { relabelto } for pid=3749 comm="syz.0.76" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 41.993036][ T29] audit: type=1400 audit(1787883187.792:318): avc: denied { perfmon } for pid=3755 comm="syz.3.81" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 42.004023][ T3754] netlink: 24 bytes leftover after parsing attributes in process `syz.4.79'. [ 42.100212][ T3764] netlink: 12 bytes leftover after parsing attributes in process `syz.4.82'. [ 42.116268][ T29] audit: type=1400 audit(1787883187.912:319): avc: denied { ioctl } for pid=3758 comm="syz.0.83" path="/dev/virtual_nci" dev="devtmpfs" ino=132 ioctlcmd=0x0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 42.153485][ T3764] netlink: 36 bytes leftover after parsing attributes in process `syz.4.82'. [ 42.153585][ T3764] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 42.153704][ T3764] batadv_slave_0: entered allmulticast mode [ 42.155188][ T29] audit: type=1400 audit(1787883187.952:320): avc: denied { bpf } for pid=3766 comm="syz.1.84" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 42.258358][ T3774] netlink: 16 bytes leftover after parsing attributes in process `syz.4.87'. [ 42.326690][ T3778] sctp: [Deprecated]: syz.3.89 (pid 3778) Use of struct sctp_assoc_value in delayed_ack socket option. [ 42.326690][ T3778] Use struct sctp_sack_info instead [ 42.344191][ T29] audit: type=1400 audit(1787883188.142:321): avc: denied { ioctl } for pid=3777 comm="syz.3.89" path="socket:[4755]" dev="sockfs" ino=4755 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 42.416112][ T3778] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.560908][ T31] IPVS: starting estimator thread 0... [ 42.566566][ T29] audit: type=1400 audit(1787883188.362:322): avc: denied { mount } for pid=3786 comm="syz.3.93" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 42.668270][ T3793] IPVS: using max 2016 ests per chain, 100800 per kthread [ 42.996194][ T70] Bluetooth: hci0: Frame reassembly failed (-84) [ 43.015312][ T3784] loop1: detected capacity change from 0 to 32768 [ 43.031544][ T3784] loop1: p1 p3 < > [ 43.233481][ T3848] loop3: detected capacity change from 0 to 256 [ 43.299791][ T3851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.117'. [ 43.299832][ T3851] netlink: 8 bytes leftover after parsing attributes in process `syz.3.117'. [ 43.388235][ T3831] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.388279][ T3831] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.388402][ T3831] bridge_slave_0: entered allmulticast mode [ 43.388907][ T3831] bridge_slave_0: entered promiscuous mode [ 43.390206][ T3831] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.390342][ T3831] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.390624][ T3831] bridge_slave_1: entered allmulticast mode [ 43.391898][ T3831] bridge_slave_1: entered promiscuous mode [ 43.418913][ T3831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 43.421944][ T3831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 43.447420][ T3831] team0: Port device team_slave_0 added [ 43.450217][ T3831] team0: Port device team_slave_1 added [ 43.474412][ T3831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 43.474443][ T3831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.474479][ T3831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 43.476166][ T3831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 43.476205][ T3831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 43.476286][ T3831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 43.517304][ T3831] hsr_slave_0: entered promiscuous mode [ 43.554249][ T3831] hsr_slave_1: entered promiscuous mode [ 43.556706][ T3831] debugfs: 'hsr0' already exists in 'hsr' [ 43.556748][ T3831] Cannot create hsr debugfs directory [ 43.776675][ T3831] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 43.785796][ T3831] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 43.786540][ T3831] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 43.800114][ T3831] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 43.801931][ T3831] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 43.814328][ T3831] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 43.817535][ T3831] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 43.826359][ T3831] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 43.847573][ T3865] loop1: detected capacity change from 0 to 512 [ 43.868980][ T3865] EXT4-fs: Ignoring removed mblk_io_submit option [ 43.916458][ T3865] EXT4-fs error (device loop1): ext4_iget_extra_inode:5210: inode #15: comm syz.1.121: corrupted in-inode xattr: e_value size too large [ 43.916621][ T3865] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 43.934279][ T3831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 43.934384][ T3865] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.121: couldn't read orphan inode 15 (err -117) [ 43.934654][ T3865] loop1: lost filesystem error report for type 5 error -117 [ 43.944545][ C0] EXT4-fs (loop1): error count since last fsck: 2 [ 43.944571][ C0] EXT4-fs (loop1): initial error at time 1787883189: ext4_iget_extra_inode:5210: inode 15 [ 43.944615][ C0] EXT4-fs (loop1): last error at time 1787883189: ext4_orphan_get:1408 [ 43.959528][ T3831] 8021q: adding VLAN 0 to HW filter on device team0 [ 43.977848][ T3865] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 43.986061][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.986159][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.005671][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.005780][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.221310][ T3831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 44.290105][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 44.410393][ T3831] veth0_vlan: entered promiscuous mode [ 44.418778][ T3831] veth1_vlan: entered promiscuous mode [ 44.436698][ T3831] veth0_macvtap: entered promiscuous mode [ 44.446503][ T3831] veth1_macvtap: entered promiscuous mode [ 44.463670][ T3831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 44.474476][ T3831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 44.526593][ T3912] netlink: 12 bytes leftover after parsing attributes in process `syz.1.127'. [ 44.528432][ T365] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.528902][ T365] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.529018][ T365] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.529117][ T365] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 44.760617][ T3933] syzkaller0: entered promiscuous mode [ 44.760640][ T3933] syzkaller0: entered allmulticast mode [ 45.057945][ T3699] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 45.325923][ T3969] loop2: detected capacity change from 0 to 8192 [ 45.336192][ T3969] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 45.432949][ T3974] netlink: 'syz.3.149': attribute type 1 has an invalid length. [ 45.452702][ T3974] 8021q: adding VLAN 0 to HW filter on device bond1 [ 45.502641][ T3974] bond1: (slave dummy0): making interface the new active one [ 45.503428][ T3974] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 45.533837][ T3974] : renamed from dummy0 (while UP) [ 45.578545][ T3979] loop1: detected capacity change from 0 to 512 [ 45.616268][ T3979] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 45.616549][ T3979] ext4 filesystem being mounted at /23/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 45.739051][ T3992] loop3: detected capacity change from 0 to 1024 [ 45.747319][ T3992] EXT4-fs: Ignoring removed nomblk_io_submit option [ 45.759967][ T3992] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 45.889463][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.025381][ T3306] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.074456][ T4013] netlink: 4 bytes leftover after parsing attributes in process `syz.3.160'. [ 46.191913][ T4015] netlink: 'syz.5.166': attribute type 1 has an invalid length. [ 46.191970][ T4015] netlink: 112860 bytes leftover after parsing attributes in process `syz.5.166'. [ 46.192002][ T4015] netlink: 'syz.5.166': attribute type 1 has an invalid length. [ 46.246094][ T4009] loop1: detected capacity change from 0 to 32768 [ 46.295391][ T4009] loop1: p1 p3 < > [ 46.466858][ T4040] FAULT_INJECTION: forcing a failure. [ 46.466858][ T4040] name failslab, interval 1, probability 0, space 0, times 0 [ 46.466897][ T4040] CPU: 1 UID: 0 PID: 4040 Comm: syz.1.174 Not tainted syzkaller #0 PREEMPT(lazy) [ 46.466921][ T4040] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.467003][ T4040] Call Trace: [ 46.467102][ T4040] [ 46.467134][ T4040] __dump_stack+0x1d/0x30 [ 46.467241][ T4040] dump_stack_lvl+0x95/0xd0 [ 46.467323][ T4040] dump_stack+0x15/0x1b [ 46.467389][ T4040] should_fail_ex+0x262/0x280 [ 46.467531][ T4040] ? do_timer_create+0x17a/0x950 [ 46.467614][ T4040] should_failslab+0x8c/0xb0 [ 46.467707][ T4040] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 46.467849][ T4040] ? do_timer_create+0x17a/0x950 [ 46.467924][ T4040] do_timer_create+0x17a/0x950 [ 46.468000][ T4040] ? __se_sys_futex+0x2f6/0x370 [ 46.468178][ T4040] __x64_sys_timer_create+0xb9/0xe0 [ 46.468273][ T4040] ? switch_fpu_return+0xe7/0x1b0 [ 46.468371][ T4040] x64_sys_call+0x2248/0x2550 [ 46.468455][ T4040] do_syscall_64+0x112/0x360 [ 46.468604][ T4040] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 46.468687][ T4040] RIP: 0033:0x7f140544e0d9 [ 46.468739][ T4040] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.468794][ T4040] RSP: 002b:00007f1403e86028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 46.468856][ T4040] RAX: ffffffffffffffda RBX: 00007f14056d6090 RCX: 00007f140544e0d9 [ 46.468969][ T4040] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffff600020 [ 46.469012][ T4040] RBP: 00007f14054e5024 R08: 0000000000000000 R09: 0000000000000000 [ 46.469054][ T4040] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 46.469107][ T4040] R13: 00007f14056d6128 R14: 00007f14056d6090 R15: 00007ffdfa8bb3f8 [ 46.469163][ T4040] ? __UNIQUE_ID_modinfo_13773+0x75d51c30/0xffffffffffedac10 [ 46.469248][ T4040] [ 46.713050][ T3288] udevd[3288]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory [ 46.724996][ T3652] udevd[3652]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory [ 46.834857][ T29] kauditd_printk_skb: 54 callbacks suppressed [ 46.834882][ T29] audit: type=1400 audit(1787883192.632:377): avc: denied { read } for pid=4048 comm="syz.1.178" name="event1" dev="devtmpfs" ino=243 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 47.032475][ T29] audit: type=1400 audit(1787883192.832:378): avc: denied { setopt } for pid=4056 comm="syz.2.182" lport=52500 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 47.097391][ T29] audit: type=1400 audit(1787883192.892:379): avc: denied { cpu } for pid=4060 comm="syz.0.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=perf_event permissive=1 [ 47.251903][ T29] audit: type=1400 audit(1787883193.052:380): avc: denied { write } for pid=4069 comm="syz.3.187" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 47.609431][ T29] audit: type=1400 audit(1787883193.412:381): avc: denied { block_suspend } for pid=4074 comm="syz.5.189" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 47.679704][ T29] audit: type=1400 audit(1787883193.482:382): avc: denied { sqpoll } for pid=4076 comm="syz.2.190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 47.712797][ T4078] ieee802154 phy0 wpan0: encryption failed: -22 [ 47.765113][ T29] audit: type=1400 audit(1787883193.562:383): avc: denied { create } for pid=4085 comm="syz.1.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.785905][ T29] audit: type=1400 audit(1787883193.572:384): avc: denied { setopt } for pid=4085 comm="syz.1.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.872847][ T29] audit: type=1400 audit(1787883193.672:385): avc: denied { create } for pid=4090 comm="syz.5.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 47.892255][ T29] audit: type=1400 audit(1787883193.672:386): avc: denied { bind } for pid=4085 comm="syz.1.194" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 47.924725][ T4094] netlink: 'syz.3.197': attribute type 3 has an invalid length. [ 47.924749][ T4094] netlink: 'syz.3.197': attribute type 1 has an invalid length. [ 47.924780][ T4094] netlink: 60387 bytes leftover after parsing attributes in process `syz.3.197'. [ 48.438817][ T4132] loop5: detected capacity change from 0 to 512 [ 48.610811][ T9] kernel read not supported for file /per_cpu/cpu0/trace_pipe (pid: 9 comm: kworker/0:0) [ 48.809831][ T4151] Zero length message leads to an empty skb [ 48.937143][ T4158] loop0: detected capacity change from 0 to 1024 [ 48.944645][ T4158] EXT4-fs: Ignoring removed orlov option [ 48.970449][ T4158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.989773][ T4158] EXT4-fs error (device loop0): __ext4_new_inode:1289: comm syz.0.223: failed to insert inode 12: doubly allocated? [ 49.003447][ T4158] EXT4-fs error (device loop0) in ext4_free_inode:363: Corrupt filesystem [ 49.042404][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.123591][ T4171] loop1: detected capacity change from 0 to 1024 [ 49.132823][ T4171] EXT4-fs: Ignoring removed nomblk_io_submit option [ 49.153593][ T4171] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.262697][ T4181] bond1: entered allmulticast mode [ 49.282316][ T4181] macvlan2: entered promiscuous mode [ 49.282347][ T4181] macvlan2: entered allmulticast mode [ 49.282846][ T4181] bond1: (slave macvlan2): Opening slave failed [ 49.368626][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.496585][ T4188] loop1: detected capacity change from 0 to 256 [ 51.072925][ T70] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.401402][ T70] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.473669][ T70] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.631946][ T70] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 51.738299][ T70] bridge_slave_1: left allmulticast mode [ 51.738400][ T70] bridge_slave_1: left promiscuous mode [ 51.738626][ T70] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.760192][ T70] bridge_slave_0: left allmulticast mode [ 51.760218][ T70] bridge_slave_0: left promiscuous mode [ 51.760369][ T70] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.782372][ T4263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 51.782401][ T4263] netlink: 8 bytes leftover after parsing attributes in process `syz.0.273'. [ 51.845375][ T4264] loop5: detected capacity change from 0 to 2048 [ 51.868837][ T4264] loop5: p1 p2 p3 [ 51.868952][ T4264] loop5: p1 size 16777216 extends beyond EOD, truncated [ 51.869918][ T4264] loop5: p2 size 458752 extends beyond EOD, truncated [ 51.870899][ T4264] loop5: p3 start 3036741376 is beyond EOD, truncated [ 51.930139][ T70] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 51.948902][ T70] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.961441][ T70] bond0 (unregistering): Released all slaves [ 51.996508][ T29] kauditd_printk_skb: 132 callbacks suppressed [ 51.996548][ T29] audit: type=1400 audit(1787883197.792:519): avc: denied { read } for pid=3023 comm="dhcpcd" name="n26" dev="tmpfs" ino=1773 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.996608][ T29] audit: type=1400 audit(1787883197.792:520): avc: denied { open } for pid=3023 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=1773 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.007345][ T29] audit: type=1400 audit(1787883197.802:521): avc: denied { getattr } for pid=3023 comm="dhcpcd" path="/run/udev/data/n26" dev="tmpfs" ino=1773 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.070447][ T3652] udevd[3652]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 52.071349][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 52.099076][ T70] hsr_slave_0: left promiscuous mode [ 52.106087][ T70] hsr_slave_1: left promiscuous mode [ 52.107171][ T70] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.112929][ T70] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.112981][ T70] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.136580][ T70] veth1_macvtap: left promiscuous mode [ 52.136633][ T70] veth0_macvtap: left promiscuous mode [ 52.136680][ T70] veth1_vlan: left promiscuous mode [ 52.136747][ T70] veth0_vlan: left promiscuous mode [ 52.158888][ T4265] udevd[4265]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 52.161032][ T3652] udevd[3652]: inotify_add_watch(7, /dev/loop5p2, 10) failed: No such file or directory [ 52.225595][ T29] audit: type=1400 audit(1787883198.022:522): avc: denied { create } for pid=4274 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 52.305195][ T70] team0 (unregistering): Port device team_slave_1 removed [ 52.319519][ T70] team0 (unregistering): Port device team_slave_0 removed [ 52.320849][ T4284] netlink: 12 bytes leftover after parsing attributes in process `syz.3.267'. [ 52.375376][ T29] audit: type=1400 audit(1787883198.172:523): avc: denied { write } for pid=4273 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.375445][ T29] audit: type=1400 audit(1787883198.172:524): avc: denied { create } for pid=4273 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.375714][ T29] audit: type=1400 audit(1787883198.172:525): avc: denied { write } for pid=4273 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth1.link" dev="tmpfs" ino=1812 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.382395][ T29] audit: type=1400 audit(1787883198.172:526): avc: denied { append } for pid=4273 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" dev="tmpfs" ino=1812 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.501491][ T29] audit: type=1400 audit(1787883198.302:527): avc: denied { write } for pid=4293 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.501617][ T29] audit: type=1400 audit(1787883198.302:528): avc: denied { unlink } for pid=4293 comm="rm" name="resolv.conf.eth1.link" dev="tmpfs" ino=1812 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.575792][ T3023] 8021q: adding VLAN 0 to HW filter on device eth1 [ 52.587761][ T4299] ªªªªªª: renamed from vlan0 (while UP) [ 52.837119][ T3023] 8021q: adding VLAN 0 to HW filter on device eth2 [ 52.974123][ T4350] syz.3.284 uses obsolete (PF_INET,SOCK_PACKET) [ 53.017823][ T4336] loop0: detected capacity change from 0 to 256 [ 53.180737][ T3023] 8021q: adding VLAN 0 to HW filter on device eth3 [ 53.383766][ T3023] 8021q: adding VLAN 0 to HW filter on device eth4 [ 53.524283][ T4392] loop1: detected capacity change from 0 to 164 [ 53.537400][ T4392] rock: directory entry would overflow storage [ 53.537416][ T4392] rock: sig=0x4543, size=28, remaining=18 [ 53.553905][ T4392] lo: entered promiscuous mode [ 53.561417][ T4392] net_ratelimit: 3319 callbacks suppressed [ 53.561443][ T4392] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 53.606422][ T4396] loop2: detected capacity change from 0 to 2048 [ 53.827565][ T4405] gtp0: entered promiscuous mode [ 53.827610][ T4405] gtp0: entered allmulticast mode [ 53.839443][ T4405] team0: Device gtp0 is of different type [ 54.246471][ T4428] netlink: 'syz.2.301': attribute type 1 has an invalid length. [ 54.262552][ T4428] bond2: entered promiscuous mode [ 54.262720][ T4428] 8021q: adding VLAN 0 to HW filter on device bond2 [ 54.269118][ T4429] loop0: detected capacity change from 0 to 2048 [ 54.299497][ T4428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.301'. [ 54.299577][ T4428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.301'. [ 54.321936][ T4429] loop0: p1 < > p3 [ 54.327104][ T4429] loop0: p3 size 134217728 extends beyond EOD, truncated [ 54.354774][ T4428] bond2: (slave bridge1): making interface the new active one [ 54.354802][ T4428] bridge1: entered promiscuous mode [ 54.370387][ T4428] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 54.643702][ T4434] FAULT_INJECTION: forcing a failure. [ 54.643702][ T4434] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 54.644085][ T4434] CPU: 0 UID: 0 PID: 4434 Comm: syz.0.304 Not tainted syzkaller #0 PREEMPT(lazy) [ 54.644304][ T4434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.644340][ T4434] Call Trace: [ 54.644369][ T4434] [ 54.644393][ T4434] __dump_stack+0x1d/0x30 [ 54.644477][ T4434] dump_stack_lvl+0x95/0xd0 [ 54.644581][ T4434] dump_stack+0x15/0x1b [ 54.644651][ T4434] should_fail_ex+0x262/0x280 [ 54.644745][ T4434] should_fail+0xb/0x20 [ 54.644811][ T4434] should_fail_usercopy+0x1a/0x20 [ 54.644891][ T4434] _copy_to_user+0x20/0xa0 [ 54.645003][ T4434] do_timer_create+0x66e/0x950 [ 54.645069][ T4434] __x64_sys_timer_create+0xb9/0xe0 [ 54.645170][ T4434] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 54.645298][ T4434] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 54.645412][ T4434] x64_sys_call+0x2248/0x2550 [ 54.645507][ T4434] do_syscall_64+0x112/0x360 [ 54.645655][ T4434] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 54.645717][ T4434] RIP: 0033:0x7fb664bce0d9 [ 54.645769][ T4434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 54.645837][ T4434] RSP: 002b:00007fb663627028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 54.645946][ T4434] RAX: ffffffffffffffda RBX: 00007fb664e55fa0 RCX: 00007fb664bce0d9 [ 54.645988][ T4434] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffff600020 [ 54.646029][ T4434] RBP: 00007fb664c65024 R08: 0000000000000000 R09: 0000000000000000 [ 54.646150][ T4434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 54.646256][ T4434] R13: 00007fb664e56038 R14: 00007fb664e55fa0 R15: 00007ffe72de7648 [ 54.646308][ T4434] ? __UNIQUE_ID_modinfo_13773+0x75d51c30/0xffffffffffedac10 [ 54.646384][ T4434] [ 54.701136][ T4441] futex_wake_op: syz.1.306 tries to shift op by 144; fix this program [ 54.862152][ T4443] netlink: 12 bytes leftover after parsing attributes in process `syz.0.307'. [ 54.922025][ T4447] loop1: detected capacity change from 0 to 128 [ 54.937262][ T4447] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 54.937495][ T4447] ext4 filesystem being mounted at /43/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 55.245261][ T4462] bridge0: port 3(syz_tun) entered blocking state [ 55.245320][ T4462] bridge0: port 3(syz_tun) entered disabled state [ 55.245426][ T4462] syz_tun: entered allmulticast mode [ 55.246175][ T4462] syz_tun: entered promiscuous mode [ 55.246431][ T4462] bridge0: port 3(syz_tun) entered blocking state [ 55.246468][ T4462] bridge0: port 3(syz_tun) entered forwarding state [ 55.291643][ T3297] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 55.322280][ T4462] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 55.415055][ T4470] netlink: 12 bytes leftover after parsing attributes in process `syz.2.316'. [ 55.595507][ T4300] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 55.683902][ T4476] FAULT_INJECTION: forcing a failure. [ 55.683902][ T4476] name failslab, interval 1, probability 0, space 0, times 0 [ 55.684237][ T4476] CPU: 1 UID: 0 PID: 4476 Comm: syz.2.317 Not tainted syzkaller #0 PREEMPT(lazy) [ 55.684269][ T4476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.684287][ T4476] Call Trace: [ 55.684297][ T4476] [ 55.684342][ T4476] __dump_stack+0x1d/0x30 [ 55.684369][ T4476] dump_stack_lvl+0x95/0xd0 [ 55.684432][ T4476] dump_stack+0x15/0x1b [ 55.684506][ T4476] should_fail_ex+0x262/0x280 [ 55.684535][ T4476] ? do_timer_create+0x17a/0x950 [ 55.684561][ T4476] should_failslab+0x8c/0xb0 [ 55.684600][ T4476] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 55.684651][ T4476] ? do_timer_create+0x17a/0x950 [ 55.684670][ T4476] ? ktime_get+0x212/0x240 [ 55.684715][ T4476] do_timer_create+0x17a/0x950 [ 55.684739][ T4476] __x64_sys_timer_create+0xb9/0xe0 [ 55.684770][ T4476] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 55.684806][ T4476] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 55.684903][ T4476] x64_sys_call+0x2248/0x2550 [ 55.684929][ T4476] do_syscall_64+0x112/0x360 [ 55.684962][ T4476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 55.685007][ T4476] RIP: 0033:0x7f48a633e0d9 [ 55.685023][ T4476] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.685045][ T4476] RSP: 002b:00007f48a4d97028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 55.685072][ T4476] RAX: ffffffffffffffda RBX: 00007f48a65c5fa0 RCX: 00007f48a633e0d9 [ 55.685091][ T4476] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffff600020 [ 55.685108][ T4476] RBP: 00007f48a63d5024 R08: 0000000000000000 R09: 0000000000000000 [ 55.685167][ T4476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.685227][ T4476] R13: 00007f48a65c6038 R14: 00007f48a65c5fa0 R15: 00007ffe33ce2128 [ 55.685250][ T4476] ? __UNIQUE_ID_modinfo_13773+0x75d51c30/0xffffffffffedac10 [ 55.685286][ T4476] [ 55.929986][ T4491] loop1: detected capacity change from 0 to 8192 [ 56.495849][ T4517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'. [ 56.495879][ T4517] netlink: 8 bytes leftover after parsing attributes in process `syz.0.342'. [ 57.038417][ T29] kauditd_printk_skb: 113 callbacks suppressed [ 57.038446][ T29] audit: type=1400 audit(1787883202.842:642): avc: denied { execute } for pid=4540 comm="syz.3.339" path="/91/file1" dev="tmpfs" ino=487 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 57.159068][ T29] audit: type=1400 audit(1787883202.962:643): avc: denied { connect } for pid=4545 comm="syz.3.344" lport=256 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.179594][ T29] audit: type=1400 audit(1787883202.962:644): avc: denied { write } for pid=4545 comm="syz.3.344" laddr=172.20.20.10 lport=256 faddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 57.856407][ T29] audit: type=1400 audit(1787883203.652:645): avc: denied { accept } for pid=4573 comm="syz.0.352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 58.065483][ T29] audit: type=1400 audit(1787883203.862:646): avc: denied { create } for pid=4579 comm="syz.2.355" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 58.085881][ T29] audit: type=1400 audit(1787883203.862:647): avc: denied { name_bind } for pid=4579 comm="syz.2.355" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 58.320975][ T4588] netlink: 24 bytes leftover after parsing attributes in process `syz.2.357'. [ 58.348773][ T4588] netlink: 4 bytes leftover after parsing attributes in process `syz.2.357'. [ 58.493983][ T4605] loop2: detected capacity change from 0 to 512 [ 58.495087][ T4605] EXT4-fs: Ignoring removed mblk_io_submit option [ 58.501670][ T4605] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 58.503100][ T4606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=4606 comm=syz.3.362 [ 58.508648][ T4605] EXT4-fs (loop2): revision level too high, forcing read-only mode [ 58.508754][ T4605] EXT4-fs (loop2): orphan cleanup on readonly fs [ 58.509036][ T4605] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 58.509063][ T4605] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 58.509085][ T4605] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.364: Failed to acquire dquot type 1 [ 58.509113][ T4605] loop2: lost filesystem error report for type 5 error -5 [ 58.509378][ T4605] Quota error (device loop2): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0 [ 58.509436][ T4605] Quota error (device loop2): qtree_read_dquot: Can't read quota structure for id 0 [ 58.509458][ T4605] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.364: Failed to acquire dquot type 1 [ 58.509486][ T4605] loop2: lost filesystem error report for type 5 error -5 [ 58.509743][ T4605] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:487: comm syz.2.364: Invalid block bitmap block 0 in block_group 0 [ 58.509802][ T4605] loop2: lost filesystem error report for type 5 error -117 [ 58.510146][ T4605] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6680: Corrupt filesystem [ 58.510192][ T4605] loop2: lost filesystem error report for type 5 error -117 [ 58.511036][ T4605] EXT4-fs error (device loop2): ext4_acquire_dquot:7069: comm syz.2.364: Failed to acquire dquot type 1 [ 58.511110][ T4605] loop2: lost filesystem error report for type 5 error -5 [ 58.511497][ T4605] EXT4-fs (loop2): 1 orphan inode deleted [ 58.512783][ T4605] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 58.601198][ T4610] netlink: 24 bytes leftover after parsing attributes in process `syz.0.374'. [ 58.641866][ T3305] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.696758][ T4610] netlink: 4 bytes leftover after parsing attributes in process `syz.0.374'. [ 59.866529][ T4529] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 60.052847][ T4624] FAULT_INJECTION: forcing a failure. [ 60.052847][ T4624] name failslab, interval 1, probability 0, space 0, times 0 [ 60.052889][ T4624] CPU: 0 UID: 0 PID: 4624 Comm: syz.5.365 Not tainted syzkaller #0 PREEMPT(lazy) [ 60.052919][ T4624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 60.052936][ T4624] Call Trace: [ 60.052944][ T4624] [ 60.052993][ T4624] __dump_stack+0x1d/0x30 [ 60.053132][ T4624] dump_stack_lvl+0x95/0xd0 [ 60.053205][ T4624] dump_stack+0x15/0x1b [ 60.053279][ T4624] should_fail_ex+0x262/0x280 [ 60.053341][ T4624] ? do_timer_create+0x17a/0x950 [ 60.053411][ T4624] should_failslab+0x8c/0xb0 [ 60.053568][ T4624] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 60.053671][ T4624] ? do_timer_create+0x17a/0x950 [ 60.053753][ T4624] do_timer_create+0x17a/0x950 [ 60.053894][ T4624] ? __se_sys_futex+0x2f6/0x370 [ 60.053989][ T4624] __x64_sys_timer_create+0xb9/0xe0 [ 60.054160][ T4624] ? switch_fpu_return+0xe7/0x1b0 [ 60.054186][ T4624] x64_sys_call+0x2248/0x2550 [ 60.054212][ T4624] do_syscall_64+0x112/0x360 [ 60.054283][ T4624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.054356][ T4624] RIP: 0033:0x7f476eace0d9 [ 60.054408][ T4624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.054484][ T4624] RSP: 002b:00007f476d506028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 60.054561][ T4624] RAX: ffffffffffffffda RBX: 00007f476ed56090 RCX: 00007f476eace0d9 [ 60.054613][ T4624] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffff600020 [ 60.054655][ T4624] RBP: 00007f476eb65024 R08: 0000000000000000 R09: 0000000000000000 [ 60.054696][ T4624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.054737][ T4624] R13: 00007f476ed56128 R14: 00007f476ed56090 R15: 00007fff739cb388 [ 60.054800][ T4624] ? __UNIQUE_ID_modinfo_13773+0x75d51c30/0xffffffffffedac10 [ 60.054979][ T4624] [ 60.088659][ T4623] netlink: 12 bytes leftover after parsing attributes in process `syz.1.368'. [ 60.088699][ T4623] netlink: 87 bytes leftover after parsing attributes in process `syz.1.368'. [ 60.986930][ T4639] gtp0: entered promiscuous mode [ 60.987022][ T4639] gtp0: entered allmulticast mode [ 60.988229][ T4639] team0: Device gtp0 is of different type [ 61.212732][ T4658] netlink: 12 bytes leftover after parsing attributes in process `syz.5.383'. [ 61.242224][ T4658] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.257340][ T4658] macvlan2: entered promiscuous mode [ 61.257371][ T4658] macvlan2: entered allmulticast mode [ 61.263605][ T4658] bond1: entered promiscuous mode [ 61.264129][ T4658] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 61.296653][ T4658] bond1: left promiscuous mode [ 61.492363][ T4675] FAULT_INJECTION: forcing a failure. [ 61.492363][ T4675] name failslab, interval 1, probability 0, space 0, times 0 [ 61.492440][ T4675] CPU: 1 UID: 0 PID: 4675 Comm: syz.2.389 Not tainted syzkaller #0 PREEMPT(lazy) [ 61.492471][ T4675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.492484][ T4675] Call Trace: [ 61.492491][ T4675] [ 61.492498][ T4675] __dump_stack+0x1d/0x30 [ 61.492579][ T4675] dump_stack_lvl+0x95/0xd0 [ 61.492606][ T4675] dump_stack+0x15/0x1b [ 61.492635][ T4675] should_fail_ex+0x262/0x280 [ 61.492664][ T4675] ? do_timer_create+0x17a/0x950 [ 61.492691][ T4675] should_failslab+0x8c/0xb0 [ 61.492788][ T4675] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 61.492838][ T4675] ? do_timer_create+0x17a/0x950 [ 61.492860][ T4675] do_timer_create+0x17a/0x950 [ 61.492878][ T4675] ? __se_sys_futex+0x2f6/0x370 [ 61.492959][ T4675] __x64_sys_timer_create+0xb9/0xe0 [ 61.492991][ T4675] ? switch_fpu_return+0xe7/0x1b0 [ 61.493050][ T4675] x64_sys_call+0x2248/0x2550 [ 61.493076][ T4675] do_syscall_64+0x112/0x360 [ 61.493115][ T4675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.493144][ T4675] RIP: 0033:0x7f48a633e0d9 [ 61.493165][ T4675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.493213][ T4675] RSP: 002b:00007f48a4d76028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 61.493235][ T4675] RAX: ffffffffffffffda RBX: 00007f48a65c6090 RCX: 00007f48a633e0d9 [ 61.493273][ T4675] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffff600020 [ 61.493367][ T4675] RBP: 00007f48a63d5024 R08: 0000000000000000 R09: 0000000000000000 [ 61.493452][ T4675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.493469][ T4675] R13: 00007f48a65c6128 R14: 00007f48a65c6090 R15: 00007ffe33ce2128 [ 61.493493][ T4675] ? __UNIQUE_ID_modinfo_13773+0x75d51c30/0xffffffffffedac10 [ 61.493548][ T4675] [ 61.992696][ T4685] bridge0: port 3(syz_tun) entered disabled state [ 62.005382][ T4685] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.005793][ T4685] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.105692][ T4685] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 62.122354][ T4685] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 62.269878][ T4687] gtp0: entered promiscuous mode [ 62.269907][ T4687] gtp0: entered allmulticast mode [ 62.285089][ T4687] team0: Device gtp0 is of different type [ 62.338565][ T70] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.339708][ T70] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.339848][ T70] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.340054][ T70] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.391201][ T4691] ip6erspan0: entered allmulticast mode [ 62.676272][ T12] bridge_slave_1: left allmulticast mode [ 62.676303][ T12] bridge_slave_1: left promiscuous mode [ 62.676512][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.677496][ T12] bridge_slave_0: left allmulticast mode [ 62.677518][ T12] bridge_slave_0: left promiscuous mode [ 62.677748][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.754337][ T12] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 62.754375][ T12] bridge1 (unregistering): left promiscuous mode [ 62.782114][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.792097][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.802398][ T12] bond0 (unregistering): Released all slaves [ 62.805980][ T12] bond1 (unregistering): Released all slaves [ 62.821811][ T12] bond2 (unregistering): Released all slaves [ 62.846301][ T12] hsr_slave_0: left promiscuous mode [ 62.846627][ T12] hsr_slave_1: left promiscuous mode [ 62.847384][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 62.865937][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 62.937664][ T12] team0 (unregistering): Port device team_slave_1 removed [ 62.949190][ T12] team0 (unregistering): Port device team_slave_0 removed [ 62.987948][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 62.987995][ T29] audit: type=1400 audit(1787883208.782:654): avc: denied { write } for pid=4712 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.038664][ T29] audit: type=1400 audit(1787883208.842:655): avc: denied { write } for pid=4725 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.080044][ T3023] 8021q: adding VLAN 0 to HW filter on device eth5 [ 63.162419][ T4702] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.162471][ T4702] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.162619][ T4702] bridge_slave_0: entered allmulticast mode [ 63.163246][ T4702] bridge_slave_0: entered promiscuous mode [ 63.190402][ T4702] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.190456][ T4702] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.190652][ T4702] bridge_slave_1: entered allmulticast mode [ 63.191251][ T4702] bridge_slave_1: entered promiscuous mode [ 63.223920][ T12] IPVS: stop unused estimator thread 0... [ 63.236609][ T29] audit: type=1400 audit(1787883209.032:656): avc: denied { write } for pid=4731 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.273080][ T29] audit: type=1400 audit(1787883209.072:657): avc: denied { write } for pid=4745 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.299754][ T4702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.307200][ T3023] 8021q: adding VLAN 0 to HW filter on device eth6 [ 63.315350][ T4702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.336246][ T4702] team0: Port device team_slave_0 added [ 63.341550][ T4702] team0: Port device team_slave_1 added [ 63.361809][ T4702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.361832][ T4702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.361996][ T4702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.363621][ T4702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.363675][ T4702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 63.363745][ T4702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.416132][ T4702] hsr_slave_0: entered promiscuous mode [ 63.417136][ T4702] hsr_slave_1: entered promiscuous mode [ 63.418791][ T4702] debugfs: 'hsr0' already exists in 'hsr' [ 63.418839][ T4702] Cannot create hsr debugfs directory [ 63.540465][ T29] audit: type=1400 audit(1787883209.342:658): avc: denied { write } for pid=4748 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.573072][ T4702] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 63.580141][ T29] audit: type=1400 audit(1787883209.372:659): avc: denied { write } for pid=4760 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.604162][ T4702] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 63.612119][ T4702] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 63.621087][ T4702] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 63.622479][ T3023] 8021q: adding VLAN 0 to HW filter on device eth7 [ 63.623944][ T4702] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 63.632197][ T4702] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 63.633866][ T4702] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 63.640089][ T4702] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 63.698005][ T4702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.706573][ T4702] 8021q: adding VLAN 0 to HW filter on device team0 [ 63.718524][ T369] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.718568][ T369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.737322][ T70] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.737364][ T70] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.776633][ T29] audit: type=1400 audit(1787883209.572:660): avc: denied { write } for pid=4762 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.821251][ T29] audit: type=1400 audit(1787883209.622:661): avc: denied { write } for pid=4781 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.916869][ T4702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.939870][ T29] audit: type=1400 audit(1787883209.742:662): avc: denied { write } for pid=4787 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 63.976818][ T29] audit: type=1400 audit(1787883209.772:663): avc: denied { write } for pid=4805 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 64.105284][ T4702] veth0_vlan: entered promiscuous mode [ 64.113679][ T4702] veth1_vlan: entered promiscuous mode [ 64.131894][ T4702] veth0_macvtap: entered promiscuous mode [ 64.141010][ T4702] veth1_macvtap: entered promiscuous mode [ 64.153630][ T4702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.158338][ T4702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.188873][ T365] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.189267][ T365] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.209453][ T365] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.209554][ T365] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.367603][ T4846] loop6: detected capacity change from 0 to 8192 [ 64.369646][ T4846] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 64.807362][ T3023] 8021q: adding VLAN 0 to HW filter on device eth8 [ 65.222754][ T4909] loop1: detected capacity change from 0 to 8192 [ 65.227090][ T4909] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 65.585359][ T4930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.429'. [ 65.585813][ T4930] netlink: 87 bytes leftover after parsing attributes in process `syz.0.429'. [ 65.646372][ T4934] macsec0: entered promiscuous mode [ 65.698158][ T4938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.430'. [ 65.720076][ T4938] veth1_macvtap: left promiscuous mode [ 65.735201][ T4938] macsec0 (unregistering): left promiscuous mode [ 65.744468][ T4941] netlink: 'syz.0.432': attribute type 1 has an invalid length. [ 65.771695][ T4941] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.831470][ T4941] bond1: (slave geneve2): making interface the new active one [ 65.839540][ T4941] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 65.849856][ T51] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.878653][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.879948][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.885753][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.065820][ T4956] loop1: detected capacity change from 0 to 256 [ 66.082620][ T4956] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 66.171187][ T4963] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779264) [ 66.171309][ T4963] FAT-fs (loop1): Filesystem has been set read-only [ 66.171547][ T4963] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 66.171692][ T4963] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 66.389066][ T4954] FAT-fs (loop1): error, corrupted file size (i_pos 196, 16779008) [ 66.416199][ T4976] netlink: 12 bytes leftover after parsing attributes in process `syz.5.445'. [ 66.474949][ T4974] FAULT_INJECTION: forcing a failure. [ 66.474949][ T4974] name failslab, interval 1, probability 0, space 0, times 0 [ 66.475122][ T4974] CPU: 1 UID: 0 PID: 4974 Comm: syz.0.444 Not tainted syzkaller #0 PREEMPT(lazy) [ 66.475156][ T4974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 66.475173][ T4974] Call Trace: [ 66.475182][ T4974] [ 66.475192][ T4974] __dump_stack+0x1d/0x30 [ 66.475227][ T4974] dump_stack_lvl+0x95/0xd0 [ 66.475304][ T4974] dump_stack+0x15/0x1b [ 66.475332][ T4974] should_fail_ex+0x262/0x280 [ 66.475370][ T4974] ? do_timer_create+0x17a/0x950 [ 66.475406][ T4974] should_failslab+0x8c/0xb0 [ 66.475442][ T4974] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 66.475500][ T4974] ? do_timer_create+0x17a/0x950 [ 66.475540][ T4974] do_timer_create+0x17a/0x950 [ 66.475633][ T4974] ? __x64_sys_timer_create+0x24/0xe0 [ 66.475675][ T4974] __x64_sys_timer_create+0xb9/0xe0 [ 66.475756][ T4974] ? fpregs_assert_state_consistent+0xb3/0xe0 [ 66.475781][ T4974] ? arch_exit_to_user_mode_prepare+0x26/0x60 [ 66.475889][ T4974] x64_sys_call+0x2248/0x2550 [ 66.475971][ T4974] do_syscall_64+0x112/0x360 [ 66.475999][ T4974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.476023][ T4974] RIP: 0033:0x7fb664bce0d9 [ 66.476044][ T4974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.476135][ T4974] RSP: 002b:00007fb663627028 EFLAGS: 00000246 ORIG_RAX: 00000000000000de [ 66.476154][ T4974] RAX: ffffffffffffffda RBX: 00007fb664e55fa0 RCX: 00007fb664bce0d9 [ 66.476168][ T4974] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffff600020 [ 66.476181][ T4974] RBP: 00007fb664c65024 R08: 0000000000000000 R09: 0000000000000000 [ 66.476194][ T4974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.476208][ T4974] R13: 00007fb664e56038 R14: 00007fb664e55fa0 R15: 00007ffe72de7648 [ 66.476226][ T4974] ? __UNIQUE_ID_modinfo_13773+0x75d51c30/0xffffffffffedac10 [ 66.476288][ T4974] [ 66.984992][ T4997] netlink: 12 bytes leftover after parsing attributes in process `syz.5.454'. [ 67.000345][ T4997] bond2: entered promiscuous mode [ 67.000476][ T4997] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.051130][ T4997] 8021q: adding VLAN 0 to HW filter on device bond2 [ 67.077811][ T4997] bond2: (slave ipip0): The slave device specified does not support setting the MAC address [ 67.080440][ T4997] bond2: (slave ipip0): Error -95 calling set_mac_address [ 67.082582][ T4994] loop0: detected capacity change from 0 to 512 [ 67.085578][ T4994] EXT4-fs: Ignoring removed mblk_io_submit option [ 67.115852][ T4994] EXT4-fs error (device loop0): ext4_iget_extra_inode:5210: inode #15: comm syz.0.453: corrupted in-inode xattr: e_value size too large [ 67.116032][ T4994] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 67.117944][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 67.118006][ C0] EXT4-fs (loop0): initial error at time 1787883212: ext4_iget_extra_inode:5210: inode 15 [ 67.118096][ C0] EXT4-fs (loop0): last error at time 1787883212: ext4_iget_extra_inode:5210: inode 15 [ 67.165659][ T4994] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.453: couldn't read orphan inode 15 (err -117) [ 67.165863][ T4994] loop0: lost filesystem error report for type 5 error -117 [ 67.171152][ T4994] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 67.371624][ T5021] netlink: 12 bytes leftover after parsing attributes in process `syz.3.462'. [ 67.384194][ T5021] vlan0: entered promiscuous mode [ 67.384223][ T5021] syz_tun: entered promiscuous mode [ 67.387722][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.672828][ T5043] loop6: detected capacity change from 0 to 512 [ 67.703335][ T5043] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.704143][ T5043] ext4 filesystem being mounted at /17/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.810004][ T4702] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 68.035434][ T5063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.477'. [ 68.046025][ T5063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.477'. [ 68.066276][ T5060] FAULT_INJECTION: forcing a failure. [ 68.066276][ T5060] name failslab, interval 1, probability 0, space 0, times 0 [ 68.066319][ T5060] CPU: 0 UID: 0 PID: 5060 Comm: syz.5.476 Not tainted syzkaller #0 PREEMPT(lazy) [ 68.066346][ T5060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 68.066358][ T5060] Call Trace: [ 68.066364][ T5060] [ 68.066411][ T5060] __dump_stack+0x1d/0x30 [ 68.066437][ T5060] dump_stack_lvl+0x95/0xd0 [ 68.066468][ T5060] dump_stack+0x15/0x1b [ 68.066543][ T5060] should_fail_ex+0x262/0x280 [ 68.066653][ T5060] ? __alloc_skb+0x2e0/0x6f0 [ 68.066741][ T5060] should_failslab+0x8c/0xb0 [ 68.066841][ T5060] kmem_cache_alloc_node_noprof+0x82/0x400 [ 68.066933][ T5060] ? __rb_insert_augmented+0x28f/0x2c0 [ 68.067050][ T5060] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 68.067155][ T5060] ? __alloc_skb+0x2e0/0x6f0 [ 68.067246][ T5060] __alloc_skb+0x2e0/0x6f0 [ 68.067370][ T5060] ? __alloc_skb+0x209/0x6f0 [ 68.067461][ T5060] __inet6_rt_notify+0x8d/0x1e0 [ 68.067551][ T5060] inet6_rt_del_notify+0x2b/0x40 [ 68.067625][ T5060] fib6_del+0x7e4/0x910 [ 68.067759][ T5060] ? fib6_ifdown+0x1fe/0x340 [ 68.067843][ T5060] fib6_clean_node+0x18e/0x2b0 [ 68.067915][ T5060] fib6_walk_continue+0x382/0x420 [ 68.068058][ T5060] __fib6_clean_all+0x208/0x330 [ 68.068186][ T5060] ? __pfx_fib6_ifdown+0x10/0x10 [ 68.068267][ T5060] ? __pfx_fib6_clean_node+0x10/0x10 [ 68.068329][ T5060] ? __pfx_fib6_ifdown+0x10/0x10 [ 68.068353][ T5060] ? __pfx_fib6_ifdown+0x10/0x10 [ 68.068487][ T5060] fib6_clean_all+0x2a/0x40 [ 68.068542][ T5060] rt6_disable_ip+0xb3/0x680 [ 68.068624][ T5060] ? nf_nat_masq_schedule+0x29a/0x440 [ 68.068741][ T5060] ? raw_notifier_call_chain+0x72/0x1a0 [ 68.068854][ T5060] addrconf_ifdown+0x94/0xf70 [ 68.068909][ T5060] ? queue_work_on+0xd1/0x140 [ 68.068973][ T5060] ? tls_dev_event+0x3d9/0x9a0 [ 68.069045][ T5060] addrconf_notify+0x214/0x8e0 [ 68.069125][ T5060] ? __pfx_addrconf_notify+0x10/0x10 [ 68.069208][ T5060] raw_notifier_call_chain+0x72/0x1a0 [ 68.069273][ T5060] ? rtmsg_ifinfo+0xef/0x110 [ 68.069433][ T5060] __dev_notify_flags+0x2b4/0x490 [ 68.069525][ T5060] netif_change_flags+0xa5/0xc0 [ 68.069651][ T5060] do_setlink+0x8fc/0x2860 [ 68.069715][ T5060] ? cred_has_capability+0x224/0x2a0 [ 68.069894][ T5060] ? selinux_capable+0x31/0x40 [ 68.069972][ T5060] ? security_capable+0x7b/0x90 [ 68.070085][ T5060] ? ns_capable+0x80/0xb0 [ 68.070182][ T5060] ? netlink_ns_capable+0x86/0xa0 [ 68.070258][ T5060] rtnl_newlink+0x102a/0x1510 [ 68.070440][ T5060] ? xas_load+0x3de/0x430 [ 68.070525][ T5060] ? __memcg_slab_free_hook+0x154/0x340 [ 68.070600][ T5060] ? __rcu_read_unlock+0x4e/0x70 [ 68.070697][ T5060] ? avc_has_perm_noaudit+0xa3/0x120 [ 68.070781][ T5060] ? cred_has_capability+0x224/0x2a0 [ 68.070978][ T5060] ? selinux_capable+0x31/0x40 [ 68.071046][ T5060] ? security_capable+0x7b/0x90 [ 68.071192][ T5060] ? ns_capable+0x80/0xb0 [ 68.071323][ T5060] ? __pfx_rtnl_newlink+0x10/0x10 [ 68.071408][ T5060] rtnetlink_rcv_msg+0x64b/0x720 [ 68.071486][ T5060] netlink_rcv_skb+0x11e/0x220 [ 68.071569][ T5060] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 68.071656][ T5060] rtnetlink_rcv+0x1c/0x30 [ 68.071843][ T5060] netlink_unicast+0x5a9/0x680 [ 68.071920][ T5060] netlink_sendmsg+0x5be/0x6f0 [ 68.072057][ T5060] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.072151][ T5060] ____sys_sendmsg+0x532/0x580 [ 68.072254][ T5060] ___sys_sendmsg+0x195/0x1e0 [ 68.072349][ T5060] __x64_sys_sendmsg+0xd4/0x160 [ 68.072517][ T5060] x64_sys_call+0x22ab/0x2550 [ 68.072603][ T5060] do_syscall_64+0x112/0x360 [ 68.072711][ T5060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.072785][ T5060] RIP: 0033:0x7f476eace0d9 [ 68.072847][ T5060] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 68.072910][ T5060] RSP: 002b:00007f476d527028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.072976][ T5060] RAX: ffffffffffffffda RBX: 00007f476ed55fa0 RCX: 00007f476eace0d9 [ 68.073029][ T5060] RDX: 0000000000000004 RSI: 0000200000000140 RDI: 0000000000000005 [ 68.073123][ T5060] RBP: 00007f476eb65024 R08: 0000000000000000 R09: 0000000000000000 [ 68.073166][ T5060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 68.073208][ T5060] R13: 00007f476ed56038 R14: 00007f476ed55fa0 R15: 00007fff739cb388 [ 68.073273][ T5060] [ 68.315303][ T5060] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.315609][ T5060] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.587162][ T5060] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.604407][ T5060] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.648321][ T29] kauditd_printk_skb: 30 callbacks suppressed [ 68.648364][ T29] audit: type=1400 audit(1787883214.452:694): avc: denied { create } for pid=5071 comm="syz.0.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 68.686750][ T29] audit: type=1400 audit(1787883214.482:695): avc: denied { ioctl } for pid=5071 comm="syz.0.490" path="socket:[10544]" dev="sockfs" ino=10544 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 68.711991][ T29] audit: type=1400 audit(1787883214.512:696): avc: denied { write } for pid=5071 comm="syz.0.490" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 68.847427][ T5060] syz.5.476 (5060) used greatest stack depth: 9240 bytes left [ 68.898202][ T51] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.898393][ T51] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.898565][ T51] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.898636][ T51] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.926041][ T29] audit: type=1400 audit(1787883214.722:697): avc: denied { bind } for pid=5078 comm="syz.6.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.946158][ T5085] loop0: detected capacity change from 0 to 512 [ 68.955219][ T5085] EXT4-fs: Ignoring removed nomblk_io_submit option [ 68.969777][ T29] audit: type=1400 audit(1787883214.772:698): avc: denied { setopt } for pid=5078 comm="syz.6.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 68.996135][ T5085] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 68.996169][ T5085] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 68.996256][ T5085] EXT4-fs (loop0): orphan cleanup on readonly fs [ 69.019411][ T5085] EXT4-fs error (device loop0): ext4_validate_block_bitmap:436: comm syz.0.493: bg 0: block 15: invalid block bitmap [ 69.019451][ T5085] loop0: lost filesystem error report for type 5 error -117 [ 69.031948][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 69.031977][ C1] EXT4-fs (loop0): initial error at time 1787883214: ext4_validate_block_bitmap:436 [ 69.031999][ C1] EXT4-fs (loop0): last error at time 1787883214: ext4_validate_block_bitmap:436 [ 69.064712][ T5085] EXT4-fs (loop0): Remounting filesystem read-only [ 69.071523][ T5085] EXT4-fs (loop0): 1 truncate cleaned up [ 69.072076][ T5085] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 69.396574][ T29] audit: type=1400 audit(1787883215.192:699): avc: denied { create } for pid=5108 comm="syz.1.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 69.417246][ T29] audit: type=1400 audit(1787883215.202:700): avc: denied { setopt } for pid=5108 comm="syz.1.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 69.534355][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 69.778585][ T5128] netlink: 20 bytes leftover after parsing attributes in process `syz.6.500'. [ 69.877355][ T5141] netlink: 20 bytes leftover after parsing attributes in process `syz.3.506'. [ 70.017134][ T5158] VFS: Mount too revealing [ 70.072450][ T5148] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.093190][ T5166] loop0: detected capacity change from 0 to 128 [ 70.103329][ T5166] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 70.115760][ T5166] ext4 filesystem being mounted at /114/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 70.174358][ T3307] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 70.214038][ T5148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.224752][ T5148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.240097][ T5171] loop5: detected capacity change from 0 to 1764 [ 70.310430][ T5173] loop0: detected capacity change from 0 to 512 [ 70.339461][ T51] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.339588][ T51] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.339648][ T51] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.339685][ T51] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.379770][ T5173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 70.382320][ T5173] ext4 filesystem being mounted at /115/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 70.547791][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 70.667172][ T5190] bond1: (slave vlan2): making interface the new active one [ 70.675496][ T5190] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 70.745082][ T5198] xt_hashlimit: size too large, truncated to 1048576 [ 70.827044][ T5200] xt_hashlimit: size too large, truncated to 1048576 [ 71.064430][ T29] audit: type=1400 audit(1787883472.863:701): avc: denied { create } for pid=5215 comm="syz.6.543" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 71.094377][ T5217] bridge0: port 3(syz_tun) entered blocking state [ 71.094425][ T5217] bridge0: port 3(syz_tun) entered disabled state [ 71.094533][ T5217] syz_tun: entered allmulticast mode [ 71.095292][ T5217] syz_tun: entered promiscuous mode [ 71.095587][ T5217] bridge0: port 3(syz_tun) entered blocking state [ 71.095660][ T5217] bridge0: port 3(syz_tun) entered forwarding state [ 71.329181][ T29] audit: type=1400 audit(1787883473.133:702): avc: denied { setopt } for pid=5219 comm="syz.0.545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 71.652796][ T5242] loop6: detected capacity change from 0 to 128 [ 71.900827][ T5250] loop5: detected capacity change from 0 to 8192 [ 71.914684][ T5250] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 72.057971][ T5256] __nla_validate_parse: 1 callbacks suppressed [ 72.058016][ T5256] netlink: 68 bytes leftover after parsing attributes in process `syz.5.550'. [ 72.061943][ T5256] netlink: 32 bytes leftover after parsing attributes in process `syz.5.550'. [ 72.261859][ T5262] loop5: detected capacity change from 0 to 512 [ 72.313566][ T5262] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 72.315403][ T5262] ext4 filesystem being mounted at /64/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 72.523699][ T3831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 72.563671][ T5279] loop5: detected capacity change from 0 to 512 [ 72.583518][ T5279] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 72.602668][ T5279] EXT4-fs error (device loop5): ext4_orphan_get:1429: comm syz.5.557: bad orphan inode 13 [ 72.602761][ T5279] loop5: lost filesystem error report for type 5 error -117 [ 72.612794][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 72.612820][ C1] EXT4-fs (loop5): last error at time 1787883474: ext4_orphan_get:1429 [ 72.635834][ T5279] ext4_test_bit(bit=12, block=18) = 1 [ 72.635854][ T5279] is_bad_inode(inode)=0 [ 72.635892][ T5279] NEXT_ORPHAN(inode)=0 [ 72.635904][ T5279] max_ino=32 [ 72.635915][ T5279] i_nlink=1 [ 72.636327][ T5279] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 72.674716][ T5279] EXT4-fs warning (device loop5): ext4_update_dynamic_rev:1148: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 72.689496][ T5279] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm syz.5.557: bg 0: block 248: padding at end of block bitmap is not set [ 72.704381][ T5279] Quota error (device loop5): write_blk: dquota write failed [ 72.704423][ T5279] EXT4-fs error (device loop5): ext4_acquire_dquot:7069: comm syz.5.557: Failed to acquire dquot type 1 [ 72.972315][ T5289] syzkaller0: entered promiscuous mode [ 72.972377][ T5289] syzkaller0: entered allmulticast mode [ 73.174199][ T5295] netlink: 68 bytes leftover after parsing attributes in process `syz.6.563'. [ 73.175049][ T5295] netlink: 32 bytes leftover after parsing attributes in process `syz.6.563'. [ 73.239635][ T5301] netlink: 12 bytes leftover after parsing attributes in process `syz.6.566'. [ 73.253527][ T5301] vlan3: entered promiscuous mode [ 73.269206][ T3831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 73.280382][ T365] EXT4-fs error (device loop5): ext4_release_dquot:7105: comm kworker/u8:6: Failed to release dquot type 1 [ 73.280495][ T365] loop5: lost filesystem error report for type 5 error -117 [ 73.304066][ T5297] loop0: detected capacity change from 0 to 8192 [ 73.321064][ T5297] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 73.383555][ T5304] loop1: detected capacity change from 0 to 512 [ 73.429509][ T5304] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 73.429870][ T5304] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 73.529114][ T5314] syzkaller0: entered promiscuous mode [ 73.529161][ T5314] syzkaller0: entered allmulticast mode [ 73.826323][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.991689][ T5339] netlink: 'syz.3.581': attribute type 4 has an invalid length. [ 74.216009][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 74.216041][ T29] audit: type=1400 audit(1787883476.013:706): avc: denied { execute } for pid=5342 comm="syz.1.583" path="/memory.events.local" dev="ramfs" ino=11613 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=file permissive=1 [ 74.706234][ T29] audit: type=1400 audit(1787883476.503:707): avc: denied { write } for pid=5351 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 74.746634][ T29] audit: type=1400 audit(1787883476.543:708): avc: denied { write } for pid=5362 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.041389][ T5373] loop6: detected capacity change from 0 to 256 [ 75.050098][ T5370] syzkaller1: entered promiscuous mode [ 75.050145][ T5370] syzkaller1: entered allmulticast mode [ 75.140947][ T5372] set_capacity_and_notify: 1 callbacks suppressed [ 75.141039][ T5372] loop5: detected capacity change from 0 to 512 [ 75.250263][ T5372] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.256345][ T5372] ext4 filesystem being mounted at /70/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 75.323224][ T5381] netlink: 68 bytes leftover after parsing attributes in process `syz.0.589'. [ 75.328293][ T5381] netlink: 32 bytes leftover after parsing attributes in process `syz.0.589'. [ 75.366599][ T29] audit: type=1400 audit(1787883477.163:709): avc: denied { write } for pid=5376 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.429203][ T29] audit: type=1400 audit(1787883477.233:710): avc: denied { write } for pid=5391 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 75.502487][ T5393] loop6: detected capacity change from 0 to 512 [ 75.502856][ T5393] EXT4-fs: Ignoring removed nomblk_io_submit option [ 75.523666][ T5393] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 75.523736][ T5393] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002] [ 75.523843][ T5393] EXT4-fs (loop6): orphan cleanup on readonly fs [ 75.531109][ T5393] EXT4-fs error (device loop6): ext4_validate_block_bitmap:436: comm syz.6.590: bg 0: block 15: invalid block bitmap [ 75.531185][ T5393] loop6: lost filesystem error report for type 5 error -117 [ 75.531424][ T5393] EXT4-fs (loop6): Remounting filesystem read-only [ 75.533229][ T5393] EXT4-fs (loop6): 1 truncate cleaned up [ 75.534181][ T5393] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 75.651726][ T5397] loop1: detected capacity change from 0 to 1024 [ 75.652173][ T5397] EXT4-fs: Ignoring removed bh option [ 75.652296][ T5397] EXT4-fs: Ignoring removed bh option [ 75.657687][ T5397] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 75.682175][ T5397] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.710809][ T29] audit: type=1400 audit(1787883477.513:711): avc: denied { write } for pid=5395 comm="syz.1.592" name="file0" dev="loop1" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.710851][ T29] audit: type=1400 audit(1787883477.513:712): avc: denied { unlink } for pid=5395 comm="syz.1.592" name="file0" dev="loop1" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 75.713095][ T5397] EXT4-fs error (device loop1): empty_inline_dir:1796: inode #12: block 7: comm syz.1.592: bad entry in directory: rec_len is too small for name_len - offset=20, inode=14, rec_len=40, size=60 fake=0 [ 75.714156][ T29] audit: type=1400 audit(1787883477.513:713): avc: denied { write } for pid=5395 comm="syz.1.592" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.715711][ T5397] EXT4-fs (loop1): Remounting filesystem read-only [ 75.715778][ T5397] EXT4-fs warning (device loop1): empty_inline_dir:1803: bad inline directory (dir #12) - inode 14, rec_len 40, name_len 255inline size 60 [ 75.751862][ T3831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.878208][ T5418] loop0: detected capacity change from 0 to 2048 [ 75.901739][ T5418] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.901820][ T5418] ext4 filesystem being mounted at /126/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.931263][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.957991][ T29] audit: type=1400 audit(1787883477.753:714): avc: denied { write } for pid=5402 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.030669][ T4702] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.051598][ T29] audit: type=1400 audit(1787883477.853:715): avc: denied { write } for pid=5427 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 76.494055][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 76.551688][ T5473] capability: warning: `syz.1.608' uses 32-bit capabilities (legacy support in use) [ 76.599967][ T5480] loop1: detected capacity change from 0 to 2048 [ 76.614418][ T5480] ext4: Unknown parameter 'smackfsdef' [ 76.835559][ T5492] loop1: detected capacity change from 0 to 8192 [ 77.340916][ T5507] Illegal XDP return value 4291350528 on prog (id 116) dev syz_tun, expect packet loss! [ 77.510166][ T5514] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 78.052095][ T5532] netlink: 11575 bytes leftover after parsing attributes in process `syz.3.631'. [ 78.088478][ T5530] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.137330][ T5530] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.219707][ T5530] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.283600][ T5551] netlink: 4 bytes leftover after parsing attributes in process `syz.3.638'. [ 78.284582][ T5530] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.377367][ T38] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.383640][ T31] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.407936][ T31] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.408038][ T31] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.679327][ T5563] netlink: 12 bytes leftover after parsing attributes in process `syz.3.643'. [ 78.679364][ T5563] netlink: 87 bytes leftover after parsing attributes in process `syz.3.643'. [ 78.992578][ T5575] loop0: detected capacity change from 0 to 128 [ 79.031301][ T5583] netlink: 'syz.3.650': attribute type 1 has an invalid length. [ 79.034255][ T5575] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 79.035351][ T5575] ext4 filesystem being mounted at /134/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 79.080864][ T5583] 8021q: adding VLAN 0 to HW filter on device bond2 [ 79.113125][ T5583] bond2: (slave geneve2): making interface the new active one [ 79.122676][ T5583] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 79.133335][ T164] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.133501][ T164] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.133545][ T164] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.133651][ T164] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.986717][ T3307] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 82.087116][ T5614] netlink: 12 bytes leftover after parsing attributes in process `syz.6.657'. [ 82.089409][ T5614] netlink: 87 bytes leftover after parsing attributes in process `syz.6.657'. [ 82.226308][ T5622] bond2: entered allmulticast mode [ 82.263305][ T5625] loop1: detected capacity change from 0 to 512 [ 82.265968][ T5625] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2 [ 82.266539][ T5625] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 1024: comm syz.1.673: invalid block [ 82.266621][ T5625] loop1: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 82.267027][ T5625] EXT4-fs (loop1): Remounting filesystem read-only [ 82.267349][ T5625] EXT4-fs (loop1): 1 truncate cleaned up [ 82.268697][ T5625] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.368315][ T3297] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.415520][ T5640] xt_hashlimit: size too large, truncated to 1048576 [ 82.444776][ T5636] loop5: detected capacity change from 0 to 512 [ 82.481202][ T5636] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.481368][ T5636] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 82.485378][ T29] kauditd_printk_skb: 7 callbacks suppressed [ 82.485439][ T29] audit: type=1400 audit(1787883484.283:723): avc: denied { write } for pid=5635 comm="syz.5.666" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 82.575681][ T3831] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.612477][ T5647] tipc: Enabling of bearer rejected, failed to enable media [ 82.689830][ T29] audit: type=1400 audit(1787883484.493:724): avc: denied { cmd } for pid=5649 comm="syz.5.670" path="socket:[11141]" dev="sockfs" ino=11141 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 82.764075][ T5658] netlink: 'syz.5.676': attribute type 1 has an invalid length. [ 82.783193][ T5658] 8021q: adding VLAN 0 to HW filter on device bond3 [ 82.833298][ T5658] bridge2: entered promiscuous mode [ 82.840658][ T5658] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 82.910304][ T29] audit: type=1400 audit(1787883484.713:725): avc: denied { map } for pid=5651 comm="syz.0.672" path="socket:[11152]" dev="sockfs" ino=11152 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 83.018368][ T5675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.057541][ T29] audit: type=1326 audit(1787883484.853:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5678 comm="syz.5.684" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f476eace0d9 code=0x0 [ 83.082329][ T5675] erspan0: entered promiscuous mode [ 83.082531][ T5675] netlink: 8 bytes leftover after parsing attributes in process `syz.0.683'. [ 83.254015][ T5693] erspan0: left promiscuous mode [ 83.276821][ T5693] bridge0: port 3(syz_tun) entered blocking state [ 83.276914][ T5693] bridge0: port 3(syz_tun) entered forwarding state [ 83.288503][ T5693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.302222][ T5693] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.338011][ T5693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.381433][ T5693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.393517][ T5693] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.393554][ T5693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.418713][ T5693] veth1_vlan: left promiscuous mode [ 83.419401][ T5693] veth0_vlan: left promiscuous mode [ 83.432821][ T5693] veth0_vlan: entered promiscuous mode [ 83.440314][ T5693] veth1_vlan: entered promiscuous mode [ 83.449325][ T5693] veth1_macvtap: left promiscuous mode [ 83.455959][ T5693] veth0_macvtap: left promiscuous mode [ 83.462630][ T5693] veth0_macvtap: entered promiscuous mode [ 83.477979][ T5693] veth1_macvtap: entered promiscuous mode [ 83.484216][ T5693] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.488207][ T5693] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.491755][ T5693] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.495145][ T5693] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.525543][ T164] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.525597][ T164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.547146][ T164] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.547199][ T164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.848371][ T5707] xt_hashlimit: size too large, truncated to 1048576 [ 84.472556][ T29] audit: type=1400 audit(1787883486.273:727): avc: denied { read write } for pid=5717 comm="syz.5.694" name="ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.472614][ T29] audit: type=1400 audit(1787883486.273:728): avc: denied { open } for pid=5717 comm="syz.5.694" path="/dev/ptp0" dev="devtmpfs" ino=246 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 84.782613][ T5728] netlink: 'syz.6.700': attribute type 4 has an invalid length. [ 84.782643][ T5728] netlink: 128124 bytes leftover after parsing attributes in process `syz.6.700'. [ 85.188951][ T5766] loop6: detected capacity change from 0 to 2048 [ 85.198758][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.198802][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.198922][ T5740] bridge_slave_0: entered allmulticast mode [ 85.200938][ T5740] bridge_slave_0: entered promiscuous mode [ 85.203514][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.203610][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.203845][ T5740] bridge_slave_1: entered allmulticast mode [ 85.205048][ T5740] bridge_slave_1: entered promiscuous mode [ 85.229749][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.232554][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.255474][ T5740] team0: Port device team_slave_0 added [ 85.257739][ T5740] team0: Port device team_slave_1 added [ 85.281918][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.282077][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.282220][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.283580][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.283595][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 85.283628][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.322297][ T5740] hsr_slave_0: entered promiscuous mode [ 85.323246][ T5740] hsr_slave_1: entered promiscuous mode [ 85.324048][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 85.324090][ T5740] Cannot create hsr debugfs directory [ 85.385461][ T5766] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.408211][ T29] audit: type=1400 audit(1787883487.203:729): avc: denied { write } for pid=5765 comm="syz.6.709" name="/" dev="loop6" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.408319][ T29] audit: type=1400 audit(1787883487.203:730): avc: denied { read write } for pid=5765 comm="syz.6.709" name="file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 85.410696][ T29] audit: type=1400 audit(1787883487.203:731): avc: denied { open } for pid=5765 comm="syz.6.709" path="/72/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 85.468611][ T29] audit: type=1400 audit(1787883487.263:732): avc: denied { map } for pid=5765 comm="syz.6.709" path="/72/file1/file1" dev="loop6" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 85.508419][ T5765] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 85.508542][ T5765] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 85.508629][ T5765] EXT4-fs (loop6): This should not happen!! Data will be lost [ 85.508629][ T5765] [ 85.508682][ T5765] EXT4-fs (loop6): Total free blocks count 0 [ 85.508700][ T5765] EXT4-fs (loop6): Free/Dirty block details [ 85.508721][ T5765] EXT4-fs (loop6): free_blocks=4096 [ 85.508738][ T5765] EXT4-fs (loop6): dirty_blocks=64 [ 85.508750][ T5765] EXT4-fs (loop6): Block reservation details [ 85.508762][ T5765] EXT4-fs (loop6): i_reserved_data_blocks=4 [ 85.516131][ T5766] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 2 with error 28 [ 85.700772][ T5740] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 85.710069][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.719416][ T5740] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 85.730706][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.741372][ T5740] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 85.752618][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.761907][ T5740] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 85.773828][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.822875][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.835722][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.848315][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.848364][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.864470][ T369] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.864506][ T369] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.119629][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.264693][ T5740] veth0_vlan: entered promiscuous mode [ 86.270835][ T5740] veth1_vlan: entered promiscuous mode [ 86.286800][ T5740] veth0_macvtap: entered promiscuous mode [ 86.292060][ T5740] veth1_macvtap: entered promiscuous mode [ 86.303068][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.313747][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.071495][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 89.071521][ T29] audit: type=1400 audit(1787883490.873:736): avc: denied { mount } for pid=5740 comm="syz-executor" name="/" dev="gadgetfs" ino=5159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 89.098208][ T31] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.100905][ T70] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.102275][ T12] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.102644][ T12] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.184743][ T5826] loop1: detected capacity change from 0 to 128 [ 89.345272][ T5826] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 89.349588][ T5826] ext4 filesystem being mounted at /112/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 89.400279][ T12] IPVS: starting estimator thread 0... [ 89.418572][ T29] audit: type=1400 audit(1787883491.223:737): avc: denied { watch watch_reads } for pid=5846 comm="syz.6.724" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 89.502768][ T3297] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 89.512241][ T5845] IPVS: using max 2208 ests per chain, 110400 per kthread [ 89.794189][ T5849] loop0: detected capacity change from 0 to 1024 [ 89.821266][ T29] audit: type=1326 audit(1787883491.623:738): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5852 comm="syz.6.728" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f028c6ae0d9 code=0x0 [ 89.862612][ T5849] EXT4-fs: Ignoring removed bh option [ 89.881756][ T5849] EXT4-fs (loop0): stripe (4) is not aligned with cluster size (16), stripe is disabled [ 89.934743][ T5849] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 89.971264][ T5867] SELinux: Context system_u:object_r:hwdata_t:s0 is not valid (left unmapped). [ 89.971620][ T29] audit: type=1400 audit(1787883491.773:739): avc: denied { relabelto } for pid=5865 comm="syz.6.733" name="79" dev="tmpfs" ino=424 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon="system_u:object_r:hwdata_t:s0" [ 89.971669][ T29] audit: type=1400 audit(1787883491.773:740): avc: denied { associate } for pid=5865 comm="syz.6.733" name="79" dev="tmpfs" ino=424 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:hwdata_t:s0" [ 90.007793][ T5867] loop6: detected capacity change from 0 to 128 [ 90.031897][ T5867] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.033481][ T5867] ext4 filesystem being mounted at /79/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.039048][ T29] audit: type=1326 audit(1787883491.833:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.1.734" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140544e0d9 code=0x7ffc0000 [ 90.039140][ T29] audit: type=1326 audit(1787883491.833:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.1.734" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140544e0d9 code=0x7ffc0000 [ 90.041878][ T29] audit: type=1326 audit(1787883491.843:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.1.734" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140544e0d9 code=0x7ffc0000 [ 90.041961][ T29] audit: type=1326 audit(1787883491.843:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.1.734" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f140544e0d9 code=0x7ffc0000 [ 90.046020][ T29] audit: type=1326 audit(1787883491.843:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5866 comm="syz.1.734" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f140544e0d9 code=0x7ffc0000 [ 90.145286][ T5872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.158258][ T5872] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.249333][ T3307] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.291438][ T4702] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.334542][ T5876] loop1: detected capacity change from 0 to 1024 [ 90.367280][ T5876] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 90.379200][ T5876] EXT4-fs (loop1): can't mount with journal_checksum, fs mounted w/o journal [ 90.394558][ T5883] loop6: detected capacity change from 0 to 128 [ 90.417444][ T5883] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 90.424538][ T5883] ext4 filesystem being mounted at /81/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 90.469798][ T5883] EXT4-fs error (device loop6): dx_make_map:1296: inode #2: block 33: comm syz.6.739: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 90.470001][ T5883] EXT4-fs error (device loop6) in do_split:2029: Corrupt filesystem [ 90.491491][ T5883] EXT4-fs error (device loop6): dx_make_map:1296: inode #2: block 33: comm syz.6.739: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 90.492087][ T5883] EXT4-fs error (device loop6) in do_split:2029: Corrupt filesystem [ 90.549346][ T4702] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 90.684630][ T5891] syzkaller0: entered promiscuous mode [ 90.684677][ T5891] syzkaller0: entered allmulticast mode [ 90.926562][ T5915] syz_tun: entered allmulticast mode [ 90.932877][ T5914] syz_tun: left allmulticast mode [ 91.003664][ T5925] veth1_macvtap: left promiscuous mode [ 91.003697][ T5925] macsec0: entered promiscuous mode [ 91.029611][ T5925] veth1_macvtap: entered promiscuous mode [ 91.029803][ T5925] macsec0: entered allmulticast mode [ 91.029822][ T5925] veth1_macvtap: entered allmulticast mode [ 91.124706][ T5933] bridge0: port 3(syz_tun) entered blocking state [ 91.124755][ T5933] bridge0: port 3(syz_tun) entered disabled state [ 91.124868][ T5933] syz_tun: entered allmulticast mode [ 91.145023][ T5933] syz_tun: entered promiscuous mode [ 91.145245][ T5933] bridge0: port 3(syz_tun) entered blocking state [ 91.145294][ T5933] bridge0: port 3(syz_tun) entered listening state [ 92.717782][ T5975] PM: suspend entry (deep) [ 92.785050][ T5971] loop6: detected capacity change from 0 to 128 [ 92.855767][ T5971] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 92.871424][ T5971] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 92.983361][ T369] Filesystems sync: 0.262 seconds [ 93.112416][ T5975] Freezing user space processes [ 93.145665][ T5975] Freezing user space processes completed (elapsed 0.033 seconds) [ 93.145711][ T5975] OOM killer disabled. [ 93.145743][ T5975] Freezing remaining freezable tasks [ 93.164391][ T5975] Freezing remaining freezable tasks completed (elapsed 0.018 seconds) [ 93.164624][ T5975] printk: Suspending console(s) (use no_console_suspend to debug) [ 93.229890][ T5975] vhci_hcd vhci_hcd.15: suspend vhci_hcd [ 93.230138][ T5975] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 93.230269][ T5975] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 93.230495][ T5975] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 93.230697][ T5975] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 93.230990][ T5975] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 93.231140][ T5975] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 93.231332][ T5975] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 93.231452][ T5975] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 93.231744][ T5975] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 93.231825][ T5975] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 93.231971][ T5975] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 93.232157][ T5975] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 93.232223][ T5975] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 93.232354][ T5975] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 93.232497][ T5975] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 93.278965][ T5996] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 93.947456][ T5975] ACPI: PM: Preparing to enter system sleep state S3 [ 93.948344][ T5975] ACPI: PM: Saving platform NVS memory [ 93.949023][ T5975] Disabling non-boot CPUs ... [ 93.956775][ T5975] smpboot: CPU 1 is now offline [ 93.962696][ T5975] ACPI: PM: Low-level resume complete [ 93.962761][ T5975] ACPI: PM: Restoring platform NVS memory [ 93.980317][ T5975] Enabling non-boot CPUs ... [ 93.980762][ T5975] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 93.985560][ T5975] CPU1 is up [ 93.985928][ T5975] ACPI: PM: Waking up from system sleep state S3 [ 93.990403][ T5992] ================================================================== [ 93.990502][ T5992] BUG: KCSAN: data-race in acpi_ut_status_exit / acpi_ut_trace_ptr [ 93.990534][ T5992] [ 93.990539][ T5992] read to 0xffffffff8961d8c8 of 4 bytes by task 5996 on cpu 1: [ 93.990557][ T5992] acpi_ut_status_exit+0xd8/0x120 [ 93.990586][ T5992] acpi_ns_search_one_scope+0x3c2/0x3f0 [ 93.990667][ T5992] acpi_ns_search_and_enter+0xc3/0x860 [ 93.990779][ T5992] acpi_ns_lookup+0xbd8/0x1070 [ 93.990873][ T5992] acpi_ns_get_node_unlocked+0x143/0x2d0 [ 93.991007][ T5992] acpi_ns_get_node+0x76/0xc0 [ 93.991053][ T5992] acpi_get_handle+0xfd/0x180 [ 93.991078][ T5992] acpi_has_method+0x46/0x80 [ 93.991117][ T5992] acpi_pci_set_power_state+0x5d/0x190 [ 93.991162][ T5992] pci_power_up+0x40/0x3b0 [ 93.991183][ T5992] pci_pm_power_up_and_verify_state+0x29/0x130 [ 93.991215][ T5992] pci_pm_resume_noirq+0xcb/0x320 [ 93.991253][ T5992] dpm_run_callback+0x53/0x2f0 [ 93.991295][ T5992] device_resume_noirq+0x851/0x880 [ 93.991333][ T5992] async_resume_noirq+0x2c/0x40 [ 93.991363][ T5992] async_run_entry_fn+0x52/0x180 [ 93.991400][ T5992] process_scheduled_works+0x56a/0xa50 [ 93.991439][ T5992] worker_thread+0x569/0x750 [ 93.991479][ T5992] kthread+0x223/0x270 [ 93.991500][ T5992] ret_from_fork+0x146/0x330 [ 93.991528][ T5992] ret_from_fork_asm+0x1a/0x30 [ 93.991559][ T5992] [ 93.991567][ T5992] read-write to 0xffffffff8961d8c8 of 4 bytes by task 5992 on cpu 0: [ 93.991589][ T5992] acpi_ut_trace_ptr+0x49/0x180 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 93.991620][ T5992] acpi_ns_get_node+0x3c/0xc0 [ 93.991658][ T5992] acpi_get_handle+0xfd/0x180 [ 93.991681][ T5992] acpi_has_method+0x46/0x80 [ 93.991719][ T5992] acpi_pci_set_power_state+0x5d/0x190 [ 93.991762][ T5992] pci_power_up+0x40/0x3b0 [ 93.991789][ T5992] pci_pm_power_up_and_verify_state+0x29/0x130 [ 93.991829][ T5992] pci_pm_resume_noirq+0xcb/0x320 [ 93.991867][ T5992] dpm_run_callback+0x53/0x2f0 [ 93.991903][ T5992] device_resume_noirq+0x851/0x880 [ 93.991944][ T5992] async_resume_noirq+0x2c/0x40 [ 93.991985][ T5992] async_run_entry_fn+0x52/0x180 [ 93.992029][ T5992] process_scheduled_works+0x56a/0xa50 [ 93.992068][ T5992] worker_thread+0x569/0x750 [ 93.992101][ T5992] kthread+0x223/0x270 [ 93.992127][ T5992] ret_from_fork+0x146/0x330 [ 93.992170][ T5992] ret_from_fork_asm+0x1a/0x30 [ 93.992215][ T5992] [ 93.992220][ T5992] value changed: 0x00000005 -> 0x00000000 [ 93.992234][ T5992] [ 93.992239][ T5992] Reported by Kernel Concurrency Sanitizer on: [ 93.992253][ T5992] CPU: 0 UID: 0 PID: 5992 Comm: kworker/u8:13 Not tainted syzkaller #0 PREEMPT(lazy) [ 93.992281][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 93.992295][ T5992] Workqueue: async async_run_entry_fn [ 93.992326][ T5992] ================================================================== [ 94.043612][ T5330] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 94.280448][ T5975] OOM killer enabled. [ 94.280492][ T5975] Restarting tasks: Starting [ 94.317458][ T5975] Restarting tasks: Done [ 94.317788][ T5975] random: crng reseeded on system resumption [ 94.322284][ T5975] PM: suspend exit [ 94.483540][ T3307] bridge0: port 3(syz_tun) entered disabled state [ 94.493278][ T3307] syz_tun (unregistering): left allmulticast mode [ 94.493422][ T3307] syz_tun (unregistering): left promiscuous mode [ 94.493457][ T3307] bridge0: port 3(syz_tun) entered disabled state [ 94.508160][ T5740] bridge0: port 3(syz_tun) entered disabled state [ 94.510555][ T5740] syz_tun (unregistering): left allmulticast mode [ 94.510602][ T5740] syz_tun (unregistering): left promiscuous mode [ 94.510690][ T5740] bridge0: port 3(syz_tun) entered disabled state [ 94.539463][ T5462] bridge0: port 3(syz_tun) entered disabled state [ 94.549025][ T5462] syz_tun (unregistering): left allmulticast mode [ 94.549069][ T5462] bridge0: port 3(syz_tun) entered disabled state [ 94.611813][ T6124] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.704677][ T6124] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.718095][ T5462] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 94.741086][ T6124] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.762035][ T6124] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.827738][ T6124] bridge_slave_1: left allmulticast mode [ 94.827775][ T6124] bridge_slave_1: left promiscuous mode [ 94.828161][ T6124] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.830550][ T6124] bridge_slave_0: left allmulticast mode [ 94.830620][ T6124] bridge_slave_0: left promiscuous mode [ 94.831082][ T6124] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.854384][ T6124] bond2 (unregistering): (slave geneve2): Releasing active interface [ 94.865866][ T6124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.869448][ T6124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.871839][ T6124] bond0 (unregistering): Released all slaves [ 94.875158][ T6124] bond1 (unregistering): (slave ): Releasing active interface [ 94.876860][ T6124] bond1 (unregistering): Released all slaves [ 94.883336][ T6124] bond2 (unregistering): Released all slaves [ 94.932627][ T6124] hsr_slave_0: left promiscuous mode [ 94.934261][ T6124] hsr_slave_1: left promiscuous mode [ 94.934909][ T6124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.935615][ T6124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.982270][ T6124] team0 (unregistering): Port device team_slave_1 removed [ 94.986092][ T6124] team0 (unregistering): Port device team_slave_0 removed [ 95.007189][ T29] kauditd_printk_skb: 43 callbacks suppressed [ 95.007222][ T29] audit: type=1400 audit(1787883496.797:789): avc: denied { write } for pid=6137 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.030709][ T29] audit: type=1400 audit(1787883496.827:790): avc: denied { write } for pid=6148 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.047666][ T3023] 8021q: adding VLAN 0 to HW filter on device eth9 [ 95.120649][ T29] audit: type=1400 audit(1787883496.917:791): avc: denied { write } for pid=6151 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.140703][ T29] audit: type=1400 audit(1787883496.937:792): avc: denied { write } for pid=6162 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.157718][ T3023] 8021q: adding VLAN 0 to HW filter on device eth10 [ 95.200722][ T6124] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.232964][ T29] audit: type=1400 audit(1787883497.027:793): avc: denied { write } for pid=6165 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.242002][ T6124] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.256200][ T29] audit: type=1400 audit(1787883497.047:794): avc: denied { write } for pid=6176 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.271457][ T3023] 8021q: adding VLAN 0 to HW filter on device eth11 [ 95.279908][ T6124] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.321022][ T6124] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.348862][ T29] audit: type=1400 audit(1787883497.147:795): avc: denied { write } for pid=6179 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.371302][ T29] audit: type=1400 audit(1787883497.167:796): avc: denied { write } for pid=6190 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.394145][ T3023] 8021q: adding VLAN 0 to HW filter on device eth12 [ 95.403617][ T6124] bridge_slave_1: left allmulticast mode [ 95.403664][ T6124] bridge_slave_1: left promiscuous mode [ 95.404109][ T6124] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.408297][ T6124] bridge_slave_0: left allmulticast mode [ 95.408342][ T6124] bridge_slave_0: left promiscuous mode [ 95.408691][ T6124] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.461061][ T6124] bond1 (unregistering): (slave vlan2): Releasing active interface [ 95.464666][ T6124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.467493][ T6124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.470909][ T6124] bond0 (unregistering): Released all slaves [ 95.473214][ T6124] bond1 (unregistering): Released all slaves [ 95.522297][ T6124] hsr_slave_0: left promiscuous mode [ 95.523795][ T6124] hsr_slave_1: left promiscuous mode [ 95.524313][ T6124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.524335][ T6124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.528857][ T6124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.528875][ T6124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 95.534572][ T6124] veth1_macvtap: left promiscuous mode [ 95.534674][ T6124] veth0_macvtap: left promiscuous mode [ 95.534731][ T6124] veth1_vlan: left promiscuous mode [ 95.534773][ T6124] veth0_vlan: left promiscuous mode [ 95.567947][ T29] audit: type=1400 audit(1787883497.357:797): avc: denied { write } for pid=6194 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.593011][ T29] audit: type=1400 audit(1787883497.387:798): avc: denied { write } for pid=6205 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 95.618755][ T6124] team0 (unregistering): Port device team_slave_1 removed [ 95.622124][ T6124] team0 (unregistering): Port device team_slave_0 removed [ 95.648794][ T3023] 8021q: adding VLAN 0 to HW filter on device eth13 [ 95.755798][ T3023] 8021q: adding VLAN 0 to HW filter on device eth14 [ 95.877095][ T3023] 8021q: adding VLAN 0 to HW filter on device eth15 [ 95.979960][ T3023] 8021q: adding VLAN 0 to HW filter on device eth16