last executing test programs: 36.406124838s ago: executing program 4 (id=128): socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) fcntl$setstatus(r0, 0x4, 0x40800) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) ftruncate(r1, 0x2000009) sendfile(r0, r1, 0x0, 0x7ffff004) 36.328351451s ago: executing program 4 (id=129): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0xfc, 0xe4}]}, 0x10) sendto$inet(r1, &(0x7f0000000680)="136092b9c45c4d81a153ed73c6dfa1c26dd5d5ffe7da5e8eee62f3f63aa34d222440ad92edd6bffdfa5467a1d8aea7571308dc0d3dbf396e6b68733aae734f8d468229c67c43c4f4faa607ce369eeccf7023b172eda7b838c072c89b26e67c468353c5a3b6d956e217f2f54222e235bdd6624c56c8c7eef8dd7619712cea86819c2df63aa7cd3a84f3b3317eb6a3fd959f09fbb22593294c336ea355a37f66b564c8d7d32d7063fd55abda6661ee378b42c11d81c548aef3d82f642def57865dcd0d339b20", 0xc5, 0x40041, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) 36.279639131s ago: executing program 4 (id=130): syz_emit_ethernet(0x82, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffffffffffffff86dd6060626000102c00fe8000000000000000000000000000bbfe8000000000000000000000000000aa88000001"], 0x0) 36.231651471s ago: executing program 4 (id=131): mkdir(&(0x7f0000001a80)='./file0\x00', 0x1cb) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x989046, 0x0) mount$bpf(0x0, &(0x7f00000000c0)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(&(0x7f0000000140)='./file0/../file0\x00', 0x190) mount$bpf(0x200000000000, &(0x7f0000000100)='./file0/../file0\x00', 0x0, 0x6000, 0x0) 36.183191242s ago: executing program 4 (id=132): socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r0 = perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x10000000, '\x00', 0x0, 0x0, 0x4}, 0x50) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x29, 0x24, &(0x7f00000000c0), 0x4) r2 = perf_event_open$cgroup(&(0x7f00000003c0)={0x2, 0x80, 0x16, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, @perf_config_ext={0x2, 0x1}, 0x1090da, 0x0, 0x0, 0x0, 0x0, 0x4, 0x749}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="01"], 0x50) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r0, 0x2405, r2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000480)={0xffffffffffffffff, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x8, 0x0, 0x0}}, 0x10) r3 = socket(0x10, 0x803, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$setregset(0x4205, r4, 0x1, &(0x7f0000000100)={&(0x7f0000000040)="dcef58b7f29c1f7c93d183044aedba283413e674c7719c33a4b17f028f68610a6c55bb2bf8282853f3e16f8394a8676ff55a3507e2ad50248c6130863b0f7433c7fbc9b978a39eae88bffd05d139cedbee444f7c98e1f92b0f64462b4b470bedced2125e0b1f38fbaa348c6d75aa1a4011e9cdae15ecb9309b0101edbf6dd6d111d6132f1821a4e4cbec8438c571a70e7ca7b0451a6cc55c", 0x98}) ptrace$setregset(0x4205, r4, 0x1, &(0x7f00000001c0)={0x0}) r5 = socket$unix(0x1, 0x1, 0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000000)={0xc000000000000000}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000aac000000060a01040000fc00000000000a0000010900010073797a310000000080000480500001800b0001007461726765740000400002802c0003007339f2f10455afb9fdd672bad09dfb78c7698474e891a0c7000000000000000000000000000000000800024000000000080001004c4544002c0001800b0001006e756d67656e00001c0002800800014000000016080003400000000108000240000000090900020073797a32"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0800000004000000040000000100000a00000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000fcffffff00"/28], 0x48) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005900)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd29, 0x35dfdbfb, {0x0, 0x0, 0x0, r7, {0xf, 0x5}, {}, {0x7, 0xe}}, [@filter_kind_options=@f_flow={{0x9}, {0xc, 0x2, [@TCA_FLOW_PERTURB={0x8, 0xc, 0x80}]}}]}, 0x3c}}, 0x24040084) r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)=ANY=[], 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r8, &(0x7f0000000180), &(0x7f0000000540)=""/119}, 0x20) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x28) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r9, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r11 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000380)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x18, r9, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r10}, 0x94) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000780)=@generic={0x0, r11}, 0x18) 35.922281371s ago: executing program 4 (id=133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 35.921991531s ago: executing program 32 (id=133): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000600), 0x56) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000b0}, 0x4890) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1}, 0x0) 5.32225535s ago: executing program 2 (id=715): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x56530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xffffffffffffff7f}, 0x100902, 0x4, 0x0, 0x5, 0x8, 0x8, 0x4, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = syz_open_pts(0xffffffffffffffff, 0xc0040) ioctl$KDGKBENT(r0, 0x4b46, &(0x7f0000000680)={0x5, 0x1, 0x800}) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x2000b}, 0x10e848, 0x1224, 0x9, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400b59527bd7000ffdbdf250a0800ff", @ANYRES32=r2, @ANYBLOB="140002000000000000000000000000000000000114000100080000000000000000000000080009000200000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) r3 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000005c0)={0x200, 0x33, 0x32}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./tracing/events/sched/filter\x00', 0x200, 0x8e) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x262, &(0x7f0000000340)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e500030000000000e500000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="00693cda000028eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 5.202169521s ago: executing program 1 (id=718): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) 5.183914838s ago: executing program 2 (id=719): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x200000000000001, 0x106) socket$key(0xf, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000001"], 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000280), &(0x7f0000000500)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504001100b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 5.114324517s ago: executing program 5 (id=721): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) socket(0x1e, 0x4, 0x0) 5.114090717s ago: executing program 1 (id=722): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x2}}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000000)={'batadv0\x00'}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000600)='}', 0x1}], 0x1}}], 0x2, 0x2400c042) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x48}}, 0x410) sendmsg$can_bcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="0100000012020000ffffffff0000", @ANYRESDEC, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES8], 0x48}, 0x1, 0x0, 0x0, 0x4040812}, 0x1) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x6}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x6}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x998ed4ed88999c63}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24041091}, 0x844) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x4, 0x3}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r7) sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x34, r8, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x74, r8, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x24000800) 5.06053375s ago: executing program 2 (id=723): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2e, 0x1, 0x0, 0x0, 0x0, 0x7, 0x520, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_bp={0x0, 0x2}, 0x10ecc8, 0x1224, 0xffffffff, 0x0, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="140000001000010000000000000000000200000aac000000060a01040000fc00000000000a0000010900010073797a310000000080000480500001800b0001007461726765740000400002802c0003007339f2f10455afb9fdd672bad09dfb78c7698474e891a0c7000000000000000000000000000000000800024000000000080001004c4544002c0001800b0001006e756d67656e00001c0002800800014000000016080003400000000108000240000000090900020073797a32"], 0xd4}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 5.030084223s ago: executing program 2 (id=724): socket(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 5.005939043s ago: executing program 0 (id=725): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x2}}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000000)={'batadv0\x00'}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) sendmmsg$inet(r4, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000080)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000600)='}', 0x1}], 0x1}}], 0x2, 0x2400c042) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x48}}, 0x410) sendmsg$can_bcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="0100000012020000ffffffff0000", @ANYRESDEC, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES8], 0x48}, 0x1, 0x0, 0x0, 0x4040812}, 0x1) r5 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x6}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x6}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x998ed4ed88999c63}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24041091}, 0x844) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x4, 0x3}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r6) sendmsg$SMC_PNETID_ADD(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x34, r7, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x74, r7, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x24000800) 2.113451554s ago: executing program 1 (id=732): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e008000000008", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 2.103814199s ago: executing program 0 (id=733): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(0xffffffffffffffff) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8001, 0x2, 0x0, 0x5, 0x4, 0xdd9, 0x2, 0x8, 0x8000}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x94, 0x2c, 0xd27, 0x170bd2c, 0x2, {0x0, 0x0, 0x0, r4, {0x7, 0x10}, {}, {0x8, 0xb}}, [@filter_kind_options=@f_flow={{0x9}, {0x64, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1a29d}, @TCA_FLOW_ACT={0x50, 0x9, 0x0, 0x1, [@m_csum={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x7, 0x1, 0x80000000}, 0x18}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x20000080}, 0x20000412) r5 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0406e52534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 2.10040156s ago: executing program 2 (id=735): io_uring_setup(0x4dec, &(0x7f0000000000)={0x0, 0x54c4, 0x8, 0x0, 0x2ff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.046221003s ago: executing program 5 (id=736): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0xffff]}, 0x8, 0x400) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@bsdgroups}, {@noblock_validity}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffa}}], [{@pcr={'pcr', 0x3d, 0x6}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%+'}}, {@uid_lt}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0xfd, 0x57e, &(0x7f0000001240)="$eJzs3U1rG9caAOB3ZClfzr12IIR77+ISyKIpIXJs9yOFQtJlaUMD7T4VtmKC5ShYcojdQJNFs+mmhEIpDZT+gO67DP0D/RWBNhBKMO2iFFxGHjmKJfkrcqVGzwOTnKMZzTlHZ96jMzOSFcDQOpn+k4v4b0R8kUSMtazLR7by5Pp2q09vz6RLEmtrH/6axIVN+0qy/0ezzH8i4sfPIs7k2sutLa/MlyqV8mKWn6gv3JioLa+cvbZQmivPla9PTU+ff3166q033+hZW1+9/PvXHzx89/znp1a/+v7xsftJXIyj2bq0XT0o4k5r5mTpzyxViIubNpzsQWGDJOl3BdiTkSzOC5GOAWMxkkU98PL7NCLWgCGViH8YUs15QPPcvkfnwf8YT95ZPwFqb39+/dpIHGqcGx1ZTZ47M0rPd8d7UH5axg+/PLifLrH1dYjD2+QBduXO3Yg4l8+3j39JNv7t3bnGxeOtbS5j2N5/oJ8epvOf5E5EW/znNuY/0WH+M9ohdvfi2T7WpzPt8Z973INiukrnf293nP9uDF3jI1nuX405XyG5eq1SPhcR/46I01E4mOa3up9zfvXRWrd1rfO/dEnLb84Fs3o8zh98/jmzpXrpRdrc6sndiP91nP8mG/2fdOj/9PW4vMMyTpQf/L/buu3bv7/Wvot4pWP/P7ujlWx9f3KicTxMNI+Kdr/dO/FTt/L73f60/49s3f7xpPV+ba3rrrreOPr20B/lbuv2evwfSD5qpA9kj90q1euLkxEHkvfzo5sfn3r23Ga+uX3a/tOnOsf/Vsd/Olp93PWleN694/e6bjoI/T+7q/7ffeLRe5980638nfX/a43U6eyRnYx/O63gi7x2AAAAAAAAMGhyEXE0klxxI53LFYvrn+84HkdylWqtfuZqden6bDS+KzsehVzzTvdYy+chJrPPwzbzU5vy0xFxLCK+HDncyBdnqpXZfjceAAAAAAAAAAAAAAAAAAAABsRol+//p34e6XftgH3X+GGDg/2uBdAP2/7kfy9+6QkYSNvGP/DS2n38uzIALwvv/zC8xD8ML/EPw2un8V8Y2+eKAH877/8wvMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAA9NTlS5fSZW316e2ZND97c3lpvnrz7Gy5Nl9cWJopzlQXbxTnqtW5Srk4U13Ybn+VavXG5FQs3Zqol2v1idryypWF6tL1+pVrC6W58pVywR8bBgAAAAAAAAAAAAAAAAAAgDa15ZX5UqVSXpTomrgQA1GN/Wzguj09PT8orZDoaaLPAxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtPgrAAD//20CM10=") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 2.010803578s ago: executing program 1 (id=737): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x1000000000005, 0x8}, 0x11ec81, 0x1224, 0x0, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) socket$nl_generic(0x10, 0x3, 0x10) perf_event_open(&(0x7f0000000500)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x6409b, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x1, @perf_bp={0x0, 0x3}, 0x0, 0x35, 0x6, 0x8, 0x9, 0x6, 0x400, 0x0, 0x0, 0x0, 0x2009}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0009}]}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @cred={{0x1c}}, @rights={{0x10}}], 0x88}, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000ff5000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=@newqdisc={0x9c, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, 0x2a, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x9}]}}]}, 0x9c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r4 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x0) ioctl$TUNGETFEATURES(r2, 0x800454cf, &(0x7f00000001c0)) io_uring_enter(r4, 0x2219, 0x7721, 0x16, 0x0, 0x0) clock_getres(0x3, 0x0) r5 = epoll_create1(0x80000) r6 = syz_open_dev$evdev(&(0x7f0000000300), 0x0, 0x2000) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000ac0)={0x6}) pselect6(0x40, &(0x7f0000004540)={0x9, 0xc, 0x3, 0x113, 0x5, 0x2, 0x2, 0xd4}, 0x0, 0x0, 0x0, 0x0) 1.875273054s ago: executing program 0 (id=740): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) syz_open_pts(r0, 0x0) mount(0x0, &(0x7f0000000740)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/lun/lun_0\x00', &(0x7f0000000040)='configfs\x00', 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target/core/rd_mcp_0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x148) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='usbip-vudc.0', 0xc) 1.873848555s ago: executing program 1 (id=741): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0xfc, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000094, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000680)="136092b9c45c4d81a153ed73c6dfa1c26dd5d5ffe7da5e8eee62f3f63aa34d222440ad92edd6bffdfa5467a1d8aea7571308dc0d3dbf396e6b68733aae734f8d468229c67c43c4f4faa607ce369eeccf7023b172eda7b838c072c89b26e67c468353c5a3b6d956e217f2f54222e235bdd6624c56c8c7eef8dd7619712cea86819c2df63aa7cd3a84f3b3317eb6a3fd959f09fbb22593294c336ea355a37f66b564c8d7d32d7063fd55abda6661ee378b42c11d81c548aef3d8", 0xb9, 0x40041, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) 1.850914954s ago: executing program 0 (id=742): r0 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, 0x0, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) 1.849991665s ago: executing program 1 (id=743): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x841e, &(0x7f00000001c0)={[{@nojournal_checksum}, {@jqfmt_vfsold}, {@lazytime}, {@usrquota}, {@usrquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$eJzs289rHFUcAPDvzCat/WViqT+aVo1WMfgjadJae/CiKHhQEPRQjzFJS+y2kSaCLUGjSD1Kwbt4FPwLPOlF1JPgVe9SKJJLq6eV2Z1Jdje7aZJustX9fGCS92be8t53Z97ue/N2AuhZw9mfJGJ/RPweEQO1bGOB4dq/W8uLU38vL04lUam89VdSLXdzeXGqKFq8bl+R6YtIP0viSIt65y9fOT9ZLs9cyvNjCxfeH5u/fOW52QuT52bOzVycOH365InxF05NPN+ROLO4bg59NHf08GvvXHtj6sy1d3/+Ninib4qjQ4bXO/hkpdLh6rrrQF066etiQ9iUUq2bRn+1/w9EKVZP3kC8+mlXGwdsq0qlUnmg/eGlCvA/lkS3WwB0R/FFn81/i22Hhh53hRsv1SZAWdy38q12pC/SvEx/0/y2k4Yj4szSP19lW2zPfQgAgAbfZ+OfZ1uN/9Kovy90b76GMhgR90XEwYg4FRGHIuL+iGrZByPioU3W37xIsnb8k17fUmAblI3/XszXthrHf8XoLwZLee5ANf7+5OxseeZ4/p6MRP/uLD++Th0/vPLbF+2O1Y//si2rvxgL5u243re78TXTkwuTdxJzvRufRAz1tYo/WVkJSCLicEQMbbGO2ae/Odru2O3jX0cH1pkqX0c8VTv/S9EUfyFZf31y7J4ozxwfK66KtX759eqb7eq/o/g7IDv/e1te/yvxDyb167Xzm6/j6h+ft53TbPX635W83bDvw8mFhUvjEbuS12uNrt8/0VRuYrV8Fv/Isdb9/2CsvhNHIiK7iB+OiEci4tG87Y9FxOMRcWyd+H96+Yn3th7/9srin97U+V9N7IrmPa0TpfM/ftdQ6eBm4s/O/8lqaiTfs5HPv420a2tXMwAAAPz3pBGxP5J0dCWdpqOjtd/wH4q9aXlufuGZs3MfXJyuPSMwGP1pcadroO5+6Hg+rS/yE035E/l94y9Le6r50am58nS3g4cet69N/8/8Wep264Bt53kt6F36P/Qu/R96l/4PvatF/9/TjXYAO6/V9//HXWgHsPOa+r9lP+gh5v/Qu/R/6F36P/Sk+T1x+4fkJSTWJCK9K5ohsU2Jbn8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdMa/AQAA//9QOObV") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x181042, 0x65) pwrite64(r0, &(0x7f0000000100)="84fc4a26c447c877064b0b009f", 0xd, 0x84fed1) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_usb_connect$uac1(0x5, 0x72, 0x0, 0x0) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3) getpid() r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x35) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x4000) 1.2650484s ago: executing program 0 (id=744): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff4000/0xa000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000692000/0x2000)=nil, &(0x7f0000817000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0x9cf0, 0xc002, 0x5, 0x2bb}) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2804f1e, &(0x7f0000000000)={[{@prjquota}]}, 0x82, 0x4a0, &(0x7f0000000240)="$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") io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000140)={0x5, {{0x2, 0x4e21, @multicast1}}, {{0x2, 0x6e1d, @multicast1}}}, 0x108) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000003c0)="e03f030036000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x2e}], 0x1}, 0x0) 1.12165223s ago: executing program 5 (id=745): socket(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000007c0)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 1.045008522s ago: executing program 3 (id=746): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x200000, &(0x7f0000000200)={[{@block_validity}, {}, {@nombcache}, {@oldalloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@grpjquota}]}, 0x3, 0x57b, &(0x7f0000000800)="$eJzs3d1rW+UfAPDvSZu9/37rYAz1Qgq7cDKXrq0vE4TNS9HhQO9naLMymi6jScdaB9su3I03MgQRB+If4L2Xw3/Av2KggyGj6IUXVk56smV56Uua2cx8PnC25znnpN/z5DnPk+/JSUgAQ2s8/ScX8XJEfJVEHG7aNhrZxvH1/VYf35hJlyTW1j75PYkkW9fYP8n+P5hVXoqIn7+IOJlrj1tdXpkvlsulxaw+UVu4OlFdXjl1eaE4V5orXZmanj7z1vTUu++83WPL2oO+fuHPbz++/8GZL4+vfvPjwyN3kzgXh7JtTe1IegyYutVcGY/x7I/l41zLjpM7CDKIdvKksXtGsnGej3QOOBwj2agH/vtuRsQaMJxGTAAwrBp5QOPavvl6fiN/Nz32Rfbo/fULoPb2j66/NxL76tdGB1aTZ66M0uvdsT7ET2P89Nu9u+kSLe+ntLrZh3gADbduR8Tp0dH2+S/J5r/ene70JmyL1hhbff0Bdu5+mv+80Sn/yT3Jf6JD/nOww9jtxebjP/ewD2G6SvO/9zrmv0+mrrGRrPa/es6XTy5dLpdOR8T/I+JE5Pem9Y3u55xZfdA1V27O/9Iljd/IBbPjeDi699nHzBZrxZ20udmj2xGvPM1/k2ib//fVc93W/k+fjwtbjHGsdO/Vbts2b3+z/mfAaz9EvNax/5/e0Uo2vj85UT8fJhpnRbs/7hz7pVv87bW//9L+P7Bx+8eS5vu11e3H+H7fX6Vu23o9//ckn9bLe7J114u12uJkxJ7ko/b1U08f26g39k/bf+L4xvNfp/N/f0R8tsX23zl6p+uug9D/s9vq/2cK+bY1HQoPPvz8u27xt9b/b9ZLJ7I1W5n/tnJcvZ3NAAAAAAAAMLhyEXEoklzhSTmXKxTWP99xNA7kypVq7eSlytKV2ah/V3Ys8rnGne7DTZ+HmMw+D9uoT7XUpyPiSER8PbK/Xi/MVMqzu914AAAAAAAAAAAAAAAAAAAAGBAHu3z/P/XryG4fHfDc+clvGF6bjv9+/NITMJC8/sPwMv5heBn/MLyMfxhexj8ML+MfhpfxD8PL+AcAAAAAAAAAAAAAAAAAAAAAAAAAAIC+unD+fLqsrT6+MZPWZ68tL81Xrp2aLVXnCwtLM4WZyuLVwlylMlcuFWYqC5v9vXKlcnVyKpauT9RK1dpEdXnl4kJl6Urt4uWF4lzpYin/r7QKAAAAAAAAAAAAAAAAAAAAXizV5ZX5YrlcWlToWjgbA3EYPReSzXr5bHYy9BRidPcbqPAcCrs8MQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAk38CAAD//2iMNWI=") open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x2, 0x1c1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000b40)={@map, 0xffffffffffffffff, 0x24, 0x2020}, 0x20) semget$private(0x0, 0x4, 0xaf183b6c46381ba8) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r0) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x14, r1, 0x3405f8c17b4743e3, 0x70bd28, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0xc000000) r2 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TCFLSH(r2, 0x400455c8, 0x2) r3 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000006, 0x4, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000180)='./file0\x00', 0x200008, &(0x7f0000000080)=ANY=[@ANYRES8=r3, @ANYRES32, @ANYRESOCT], 0x1, 0x392, &(0x7f0000000340)="$eJzs3T1vW2UUAOATt/mExBkQEiDEq24sVhL+QCPUSohIoFCj0gFxS5xixY0j2wpyhaADEiv/gL1iZENC/IEMsLOxZWHsUNXIX6mdul+kyaXq80jRPfZ7jvO+tnx1FuscXv3x5s52s7SdtaJwMUUhIgp3I5Z7Ud/U4FroxTMx6na8W7z619uffHbtw/WNjUubKV1ev/LeWkpp6Z3fvv7m5wu/t1759JelX2fjYPnzw3/W/j54/eCNw/tXvqo2U7WZduutlKXr9Xoru16rpK1qc6eU0se1StaspOpus9IYW9+u1ff22inb3Vpc2GtUms2U7bbTTqWdWvXUarRTdiOr7qZSqZQWF4InKd/Z3MzW+/HcY/IuntWGOAWNxnrW/Q7PPrRSvpPLhgCAXJ20/595qv7/WmGk/5+LR/b/06H/fy6mny5ttP//zy/C/1y3/58ZfH/H6f8BAAAAAAAAAAAAAOBFcLfTKXY6neLw2hn+SHjwOOftccoe+vyP/eW9P07XyA/35iJqP+yX98v9a399fTuqUYtKrEQx7nVvC0P9+PIHG5dWUs9yLN78rld/4Y+I8rnx+tUoxvLk+tV+fTqqj+51OhZG69fii3htcv3axPqZWPlppL4Uxfjzy6hHLbZ6t7cH9d+upvT+RxvH6md7eQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8HEpp6K3oz73fL0fMx/5gfn/pQcLy+Hz8fv3RfP2VKMa9yfP5VybO5z8fb57P9+wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMNRs39rJarVK46yC4cz/3jMzw+DRVVP99NvHluZjPHn2Sa9zwqDwTFXzg0NOWLrf6XR6wY3vn/tW5872ozxJMB0Rj8npDN7Ak/+vVyNi9Jlz4zmzEXGqJ13qBoX83/BnDvK4GwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEC+joZ+dx9M5b0bAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8tJs39rJarVK4xSDvM8IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwIvk3AAD//8s8Cyw=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mkdirat(0xffffffffffffffff, 0x0, 0x1a0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) r5 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) fsmount(r5, 0x1, 0x0) ftruncate(0xffffffffffffffff, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) close(0x3) 978.32959ms ago: executing program 5 (id=747): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r0], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 897.479404ms ago: executing program 5 (id=748): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00') r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) syz_io_uring_setup(0x3d1a, 0x0, 0x0, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f00000000c0)) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'bridge0\x00'}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004000}, 0x8804) 848.186374ms ago: executing program 5 (id=749): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) socket$packet(0x11, 0x2, 0x300) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) 514.328814ms ago: executing program 0 (id=750): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff3}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x1}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) socket$unix(0x1, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 388.036038ms ago: executing program 3 (id=751): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x50) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000300000000000000c29c18120000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f0000000280), &(0x7f0000000500)=r2}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xe, 0x0, &(0x7f0000000000)="43227504001100b32415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4}, 0x50) 328.670132ms ago: executing program 3 (id=752): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) r1 = openat$rdma_cm(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) syz_open_pts(r0, 0x0) mount(0x0, &(0x7f0000000740)='./config/target/usb_gadget/naa.5001405000000001/tpgt_1/lun/lun_0\x00', &(0x7f0000000040)='configfs\x00', 0x40000, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/target/core/rd_mcp_0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000180)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x148) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='usbip-vudc.0', 0xc) 285.63107ms ago: executing program 3 (id=753): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfd, 0xfc, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x24000094, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r1, &(0x7f0000000680)="136092b9c45c4d81a153ed73c6dfa1c26dd5d5ffe7da5e8eee62f3f63aa34d222440ad92edd6bffdfa5467a1d8aea7571308dc0d3dbf396e6b68733aae734f8d468229c67c43c4f4faa607ce369eeccf7023b172eda7b838c072c89b26e67c468353c5a3b6d956e217f2f54222e235bdd6624c56c8c7eef8dd7619712cea86819c2df63aa7cd3a84f3b3317eb6a3fd959f09fbb22593294c336ea355a37f66b564c8d7d32d7063fd55abda6661ee378b42c11d81c548aef3d82f642def5786", 0xbf, 0x40041, 0x0, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), r1) 284.236291ms ago: executing program 3 (id=754): perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x7, 0x56530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x9, 0xffffffffffffff7f}, 0x100902, 0x4, 0x0, 0x5, 0x8, 0x8, 0x4, 0x0, 0x0, 0x0, 0x2000000020000003}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001d00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1d4}, 0x48) syz_open_pts(0xffffffffffffffff, 0xc0040) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x5, 0x2000b}, 0x10e848, 0x1224, 0x9, 0x5, 0x8, 0x20005, 0x4, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="480000001400b59527bd7000ffdbdf250a0800ff", @ANYRES32=r2, @ANYBLOB="140002000000000000000000000000000000000114000100080000000000000000000000080009000200000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) r3 = openat2(0xffffffffffffffff, &(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000005c0)={0x200, 0x33, 0x32}, 0x18) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) open(&(0x7f00000000c0)='./tracing/events/sched/filter\x00', 0x200, 0x8e) syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='\x00'], 0x1, 0x262, &(0x7f0000000340)="$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") mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e500030000000000e500000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x300f000, 0xe, 0x0, &(0x7f0000000080)="00693cda000028eddb0000200000", 0x0, 0x48b8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 277.330573ms ago: executing program 2 (id=755): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@dioread_nolock}, {@norecovery}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@bsdgroups}, {@noblock_validity}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@delalloc}, {@init_itable_val={'init_itable', 0x3d, 0xfffffffffffffffa}}], [{@pcr={'pcr', 0x3d, 0x6}}, {@smackfstransmute={'smackfstransmute', 0x3d, '%+'}}, {@uid_lt}, {@appraise_type}, {@rootcontext={'rootcontext', 0x3d, 'system_u'}}]}, 0xfd, 0x57e, &(0x7f0000001240)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 0s ago: executing program 3 (id=756): r0 = socket$tipc(0x1e, 0x5, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000100)=@filter={'filter\x00', 0xe, 0x4, 0x340, 0xffffffff, 0x0, 0xd0, 0x1a0, 0xffffffff, 0xffffffff, 0x0, 0xd0, 0x270, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a0) bind$tipc(r0, &(0x7f0000000200)=@name={0x1e, 0x2, 0x2, {{0x42}, 0x2}}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, 0x0) ioctl$SIOCGIFHWADDR(r2, 0x8927, &(0x7f0000000000)={'batadv0\x00'}) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000002c0)=0x1, 0x4) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={0x0, 0x48}}, 0x410) sendmsg$can_bcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB="0100000012020000ffffffff0000", @ANYRESDEC, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES8], 0x48}, 0x1, 0x0, 0x0, 0x4040812}, 0x1) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {0xffff, 0xffff}, {0x2, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x34, 0x2, [@TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x9}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x6}, @TCA_HTB_INIT={0x18, 0x2, {0x3, 0x3, 0x6}}, @TCA_HTB_DIRECT_QLEN={0x8, 0x5, 0x1}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x998ed4ed88999c63}, 0x4c840) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24041091}, 0x844) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x4, 0x3}, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) preadv(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/96, 0x60}], 0x1, 0xa, 0x6c8) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000100), r7) sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x34, r8, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'lo\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x74, r8, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond_slave_0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'pimreg\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x24000800) kernel console output (not intermixed with test programs): type=1400 audit(1790980784.237:140): avc: denied { execmem } for pid=3291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 32.336547][ T29] audit: type=1400 audit(1790980784.497:141): avc: denied { read } for pid=3296 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.336583][ T29] audit: type=1400 audit(1790980784.497:142): avc: denied { open } for pid=3296 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 32.339718][ T29] audit: type=1400 audit(1790980784.497:143): avc: denied { mounton } for pid=3296 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 32.343398][ T29] audit: type=1400 audit(1790980784.497:144): avc: denied { module_request } for pid=3296 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 32.444511][ T29] audit: type=1400 audit(1790980784.597:145): avc: denied { sys_module } for pid=3297 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 32.923642][ T3297] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.923688][ T3297] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.923777][ T3297] bridge_slave_0: entered allmulticast mode [ 32.924449][ T3297] bridge_slave_0: entered promiscuous mode [ 32.959654][ T3297] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.959699][ T3297] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.959813][ T3297] bridge_slave_1: entered allmulticast mode [ 32.960167][ T3297] bridge_slave_1: entered promiscuous mode [ 33.008288][ T3297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.030025][ T3297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.056178][ T3302] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.056221][ T3302] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.056386][ T3302] bridge_slave_0: entered allmulticast mode [ 33.056823][ T3302] bridge_slave_0: entered promiscuous mode [ 33.069082][ T3297] team0: Port device team_slave_0 added [ 33.071112][ T3297] team0: Port device team_slave_1 added [ 33.089892][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.089963][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.090104][ T3297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.091439][ T3297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.091480][ T3297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.091564][ T3297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.117464][ T3296] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.117634][ T3296] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.117761][ T3296] bridge_slave_0: entered allmulticast mode [ 33.118956][ T3296] bridge_slave_0: entered promiscuous mode [ 33.121567][ T3296] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.121684][ T3296] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.121935][ T3296] bridge_slave_1: entered allmulticast mode [ 33.122973][ T3296] bridge_slave_1: entered promiscuous mode [ 33.166106][ T3297] hsr_slave_0: entered promiscuous mode [ 33.167116][ T3297] hsr_slave_1: entered promiscuous mode [ 33.168212][ T3302] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.168368][ T3302] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.168526][ T3302] bridge_slave_1: entered allmulticast mode [ 33.169761][ T3302] bridge_slave_1: entered promiscuous mode [ 33.191492][ T3296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.260062][ T3296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.270038][ T3301] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.270143][ T3301] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.270340][ T3301] bridge_slave_0: entered allmulticast mode [ 33.271791][ T3301] bridge_slave_0: entered promiscuous mode [ 33.287996][ T3302] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.309710][ T3301] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.309832][ T3301] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.309990][ T3301] bridge_slave_1: entered allmulticast mode [ 33.311805][ T3301] bridge_slave_1: entered promiscuous mode [ 33.315873][ T3302] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.328040][ T3296] team0: Port device team_slave_0 added [ 33.349357][ T3300] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.349469][ T3300] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.349678][ T3300] bridge_slave_0: entered allmulticast mode [ 33.351107][ T3300] bridge_slave_0: entered promiscuous mode [ 33.354899][ T3296] team0: Port device team_slave_1 added [ 33.388798][ T3300] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.388909][ T3300] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.389065][ T3300] bridge_slave_1: entered allmulticast mode [ 33.390288][ T3300] bridge_slave_1: entered promiscuous mode [ 33.406402][ T3302] team0: Port device team_slave_0 added [ 33.427043][ T3301] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.427788][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.427828][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.427892][ T3296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.429822][ T3296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.429862][ T3296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.429996][ T3296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.437374][ T3302] team0: Port device team_slave_1 added [ 33.473391][ T3300] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 33.481574][ T3301] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.522061][ T3300] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 33.536457][ T3301] team0: Port device team_slave_0 added [ 33.537160][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.537201][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.537314][ T3302] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.567795][ T3301] team0: Port device team_slave_1 added [ 33.568448][ T3302] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.568488][ T3302] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.568572][ T3302] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.600949][ T3300] team0: Port device team_slave_0 added [ 33.624080][ T3296] hsr_slave_0: entered promiscuous mode [ 33.625131][ T3296] hsr_slave_1: entered promiscuous mode [ 33.625781][ T3296] debugfs: 'hsr0' already exists in 'hsr' [ 33.625824][ T3296] Cannot create hsr debugfs directory [ 33.637139][ T3300] team0: Port device team_slave_1 added [ 33.687944][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.687993][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.688143][ T3301] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.718535][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 33.718585][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.718740][ T3300] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 33.719940][ T3301] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.719952][ T3301] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.720037][ T3301] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.732776][ T3302] hsr_slave_0: entered promiscuous mode [ 33.733861][ T3302] hsr_slave_1: entered promiscuous mode [ 33.734449][ T3302] debugfs: 'hsr0' already exists in 'hsr' [ 33.734489][ T3302] Cannot create hsr debugfs directory [ 33.735309][ T3300] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 33.735342][ T3300] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 33.735427][ T3300] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 33.921867][ T3301] hsr_slave_0: entered promiscuous mode [ 33.922297][ T3301] hsr_slave_1: entered promiscuous mode [ 33.922601][ T3301] debugfs: 'hsr0' already exists in 'hsr' [ 33.922613][ T3301] Cannot create hsr debugfs directory [ 33.966781][ T3300] hsr_slave_0: entered promiscuous mode [ 33.967209][ T3300] hsr_slave_1: entered promiscuous mode [ 33.967790][ T3300] debugfs: 'hsr0' already exists in 'hsr' [ 33.967804][ T3300] Cannot create hsr debugfs directory [ 34.091964][ T3297] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 34.093725][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.094457][ T3297] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 34.098656][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.115772][ T3297] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 34.121960][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.141432][ T3297] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 34.143452][ T3297] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.190398][ T3302] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 34.193293][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.193957][ T3302] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 34.198065][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.211790][ T3302] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 34.221005][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.230249][ T3302] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 34.237590][ T3302] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.263674][ T3296] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 34.269409][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.276396][ T3296] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 34.283757][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.297117][ T3296] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 34.299059][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.307014][ T3296] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 34.311774][ T3296] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.360920][ T3301] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 34.362814][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.364684][ T3301] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 34.369420][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.372960][ T3301] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 34.377369][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.394059][ T3301] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 34.405791][ T3301] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.412840][ T3300] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 34.421228][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 34.422767][ T3300] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 34.433488][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 34.437669][ T3300] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 34.447647][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 34.461521][ T3300] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 34.469620][ T3300] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 34.479748][ T3297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.515321][ T3302] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.529959][ T3297] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.539525][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.539636][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.570950][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.570988][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.572350][ T3302] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.594884][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.595003][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.615362][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.615466][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.622776][ T3296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.630827][ T3301] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.670055][ T3296] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.673471][ T3301] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.692346][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.692379][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.693794][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.693820][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.714865][ T3300] 8021q: adding VLAN 0 to HW filter on device bond0 [ 34.721677][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.721882][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.751486][ T3297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 34.756267][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.756316][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.812382][ T3300] 8021q: adding VLAN 0 to HW filter on device team0 [ 34.833094][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.833140][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.851378][ T101] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.851417][ T101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.013171][ T3302] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.073155][ T3297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.164865][ T3301] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.188622][ T3296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.241385][ T3302] veth0_vlan: entered promiscuous mode [ 35.244195][ T3302] veth1_vlan: entered promiscuous mode [ 35.274674][ T3302] veth0_macvtap: entered promiscuous mode [ 35.284169][ T3300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 35.293991][ T3302] veth1_macvtap: entered promiscuous mode [ 35.312140][ T3297] veth0_vlan: entered promiscuous mode [ 35.316852][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.327834][ T3302] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.338642][ T3297] veth1_vlan: entered promiscuous mode [ 35.358626][ T70] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.358893][ T70] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.359057][ T70] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.359343][ T70] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.411253][ T29] audit: type=1400 audit(1790980787.567:146): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.xiQB8P/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 35.412746][ T29] audit: type=1400 audit(1790980787.567:147): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 35.414748][ T29] audit: type=1400 audit(1790980787.567:148): avc: denied { mounton } for pid=3302 comm="syz-executor" path="/root/syzkaller.xiQB8P/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 35.415691][ T29] audit: type=1400 audit(1790980787.567:149): avc: denied { mount } for pid=3302 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 35.415991][ T3297] veth0_macvtap: entered promiscuous mode [ 35.451287][ T3297] veth1_macvtap: entered promiscuous mode [ 35.532533][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.546966][ T3297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.568944][ T3302] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 35.599366][ T3301] veth0_vlan: entered promiscuous mode [ 35.620331][ T3301] veth1_vlan: entered promiscuous mode [ 35.630560][ T3296] veth0_vlan: entered promiscuous mode [ 35.647107][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.647243][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.647280][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.647383][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.660717][ T3296] veth1_vlan: entered promiscuous mode [ 35.695811][ T3301] veth0_macvtap: entered promiscuous mode [ 35.776212][ T3296] veth0_macvtap: entered promiscuous mode [ 35.777979][ T3296] veth1_macvtap: entered promiscuous mode [ 35.783478][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.784887][ T3296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.811790][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.820541][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.821431][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.821546][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.824733][ T3301] veth1_macvtap: entered promiscuous mode [ 35.896147][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 35.899601][ T3301] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 35.960536][ T31] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.976184][ T31] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.976409][ T31] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 35.978728][ T31] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.240327][ T3509] loop2: detected capacity change from 0 to 512 [ 36.305279][ T3509] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 36.320141][ T3509] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 36.426115][ T3300] veth0_vlan: entered promiscuous mode [ 36.434229][ T3300] veth1_vlan: entered promiscuous mode [ 36.502676][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 36.561408][ T3300] veth0_macvtap: entered promiscuous mode [ 36.576946][ T3300] veth1_macvtap: entered promiscuous mode [ 36.723525][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 36.725492][ T3300] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 36.735062][ T317] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.735579][ T317] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.736393][ T317] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.736693][ T317] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 36.898992][ T3531] netlink: 104 bytes leftover after parsing attributes in process `syz.0.10'. [ 37.124555][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 37.124570][ T29] audit: type=1400 audit(1790980789.277:188): avc: denied { unmount } for pid=3302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 37.163629][ T29] audit: type=1400 audit(1790980789.317:189): avc: denied { mounton } for pid=3300 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=536 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 37.396280][ T3538] FAULT_INJECTION: forcing a failure. [ 37.396280][ T3538] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 37.396377][ T3538] CPU: 0 UID: 0 PID: 3538 Comm: syz.4.5 Not tainted syzkaller #0 PREEMPT(lazy) [ 37.396405][ T3538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 37.396425][ T3538] Call Trace: [ 37.396431][ T3538] [ 37.396440][ T3538] __dump_stack+0x1d/0x30 [ 37.396510][ T3538] dump_stack_lvl+0x95/0xd0 [ 37.396612][ T3538] dump_stack+0x15/0x1b [ 37.396633][ T3538] should_fail_ex+0x262/0x280 [ 37.396661][ T3538] should_fail+0xb/0x20 [ 37.396692][ T3538] should_fail_usercopy+0x1a/0x20 [ 37.396736][ T3538] _copy_from_user+0x1c/0xb0 [ 37.396785][ T3538] btf_new_fd+0x218/0x6a0 [ 37.396826][ T3538] bpf_btf_load+0x116/0x130 [ 37.396935][ T3538] __sys_bpf+0xbce/0xc30 [ 37.396971][ T3538] ? do_futex+0x370/0x460 [ 37.397065][ T3538] __x64_sys_bpf+0x69/0x80 [ 37.397094][ T3538] x64_sys_call+0xf26/0x2550 [ 37.397127][ T3538] do_syscall_64+0x112/0x360 [ 37.397157][ T3538] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 37.397197][ T3538] RIP: 0033:0x7fb85376e159 [ 37.397226][ T3538] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.397250][ T3538] RSP: 002b:00007fb8521c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 37.397287][ T3538] RAX: ffffffffffffffda RBX: 00007fb8539f5fa0 RCX: 00007fb85376e159 [ 37.397305][ T3538] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000012 [ 37.397321][ T3538] RBP: 00007fb85380506b R08: 0000000000000000 R09: 0000000000000000 [ 37.397363][ T3538] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.397378][ T3538] R13: 00007fb8539f6038 R14: 00007fb8539f5fa0 R15: 00007fff2099b128 [ 37.397403][ T3538] [ 37.404722][ T29] audit: type=1400 audit(1790980789.557:190): avc: denied { write } for pid=3541 comm="syz.3.13" name="loop3" dev="devtmpfs" ino=103 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 37.405041][ T3542] loop3: detected capacity change from 0 to 512 [ 37.467958][ T29] audit: type=1400 audit(1790980789.607:191): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 37.638522][ T3542] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 37.638855][ T3542] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 37.698021][ T3546] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 37.698161][ T3546] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 37.698272][ T3546] vhci_hcd vhci_hcd.0: Device attached [ 37.735096][ T29] audit: type=1400 audit(1790980789.887:192): avc: denied { read write } for pid=3543 comm="syz.1.15" name="raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.735181][ T29] audit: type=1400 audit(1790980789.887:193): avc: denied { open } for pid=3543 comm="syz.1.15" path="/dev/raw-gadget" dev="devtmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.735269][ T29] audit: type=1400 audit(1790980789.887:194): avc: denied { ioctl } for pid=3543 comm="syz.1.15" path="/dev/raw-gadget" dev="devtmpfs" ino=142 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 37.735766][ T3546] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.735866][ T3546] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.767358][ T3548] vhci_hcd: cannot find a urb of seqnum 1 max seqnum 0 [ 37.768122][ T101] vhci_hcd vhci_hcd.1: stop threads [ 37.768174][ T101] vhci_hcd vhci_hcd.1: release socket [ 37.768226][ T101] vhci_hcd vhci_hcd.1: disconnect device [ 37.807937][ T29] audit: type=1400 audit(1790980789.937:195): avc: denied { create } for pid=3543 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 37.807974][ T29] audit: type=1400 audit(1790980789.937:196): avc: denied { connect } for pid=3543 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 37.808028][ T29] audit: type=1400 audit(1790980789.937:197): avc: denied { bind } for pid=3543 comm="syz.1.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 37.890565][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 38.437185][ T3574] loop4: detected capacity change from 0 to 1024 [ 38.558994][ T2463] IPVS: starting estimator thread 0... [ 38.583037][ T3574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 38.648428][ T3577] IPVS: using max 2208 ests per chain, 110400 per kthread [ 38.955584][ T3581] loop0: detected capacity change from 0 to 256 [ 38.965243][ T3581] vfat: Unknown parameter 'rø¶°' [ 39.972936][ T3596] loop2: detected capacity change from 0 to 512 [ 39.985037][ T3596] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 39.985147][ T3596] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 39.999444][ T3596] EXT4-fs (loop2): 1 truncate cleaned up [ 40.004149][ T3596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 40.235880][ T3574] syz.4.24 (3574) used greatest stack depth: 11216 bytes left [ 40.407479][ T3582] syz.4.24 (3582) used greatest stack depth: 11208 bytes left [ 40.409743][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 40.412504][ T3603] ======================================================= [ 40.412504][ T3603] WARNING: The mand mount option has been deprecated and [ 40.412504][ T3603] and is ignored by this kernel. Remove the mand [ 40.412504][ T3603] option from the mount to silence this warning. [ 40.412504][ T3603] ======================================================= [ 40.702340][ T3610] FAULT_INJECTION: forcing a failure. [ 40.702340][ T3610] name failslab, interval 1, probability 0, space 0, times 1 [ 40.703082][ T3610] CPU: 1 UID: 0 PID: 3610 Comm: syz.3.33 Not tainted syzkaller #0 PREEMPT(lazy) [ 40.703119][ T3610] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 40.703165][ T3610] Call Trace: [ 40.703173][ T3610] [ 40.703183][ T3610] __dump_stack+0x1d/0x30 [ 40.703220][ T3610] dump_stack_lvl+0x95/0xd0 [ 40.703251][ T3610] dump_stack+0x15/0x1b [ 40.703283][ T3610] should_fail_ex+0x262/0x280 [ 40.703312][ T3610] ? nla_strdup+0x78/0xc0 [ 40.703368][ T3610] should_failslab+0x8c/0xb0 [ 40.703408][ T3610] __kmalloc_noprof+0xd0/0x4d0 [ 40.703440][ T3610] ? nla_strdup+0x78/0xc0 [ 40.703606][ T3610] nla_strdup+0x78/0xc0 [ 40.703639][ T3610] nf_tables_newset+0xf62/0x16b0 [ 40.703729][ T3610] nfnetlink_rcv+0xbf7/0x1740 [ 40.703790][ T3610] netlink_unicast+0x5a9/0x680 [ 40.703825][ T3610] netlink_sendmsg+0x5be/0x6f0 [ 40.703883][ T3610] ? __pfx_netlink_sendmsg+0x10/0x10 [ 40.703909][ T3610] ____sys_sendmsg+0x532/0x580 [ 40.703937][ T3610] ___sys_sendmsg+0x195/0x1e0 [ 40.703985][ T3610] __x64_sys_sendmsg+0xd4/0x160 [ 40.704077][ T3610] x64_sys_call+0x22ab/0x2550 [ 40.704103][ T3610] do_syscall_64+0x112/0x360 [ 40.704136][ T3610] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 40.704166][ T3610] RIP: 0033:0x7fcdcebbe159 [ 40.704183][ T3610] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 40.704234][ T3610] RSP: 002b:00007fcdcd617028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 40.704261][ T3610] RAX: ffffffffffffffda RBX: 00007fcdcee45fa0 RCX: 00007fcdcebbe159 [ 40.704315][ T3610] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 40.704329][ T3610] RBP: 00007fcdcec5506b R08: 0000000000000000 R09: 0000000000000000 [ 40.704410][ T3610] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 40.704423][ T3610] R13: 00007fcdcee46038 R14: 00007fcdcee45fa0 R15: 00007ffc061eec48 [ 40.704442][ T3610] [ 40.824087][ T3610] syz.3.33 (3610) used greatest stack depth: 11176 bytes left [ 41.266794][ T3620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.266970][ T3620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.283890][ T3620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 41.291101][ T3620] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 41.510494][ T3624] loop0: detected capacity change from 0 to 512 [ 41.523220][ T3624] ext3: Unknown parameter 'pcr' [ 41.705584][ T3633] syzkaller0: entered promiscuous mode [ 41.705622][ T3633] syzkaller0: entered allmulticast mode [ 42.141118][ T3605] syz.2.30 (3605) used greatest stack depth: 11080 bytes left [ 42.414981][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 43.150778][ T3646] syzkaller0: entered promiscuous mode [ 43.150832][ T3646] syzkaller0: entered allmulticast mode [ 43.155865][ T3646] tipc: Started in network mode [ 43.156394][ T3646] tipc: Node identity 56af4d050df, cluster identity 4711 [ 43.156989][ T3646] tipc: Enabled bearer , priority 0 [ 43.163029][ T3646] tipc: Resetting bearer [ 43.194161][ T3645] tipc: Resetting bearer [ 43.204273][ T3645] tipc: Disabling bearer [ 43.232962][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 43.233013][ T29] audit: type=1326 audit(1790980795.387:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3647 comm="syz.0.45" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4dd7e159 code=0x7ffc0000 [ 43.234158][ T29] audit: type=1326 audit(1790980795.387:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3647 comm="syz.0.45" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4dd7e159 code=0x7ffc0000 [ 43.234362][ T29] audit: type=1326 audit(1790980795.387:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3647 comm="syz.0.45" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fea4dd7e159 code=0x7ffc0000 [ 43.234628][ T29] audit: type=1326 audit(1790980795.387:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3647 comm="syz.0.45" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4dd7e159 code=0x7ffc0000 [ 43.234840][ T29] audit: type=1326 audit(1790980795.387:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3647 comm="syz.0.45" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4dd7e159 code=0x7ffc0000 [ 43.234998][ T29] audit: type=1326 audit(1790980795.387:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3647 comm="syz.0.45" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4dd7e159 code=0x7ffc0000 [ 43.235375][ T29] audit: type=1326 audit(1790980795.387:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3647 comm="syz.0.45" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4dd7e159 code=0x7ffc0000 [ 43.235611][ T29] audit: type=1326 audit(1790980795.387:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3647 comm="syz.0.45" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7fea4dd7e159 code=0x7ffc0000 [ 43.236239][ T29] audit: type=1326 audit(1790980795.397:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3647 comm="syz.0.45" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4dd7e159 code=0x7ffc0000 [ 43.236330][ T29] audit: type=1326 audit(1790980795.397:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3647 comm="syz.0.45" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4dd7e159 code=0x7ffc0000 [ 43.776464][ T3656] netlink: 76 bytes leftover after parsing attributes in process `syz.0.49'. [ 43.776540][ T3656] netlink: 40 bytes leftover after parsing attributes in process `syz.0.49'. [ 43.870273][ T3661] sd 0:0:1:0: PR command failed: 1026 [ 43.870347][ T3661] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 43.870430][ T3661] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 44.016800][ T3667] loop4: detected capacity change from 0 to 1024 [ 44.019625][ T3667] EXT4-fs: Ignoring removed oldalloc option [ 44.019962][ T3667] EXT4-fs: Ignoring removed orlov option [ 44.053670][ T3667] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 44.618972][ T3681] loop0: detected capacity change from 0 to 512 [ 44.743147][ T3687] netlink: 20 bytes leftover after parsing attributes in process `syz.1.55'. [ 44.846313][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.006188][ T3691] syz.1.58 (3691) used greatest stack depth: 10496 bytes left [ 45.043217][ T3696] netlink: 8 bytes leftover after parsing attributes in process `syz.3.61'. [ 45.043237][ T3696] netlink: 7 bytes leftover after parsing attributes in process `syz.3.61'. [ 45.043250][ T3696] netlink: 'syz.3.61': attribute type 2 has an invalid length. [ 45.043261][ T3696] netlink: 20 bytes leftover after parsing attributes in process `syz.3.61'. [ 45.196068][ T3704] lo speed is unknown, defaulting to 1000 [ 45.197097][ T3704] lo speed is unknown, defaulting to 1000 [ 45.200375][ T3704] lo speed is unknown, defaulting to 1000 [ 45.277740][ T3704] infiniband syz0: set active [ 45.277760][ T3704] infiniband syz0: added lo [ 45.278489][ T3413] lo speed is unknown, defaulting to 1000 [ 45.305780][ T3709] loop1: detected capacity change from 0 to 512 [ 45.313010][ T3709] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 45.315444][ T3709] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=42c028, mo2=0002] [ 45.315629][ T3709] EXT4-fs (loop1): orphan cleanup on readonly fs [ 45.340214][ T3704] RDS/IB: syz0: added [ 45.340233][ T3704] smc: adding ib device syz0 with port count 1 [ 45.340250][ T3704] smc: ib device syz0 port 1 has no pnetid [ 45.340649][ T3704] lo speed is unknown, defaulting to 1000 [ 45.340886][ T3393] lo speed is unknown, defaulting to 1000 [ 45.343831][ T3709] EXT4-fs error (device loop1): ext4_acquire_dquot:7069: comm syz.1.66: Failed to acquire dquot type 0 [ 45.343909][ T3709] loop1: lost filesystem error report for type 5 error -5 [ 45.355971][ C0] EXT4-fs (loop1): error count since last fsck: 1 [ 45.356033][ C0] EXT4-fs (loop1): initial error at time 1790980797: ext4_acquire_dquot:7069 [ 45.356115][ C0] EXT4-fs (loop1): last error at time 1790980797: ext4_acquire_dquot:7069 [ 45.358596][ T3709] EXT4-fs (loop1): Remounting filesystem read-only [ 45.358802][ T3709] EXT4-fs (loop1): 1 truncate cleaned up [ 45.361009][ T3709] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 45.480192][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 45.529992][ T3704] lo speed is unknown, defaulting to 1000 [ 45.575819][ T3704] lo speed is unknown, defaulting to 1000 [ 45.620127][ T3704] lo speed is unknown, defaulting to 1000 [ 45.682116][ T3704] lo speed is unknown, defaulting to 1000 [ 45.720915][ T3704] lo speed is unknown, defaulting to 1000 [ 45.864082][ T3732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.74'. [ 45.864121][ T3732] netlink: 7 bytes leftover after parsing attributes in process `syz.4.74'. [ 45.926445][ T3681] syz.0.57 (3681) used greatest stack depth: 10040 bytes left [ 46.455413][ T3746] loop0: detected capacity change from 0 to 512 [ 46.481082][ T3746] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 46.481334][ T3746] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 46.639149][ T3752] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.639301][ T3752] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.642090][ T3752] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.642133][ T3752] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.642289][ T3752] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.642328][ T3752] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.643880][ T3746] netlink: 12 bytes leftover after parsing attributes in process `syz.0.81'. [ 46.645406][ T3752] team0: Failed to send options change via netlink (err -105) [ 46.645427][ T3752] team0: Port device bridge0 added [ 46.766224][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 46.807171][ T3760] netlink: 8 bytes leftover after parsing attributes in process `syz.3.85'. [ 46.812098][ T3757] loop0: detected capacity change from 0 to 256 [ 46.826234][ T3757] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 46.929986][ T3764] loop1: detected capacity change from 0 to 512 [ 46.936538][ T3764] EXT4-fs error (device loop1): ext4_orphan_get:1403: inode #15: comm syz.1.88: iget: bad extended attribute block 134217728 [ 46.936578][ T3764] loop1: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 46.936858][ T3764] EXT4-fs error (device loop1): ext4_orphan_get:1408: comm syz.1.88: couldn't read orphan inode 15 (err -117) [ 46.936885][ T3764] loop1: lost filesystem error report for type 5 error -117 [ 46.937428][ T3764] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.191726][ T1042] lo speed is unknown, defaulting to 1000 [ 47.235608][ T3783] loop4: detected capacity change from 0 to 512 [ 47.251386][ T3783] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.251457][ T3783] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 47.770202][ T2463] FAT-fs (loop0): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 47.781469][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.823710][ T3788] tipc: Enabling of bearer rejected, failed to enable media [ 47.868525][ T3793] Zero length message leads to an empty skb [ 47.985649][ T3799] loop2: detected capacity change from 0 to 2048 [ 47.989051][ T3799] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.989211][ T3799] EXT4-fs: Ignoring removed nomblk_io_submit option [ 47.989331][ T3799] ext4: Unknown parameter 'smackfstransmute' [ 48.076999][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.095109][ T3812] loop4: detected capacity change from 0 to 512 [ 48.112560][ T3812] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 48.112647][ T3812] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.169420][ T3300] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 48.291896][ T3828] netlink: 'syz.4.111': attribute type 2 has an invalid length. [ 48.424725][ T3845] loop4: detected capacity change from 0 to 1764 [ 48.435003][ T29] kauditd_printk_skb: 141 callbacks suppressed [ 48.435021][ T29] audit: type=1400 audit(1790980800.587:428): avc: denied { mount } for pid=3844 comm="syz.4.119" name="/" dev="loop4" ino=1792 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 48.444231][ T3845] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.444614][ T3845] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.519372][ T3297] syz-executor invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=0 [ 48.519476][ T3297] CPU: 1 UID: 0 PID: 3297 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(lazy) [ 48.519502][ T3297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 48.519519][ T3297] Call Trace: [ 48.519527][ T3297] [ 48.519537][ T3297] __dump_stack+0x1d/0x30 [ 48.519569][ T3297] dump_stack_lvl+0x95/0xd0 [ 48.519718][ T3297] dump_stack+0x15/0x1b [ 48.519746][ T3297] dump_header+0x80/0x240 [ 48.519929][ T3297] oom_kill_process+0x294/0x420 [ 48.519954][ T3297] out_of_memory+0x981/0xbc0 [ 48.519977][ T3297] try_charge_memcg+0x6ba/0xae0 [ 48.520062][ T3297] charge_memcg+0x16f/0x220 [ 48.520107][ T3297] mem_cgroup_swapin_charge_folio+0xc2/0x150 [ 48.520205][ T3297] swap_cache_alloc_folio+0x47b/0x610 [ 48.520260][ T3297] swap_cluster_readahead+0x2b7/0x460 [ 48.520295][ T3297] swapin_readahead+0xd8/0x8a0 [ 48.520350][ T3297] ? hrtimer_start_range_ns_common+0x4c5/0x7d0 [ 48.520381][ T3297] ? __rcu_read_unlock+0x4e/0x70 [ 48.520421][ T3297] ? swap_cache_get_folio+0x1f7/0x200 [ 48.520452][ T3297] do_swap_page+0x2b7/0x1e40 [ 48.520546][ T3297] ? mtree_range_walk+0x416/0x480 [ 48.520574][ T3297] ? __rcu_read_lock+0x36/0x50 [ 48.520681][ T3297] ? pte_offset_map_rw_nolock+0x19e/0x200 [ 48.520718][ T3297] handle_mm_fault+0xb29/0x3bb0 [ 48.520779][ T3297] do_user_addr_fault+0x636/0x1060 [ 48.520817][ T3297] ? trace_page_fault_user+0x1f/0xa0 [ 48.520859][ T3297] exc_page_fault+0x62/0xa0 [ 48.520915][ T3297] asm_exc_page_fault+0x26/0x30 [ 48.520937][ T3297] RIP: 0033:0x7fcdceb792d7 [ 48.520957][ T3297] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 48.520981][ T3297] RSP: 002b:00007ffc061eef40 EFLAGS: 00010202 [ 48.521003][ T3297] RAX: 0000000000000000 RBX: 0000555594868500 RCX: 00007fcdceb792d7 [ 48.521048][ T3297] RDX: 00007ffc061eef80 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.521063][ T3297] RBP: 00007ffc061eefec R08: 0000000000000000 R09: 0000000000000000 [ 48.521080][ T3297] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 48.521097][ T3297] R13: 00000000000927c0 R14: 000000000000bc4c R15: 00007ffc061ef040 [ 48.521170][ T3297] [ 48.543614][ T3297] memory: usage 307200kB, limit 307200kB, failcnt 593 [ 48.543669][ T3297] memory+swap: usage 307520kB, limit 9007199254740988kB, failcnt 0 [ 48.543711][ T3297] kmem: usage 307188kB, limit 9007199254740988kB, failcnt 0 [ 48.543751][ T3297] Memory cgroup stats for /syz3: [ 48.544503][ T3297] cache 0 [ 48.544535][ T3297] rss 0 [ 48.544556][ T3297] shmem 0 [ 48.544577][ T3297] mapped_file 0 [ 48.544599][ T3297] dirty 0 [ 48.544614][ T3297] writeback 0 [ 48.544699][ T3297] workingset_refault_anon 16 [ 48.544728][ T3297] workingset_refault_file 3 [ 48.544751][ T3297] swap 327680 [ 48.544772][ T3297] swapcached 405504 [ 48.544800][ T3297] pgpgin 12985 [ 48.544822][ T3297] pgpgout 12982 [ 48.544843][ T3297] pgfault 14376 [ 48.544864][ T3297] pgmajfault 9 [ 48.544885][ T3297] inactive_anon 8192 [ 48.544907][ T3297] active_anon 4096 [ 48.544959][ T3297] inactive_file 0 [ 48.544980][ T3297] active_file 0 [ 48.545002][ T3297] unevictable 0 [ 48.554120][ T3297] hierarchical_memory_limit 314572800 [ 48.554162][ T3297] hierarchical_memsw_limit 9223372036854771712 [ 48.554192][ T3297] total_cache 0 [ 48.554225][ T3297] total_rss 0 [ 48.554253][ T3297] total_shmem 0 [ 48.554274][ T3297] total_mapped_file 0 [ 48.554297][ T3297] total_dirty 0 [ 48.554319][ T3297] total_writeback 0 [ 48.554400][ T3297] total_workingset_refault_anon 16 [ 48.554423][ T3297] total_workingset_refault_file 3 [ 48.554453][ T3297] total_swap 327680 [ 48.554475][ T3297] total_swapcached 405504 [ 48.554526][ T3297] total_pgpgin 12985 [ 48.554534][ T3297] total_pgpgout 12982 [ 48.554541][ T3297] total_pgfault 14376 [ 48.554611][ T3297] total_pgmajfault 9 [ 48.554634][ T3297] total_inactive_anon 8192 [ 48.554695][ T3297] total_active_anon 4096 [ 48.554724][ T3297] total_inactive_file 0 [ 48.554746][ T3297] total_active_file 0 [ 48.554775][ T3297] total_unevictable 0 [ 48.554797][ T3297] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0,oom_memcg=/syz3,task_memcg=/syz3,task=syz.3.106,pid=3814,uid=0 [ 48.555167][ T3297] Memory cgroup out of memory: Killed process 3814 (syz.3.106) total-vm:96236kB, anon-rss:1248kB, file-rss:22344kB, shmem-rss:0kB, UID:0 pgtables:128kB oom_score_adj:1000 [ 48.558785][ T29] audit: type=1400 audit(1790980800.707:429): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:iso9660_t tclass=filesystem permissive=1 [ 48.756338][ T3815] syz.3.106 (3815) used greatest stack depth: 9160 bytes left [ 49.050560][ T3856] __nla_validate_parse: 8 callbacks suppressed [ 49.050577][ T3856] netlink: 96 bytes leftover after parsing attributes in process `syz.4.124'. [ 49.115718][ T3863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.126'. [ 49.128740][ T3863] loop4: detected capacity change from 0 to 128 [ 49.191049][ T3866] loop3: detected capacity change from 0 to 1024 [ 49.191591][ T3866] EXT4-fs: Ignoring removed oldalloc option [ 49.191720][ T3866] EXT4-fs: Ignoring removed orlov option [ 49.208837][ T3866] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.218867][ T29] audit: type=1400 audit(1790980801.367:430): avc: denied { write } for pid=3865 comm="syz.3.127" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.219035][ T29] audit: type=1400 audit(1790980801.367:431): avc: denied { create } for pid=3865 comm="syz.3.127" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.559816][ T29] audit: type=1400 audit(1790980801.717:432): avc: denied { unmount } for pid=3300 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 49.782287][ T2463] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.820458][ T2463] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.869322][ T2463] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.899509][ T2463] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 49.927960][ T3879] lo speed is unknown, defaulting to 1000 [ 49.974365][ T2463] bridge_slave_1: left allmulticast mode [ 49.974390][ T2463] bridge_slave_1: left promiscuous mode [ 49.974559][ T2463] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.976602][ T2463] bridge_slave_0: left allmulticast mode [ 49.976655][ T2463] bridge_slave_0: left promiscuous mode [ 49.976992][ T2463] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.047007][ T2463] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.048336][ T2463] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 50.049207][ T2463] bond0 (unregistering): Released all slaves [ 50.116210][ T2463] hsr_slave_0: left promiscuous mode [ 50.116545][ T2463] hsr_slave_1: left promiscuous mode [ 50.117040][ T2463] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 50.117055][ T2463] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 50.117678][ T2463] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 50.117691][ T2463] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 50.119958][ T2463] veth1_macvtap: left promiscuous mode [ 50.119979][ T2463] veth0_macvtap: left promiscuous mode [ 50.120083][ T2463] veth1_vlan: left promiscuous mode [ 50.120111][ T2463] veth0_vlan: left promiscuous mode [ 50.217012][ T2463] team0 (unregistering): Port device team_slave_1 removed [ 50.219619][ T2463] team0 (unregistering): Port device team_slave_0 removed [ 50.253360][ T51] smc: removing ib device syz0 [ 50.260937][ T1042] infiniband syz0: ib_query_port failed (-19) [ 50.326511][ T3879] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.326552][ T3879] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.326613][ T3879] bridge_slave_0: entered allmulticast mode [ 50.327795][ T3879] bridge_slave_0: entered promiscuous mode [ 50.355156][ T3879] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.355240][ T3879] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.355325][ T3879] bridge_slave_1: entered allmulticast mode [ 50.377367][ T3879] bridge_slave_1: entered promiscuous mode [ 50.403733][ T3879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.405113][ T3879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.435321][ T3879] team0: Port device team_slave_0 added [ 50.437143][ T3879] team0: Port device team_slave_1 added [ 50.459882][ T3879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.459897][ T3879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.459971][ T3879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.460689][ T3879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.460701][ T3879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.460732][ T3879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.544146][ T3879] hsr_slave_0: entered promiscuous mode [ 50.544924][ T3879] hsr_slave_1: entered promiscuous mode [ 50.545179][ T3879] debugfs: 'hsr0' already exists in 'hsr' [ 50.545195][ T3879] Cannot create hsr debugfs directory [ 50.958756][ T3801] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 50.974893][ T3879] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 50.992294][ T3879] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.003907][ T3879] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 51.021487][ T3879] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.024936][ T3879] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 51.030201][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 51.055687][ T3879] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.056589][ T3879] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 51.061118][ T3899] netlink: 96 bytes leftover after parsing attributes in process `syz.0.135'. [ 51.086489][ T3879] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.113001][ T3879] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.113034][ T3879] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.113119][ T3879] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.113147][ T3879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.138771][ T29] audit: type=1400 audit(1790980803.287:433): avc: denied { getattr } for pid=3911 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.197119][ T29] audit: type=1400 audit(1790980803.357:434): avc: denied { read } for pid=3918 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.197150][ T29] audit: type=1400 audit(1790980803.357:435): avc: denied { open } for pid=3918 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=514 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.223417][ T3912] netlink: 8 bytes leftover after parsing attributes in process `syz.1.139'. [ 51.270790][ T3919] syzkaller0: entered promiscuous mode [ 51.270872][ T3919] syzkaller0: entered allmulticast mode [ 51.327349][ T3879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.347837][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.348682][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.377157][ T3919] tipc: Started in network mode [ 51.377257][ T3919] tipc: Node identity 2204dd8c553d, cluster identity 4711 [ 51.377333][ T3919] tipc: Enabled bearer , priority 0 [ 51.378507][ T3917] tipc: Resetting bearer [ 51.415198][ T3917] tipc: Disabling bearer [ 51.431372][ T29] audit: type=1400 audit(1790980803.587:436): avc: denied { write } for pid=3901 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.431413][ T29] audit: type=1400 audit(1790980803.587:437): avc: denied { create } for pid=3901 comm="dhcpcd-run-hook" name="resolv.conf.eth1.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.485792][ T3879] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.500758][ T101] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.500798][ T101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.506275][ T2463] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.506317][ T2463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.606455][ T3022] 8021q: adding VLAN 0 to HW filter on device eth1 [ 51.614081][ T3939] syzkaller0: entered promiscuous mode [ 51.614106][ T3939] syzkaller0: entered allmulticast mode [ 51.774553][ T3968] smc: net device lo applied user defined pnetid SYZ0 [ 51.802730][ T3963] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.802902][ T3963] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.829131][ T3963] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.829254][ T3963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.829345][ T3963] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.829422][ T3963] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.878948][ T3963] team0: Port device bridge0 added [ 51.887243][ T3879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 52.351115][ T3022] 8021q: adding VLAN 0 to HW filter on device eth3 [ 52.638801][ T3879] veth0_vlan: entered promiscuous mode [ 52.653888][ T3879] veth1_vlan: entered promiscuous mode [ 52.674910][ T3879] veth0_macvtap: entered promiscuous mode [ 52.683852][ T3879] veth1_macvtap: entered promiscuous mode [ 52.699265][ T3879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.704207][ T3879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.746223][ T317] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.746340][ T317] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.746402][ T317] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.746521][ T317] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.755205][ T3022] 8021q: adding VLAN 0 to HW filter on device eth2 [ 52.864119][ T4045] loop0: detected capacity change from 0 to 512 [ 52.873187][ T4045] EXT4-fs: test_dummy_encryption option not supported [ 52.880948][ T4045] netlink: 36 bytes leftover after parsing attributes in process `syz.0.165'. [ 53.048988][ T4052] loop0: detected capacity change from 0 to 512 [ 53.081370][ T4052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 53.081451][ T4052] ext4 filesystem being mounted at /27/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 53.204129][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.205269][ T4074] netlink: 8 bytes leftover after parsing attributes in process `syz.1.172'. [ 53.232583][ T4074] loop1: detected capacity change from 0 to 128 [ 53.287882][ T4083] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 53.383741][ T3022] 8021q: adding VLAN 0 to HW filter on device eth4 [ 53.436142][ T4100] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.436399][ T4100] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.440923][ T4100] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.440957][ T4100] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.441138][ T4100] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.441170][ T4100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.451670][ T4100] team0: Port device bridge0 added [ 53.509857][ T4111] syzkaller0: entered promiscuous mode [ 53.509877][ T4111] syzkaller0: entered allmulticast mode [ 53.539474][ T4107] loop2: detected capacity change from 0 to 2048 [ 53.539823][ T4107] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.539926][ T4107] EXT4-fs: Ignoring removed nomblk_io_submit option [ 53.539954][ T4107] ext4: Unknown parameter 'smackfstransmute' [ 53.545824][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 53.545843][ T29] audit: type=1400 audit(1790980805.697:453): avc: denied { listen } for pid=4106 comm="syz.2.183" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 53.626048][ T4111] tipc: Enabled bearer , priority 0 [ 53.641669][ T4110] tipc: Resetting bearer [ 53.648444][ T4110] tipc: Disabling bearer [ 53.893196][ T29] audit: type=1326 audit(1790980806.047:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="syz.1.197" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd474c6e159 code=0x7ffc0000 [ 53.893397][ T29] audit: type=1326 audit(1790980806.047:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="syz.1.197" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd474c6e159 code=0x7ffc0000 [ 53.893893][ T29] audit: type=1326 audit(1790980806.047:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="syz.1.197" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd474c6e159 code=0x7ffc0000 [ 53.894139][ T29] audit: type=1326 audit(1790980806.047:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="syz.1.197" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd474c6e159 code=0x7ffc0000 [ 53.894419][ T29] audit: type=1326 audit(1790980806.047:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="syz.1.197" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd474c6e159 code=0x7ffc0000 [ 53.894652][ T29] audit: type=1326 audit(1790980806.047:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="syz.1.197" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd474c6e159 code=0x7ffc0000 [ 53.894923][ T29] audit: type=1326 audit(1790980806.047:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="syz.1.197" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd474c6e159 code=0x7ffc0000 [ 53.895254][ T29] audit: type=1326 audit(1790980806.047:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="syz.1.197" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd474c6e159 code=0x7ffc0000 [ 53.895482][ T29] audit: type=1326 audit(1790980806.047:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4142 comm="syz.1.197" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7fd474c6e159 code=0x7ffc0000 [ 54.009746][ T4157] netlink: 'syz.0.200': attribute type 1 has an invalid length. [ 54.080473][ T4164] netlink: 96 bytes leftover after parsing attributes in process `syz.0.200'. [ 54.082665][ T4157] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.191068][ T4157] bond1: (slave geneve2): making interface the new active one [ 54.195358][ T4157] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 54.278899][ T4173] loop3: detected capacity change from 0 to 2048 [ 54.279413][ T4173] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.279506][ T4173] EXT4-fs: Ignoring removed nomblk_io_submit option [ 54.279653][ T4173] ext4: Unknown parameter 'smackfstransmute' [ 54.306975][ T4175] loop1: detected capacity change from 0 to 256 [ 54.330382][ T4175] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 54.386390][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.386633][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.389602][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.389633][ T4183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.389741][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.389770][ T4183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.392021][ T4183] team0: Port device bridge0 added [ 54.537140][ T4195] loop5: detected capacity change from 0 to 512 [ 54.589915][ T4200] netlink: 8 bytes leftover after parsing attributes in process `syz.0.218'. [ 54.589949][ T4200] netlink: 60 bytes leftover after parsing attributes in process `syz.0.218'. [ 54.700521][ T4205] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.700750][ T4205] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.720613][ T4205] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.720659][ T4205] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.720735][ T4205] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.720786][ T4205] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.735704][ T4205] team0: Port device bridge0 added [ 54.846884][ T4213] loop0: detected capacity change from 0 to 512 [ 54.886288][ T4217] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.886367][ T4217] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.172147][ T4008] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 55.342151][ T4236] netlink: 8 bytes leftover after parsing attributes in process `syz.3.234'. [ 55.342184][ T4236] netlink: 60 bytes leftover after parsing attributes in process `syz.3.234'. [ 55.727149][ T4278] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.727322][ T4278] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.772815][ T4282] loop3: detected capacity change from 0 to 512 [ 55.837048][ T4292] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 55.844586][ T4291] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.844720][ T4291] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.684323][ T4314] loop0: detected capacity change from 0 to 1024 [ 56.685183][ T4314] EXT4-fs: Ignoring removed oldalloc option [ 56.685311][ T4314] EXT4-fs: Ignoring removed orlov option [ 56.709281][ T4314] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 56.873231][ T4324] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.873302][ T4324] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.924537][ T4328] netlink: 'syz.1.274': attribute type 1 has an invalid length. [ 56.963222][ T4328] 8021q: adding VLAN 0 to HW filter on device bond1 [ 56.980322][ T4328] netlink: 96 bytes leftover after parsing attributes in process `syz.1.274'. [ 56.995507][ T4328] bond1: (slave geneve2): making interface the new active one [ 57.003653][ T4328] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 57.129278][ T4337] netlink: 8 bytes leftover after parsing attributes in process `syz.5.278'. [ 57.773309][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 57.799282][ T4359] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 57.842384][ T4364] netlink: 8 bytes leftover after parsing attributes in process `syz.1.286'. [ 57.842415][ T4364] netlink: 60 bytes leftover after parsing attributes in process `syz.1.286'. [ 58.071805][ T4369] set_capacity_and_notify: 2 callbacks suppressed [ 58.071828][ T4369] loop1: detected capacity change from 0 to 512 [ 58.073500][ T4369] EXT4-fs: test_dummy_encryption option not supported [ 58.074708][ T4369] netlink: 36 bytes leftover after parsing attributes in process `syz.1.289'. [ 58.294959][ T4377] loop1: detected capacity change from 0 to 512 [ 58.320197][ T4377] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.320369][ T4377] ext4 filesystem being mounted at /57/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 58.393479][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 58.441633][ T4393] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 58.607362][ T4407] loop3: detected capacity change from 0 to 512 [ 58.632141][ T4407] ext3: Unknown parameter 'pcr' [ 58.774609][ T4416] loop5: detected capacity change from 0 to 512 [ 58.776247][ T4416] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 58.843538][ T4416] EXT4-fs (loop5): 1 truncate cleaned up [ 58.844013][ T4416] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 58.852116][ T29] kauditd_printk_skb: 221 callbacks suppressed [ 58.852135][ T29] audit: type=1400 audit(1790980811.007:684): avc: denied { write } for pid=4414 comm="syz.5.302" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 58.954359][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 59.002768][ T4429] loop3: detected capacity change from 0 to 512 [ 59.014698][ T4429] EXT4-fs: test_dummy_encryption option not supported [ 59.499561][ T4439] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 59.559464][ T4446] __nla_validate_parse: 1 callbacks suppressed [ 59.559533][ T4446] netlink: 8 bytes leftover after parsing attributes in process `syz.3.312'. [ 59.576645][ T4446] loop3: detected capacity change from 0 to 128 [ 59.807430][ T4471] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 60.012132][ T4493] FAULT_INJECTION: forcing a failure. [ 60.012132][ T4493] name failslab, interval 1, probability 0, space 0, times 0 [ 60.012218][ T4493] CPU: 0 UID: 0 PID: 4493 Comm: syz.3.332 Not tainted syzkaller #0 PREEMPT(lazy) [ 60.012306][ T4493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 60.012397][ T4493] Call Trace: [ 60.012403][ T4493] [ 60.012410][ T4493] __dump_stack+0x1d/0x30 [ 60.012511][ T4493] dump_stack_lvl+0x95/0xd0 [ 60.012558][ T4493] dump_stack+0x15/0x1b [ 60.012577][ T4493] should_fail_ex+0x262/0x280 [ 60.012602][ T4493] should_failslab+0x8c/0xb0 [ 60.012633][ T4493] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 60.012672][ T4493] ? sock_alloc_inode+0x36/0xf0 [ 60.012699][ T4493] ? sock_alloc_inode+0x36/0xf0 [ 60.012725][ T4493] ? selinux_socket_create+0xfd/0x180 [ 60.012810][ T4493] ? __pfx_sock_alloc_inode+0x10/0x10 [ 60.012857][ T4493] sock_alloc_inode+0x36/0xf0 [ 60.012884][ T4493] alloc_inode+0x40/0x170 [ 60.012922][ T4493] __sock_create+0x121/0x580 [ 60.012949][ T4493] ? __se_sys_futex+0x2f6/0x370 [ 60.012985][ T4493] __sys_socket+0xaf/0x180 [ 60.013098][ T4493] __x64_sys_socket+0x3f/0x50 [ 60.013141][ T4493] x64_sys_call+0x246e/0x2550 [ 60.013165][ T4493] do_syscall_64+0x112/0x360 [ 60.013187][ T4493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 60.013223][ T4493] RIP: 0033:0x7fcdcebbe159 [ 60.013237][ T4493] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 60.013254][ T4493] RSP: 002b:00007fcdcd617028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 60.013273][ T4493] RAX: ffffffffffffffda RBX: 00007fcdcee45fa0 RCX: 00007fcdcebbe159 [ 60.013287][ T4493] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 60.013327][ T4493] RBP: 00007fcdcec5506b R08: 0000000000000000 R09: 0000000000000000 [ 60.013339][ T4493] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 60.013361][ T4493] R13: 00007fcdcee46038 R14: 00007fcdcee45fa0 R15: 00007ffc061eec48 [ 60.013387][ T4493] [ 60.013421][ T4493] socket: no more sockets [ 60.392265][ T3879] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 60.592435][ T4505] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 60.637979][ T29] audit: type=1326 audit(1790980812.797:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.5.339" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f05ae159 code=0x7ffc0000 [ 60.638309][ T29] audit: type=1326 audit(1790980812.797:686): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.5.339" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88f05ae159 code=0x7ffc0000 [ 60.638470][ T29] audit: type=1326 audit(1790980812.797:687): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.5.339" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f05ae159 code=0x7ffc0000 [ 60.638729][ T29] audit: type=1326 audit(1790980812.797:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.5.339" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f88f05ae159 code=0x7ffc0000 [ 60.638850][ T29] audit: type=1326 audit(1790980812.797:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.5.339" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f05ae159 code=0x7ffc0000 [ 60.639113][ T29] audit: type=1326 audit(1790980812.797:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.5.339" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88f05ae159 code=0x7ffc0000 [ 60.639287][ T29] audit: type=1326 audit(1790980812.797:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.5.339" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f05ae159 code=0x7ffc0000 [ 60.639597][ T29] audit: type=1326 audit(1790980812.797:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.5.339" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f88f05ae159 code=0x7ffc0000 [ 60.639765][ T29] audit: type=1326 audit(1790980812.797:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4508 comm="syz.5.339" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f05ae159 code=0x7ffc0000 [ 60.970181][ T4527] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 61.023173][ T4528] FAULT_INJECTION: forcing a failure. [ 61.023173][ T4528] name failslab, interval 1, probability 0, space 0, times 0 [ 61.023208][ T4528] CPU: 1 UID: 0 PID: 4528 Comm: syz.1.343 Not tainted syzkaller #0 PREEMPT(lazy) [ 61.023241][ T4528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 61.023256][ T4528] Call Trace: [ 61.023264][ T4528] [ 61.023274][ T4528] __dump_stack+0x1d/0x30 [ 61.023305][ T4528] dump_stack_lvl+0x95/0xd0 [ 61.023410][ T4528] dump_stack+0x15/0x1b [ 61.023448][ T4528] should_fail_ex+0x262/0x280 [ 61.023477][ T4528] should_failslab+0x8c/0xb0 [ 61.023512][ T4528] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 61.023607][ T4528] ? sock_alloc_inode+0x36/0xf0 [ 61.023639][ T4528] ? sock_alloc_inode+0x36/0xf0 [ 61.023744][ T4528] ? selinux_socket_create+0xfd/0x180 [ 61.023787][ T4528] ? __pfx_sock_alloc_inode+0x10/0x10 [ 61.023818][ T4528] sock_alloc_inode+0x36/0xf0 [ 61.023849][ T4528] alloc_inode+0x40/0x170 [ 61.023873][ T4528] __sock_create+0x121/0x580 [ 61.023944][ T4528] ? __se_sys_futex+0x2f6/0x370 [ 61.023978][ T4528] ? xfd_validate_state+0x45/0xf0 [ 61.024010][ T4528] __sys_socket+0xaf/0x180 [ 61.024111][ T4528] __x64_sys_socket+0x3f/0x50 [ 61.024144][ T4528] x64_sys_call+0x246e/0x2550 [ 61.024172][ T4528] do_syscall_64+0x112/0x360 [ 61.024234][ T4528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 61.024260][ T4528] RIP: 0033:0x7fd474c6e159 [ 61.024279][ T4528] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.024300][ T4528] RSP: 002b:00007fd4736c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 61.024324][ T4528] RAX: ffffffffffffffda RBX: 00007fd474ef5fa0 RCX: 00007fd474c6e159 [ 61.024412][ T4528] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 61.024426][ T4528] RBP: 00007fd474d0506b R08: 0000000000000000 R09: 0000000000000000 [ 61.024441][ T4528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.024532][ T4528] R13: 00007fd474ef6038 R14: 00007fd474ef5fa0 R15: 00007ffd14d65bb8 [ 61.024555][ T4528] [ 61.025548][ T4528] socket: no more sockets [ 61.313910][ T4538] netlink: 'syz.2.351': attribute type 1 has an invalid length. [ 61.351051][ T4538] 8021q: adding VLAN 0 to HW filter on device bond1 [ 61.596070][ T4544] loop2: detected capacity change from 0 to 512 [ 61.632221][ T4544] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.354: iget: bad extended attribute block 134217728 [ 61.632286][ T4544] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 61.635986][ C0] EXT4-fs (loop2): error count since last fsck: 1 [ 61.636012][ C0] EXT4-fs (loop2): initial error at time 1790980813: ext4_orphan_get:1403: inode 15 [ 61.636051][ C0] EXT4-fs (loop2): last error at time 1790980813: ext4_orphan_get:1403: inode 15 [ 61.690954][ T4544] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.354: couldn't read orphan inode 15 (err -117) [ 61.690992][ T4544] loop2: lost filesystem error report for type 5 error -117 [ 61.693564][ T4544] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 62.896522][ T4569] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 63.057865][ T4594] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 63.117755][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.196503][ T4614] loop5: detected capacity change from 0 to 256 [ 63.197713][ T4614] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 63.236360][ T4008] FAT-fs (loop5): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 63.267003][ T4619] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 63.344797][ T4630] loop3: detected capacity change from 0 to 512 [ 63.352989][ T4630] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.391: iget: bad extended attribute block 134217728 [ 63.353025][ T4630] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 63.353486][ T4630] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.391: couldn't read orphan inode 15 (err -117) [ 63.353530][ T4630] loop3: lost filesystem error report for type 5 error -117 [ 63.357487][ T4630] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.410792][ T4633] loop5: detected capacity change from 0 to 1024 [ 63.411167][ T4633] EXT4-fs: Ignoring removed oldalloc option [ 63.411204][ T4633] EXT4-fs: Ignoring removed orlov option [ 63.421087][ T4633] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 63.681561][ T4645] loop2: detected capacity change from 0 to 256 [ 63.698487][ T4645] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 63.765547][ T101] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 63.935222][ T4649] FAULT_INJECTION: forcing a failure. [ 63.935222][ T4649] name failslab, interval 1, probability 0, space 0, times 0 [ 63.935259][ T4649] CPU: 0 UID: 0 PID: 4649 Comm: syz.2.398 Not tainted syzkaller #0 PREEMPT(lazy) [ 63.935391][ T4649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 63.935404][ T4649] Call Trace: [ 63.935411][ T4649] [ 63.935421][ T4649] __dump_stack+0x1d/0x30 [ 63.935447][ T4649] dump_stack_lvl+0x95/0xd0 [ 63.935469][ T4649] dump_stack+0x15/0x1b [ 63.935496][ T4649] should_fail_ex+0x262/0x280 [ 63.935566][ T4649] ? security_inode_alloc+0x37/0x100 [ 63.935709][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 63.935796][ T4649] should_failslab+0x8c/0xb0 [ 63.935869][ T4649] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 63.935913][ T4649] ? security_inode_alloc+0x37/0x100 [ 63.935951][ T4649] security_inode_alloc+0x37/0x100 [ 63.935992][ T4649] inode_init_always_gfp+0x495/0x4e0 [ 63.936086][ T4649] ? __pfx_sock_alloc_inode+0x10/0x10 [ 63.936128][ T4649] alloc_inode+0x58/0x170 [ 63.936157][ T4649] __sock_create+0x121/0x580 [ 63.936291][ T4649] ? xfd_validate_state+0x45/0xf0 [ 63.936332][ T4649] __sys_socket+0xaf/0x180 [ 63.936412][ T4649] __x64_sys_socket+0x3f/0x50 [ 63.936505][ T4649] x64_sys_call+0x246e/0x2550 [ 63.936541][ T4649] do_syscall_64+0x112/0x360 [ 63.936632][ T4649] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.936718][ T4649] RIP: 0033:0x7ff241d3e159 [ 63.936738][ T4649] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.936764][ T4649] RSP: 002b:00007ff240797028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 63.936792][ T4649] RAX: ffffffffffffffda RBX: 00007ff241fc5fa0 RCX: 00007ff241d3e159 [ 63.936812][ T4649] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 63.936830][ T4649] RBP: 00007ff241dd506b R08: 0000000000000000 R09: 0000000000000000 [ 63.936863][ T4649] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 63.936942][ T4649] R13: 00007ff241fc6038 R14: 00007ff241fc5fa0 R15: 00007ffd094ce7b8 [ 63.936963][ T4649] [ 63.998924][ T4651] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 64.069632][ T4649] socket: no more sockets [ 64.279982][ T29] kauditd_printk_skb: 397 callbacks suppressed [ 64.280005][ T29] audit: type=1326 audit(1790980816.437:1091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.3.407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcebbe159 code=0x7ffc0000 [ 64.280224][ T29] audit: type=1326 audit(1790980816.437:1092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.3.407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcebbe159 code=0x7ffc0000 [ 64.284564][ T29] audit: type=1326 audit(1790980816.437:1093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.3.407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7fcdcebbe159 code=0x7ffc0000 [ 64.284607][ T29] audit: type=1326 audit(1790980816.437:1094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.3.407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcebbe159 code=0x7ffc0000 [ 64.284682][ T29] audit: type=1326 audit(1790980816.437:1095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.3.407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcebbe159 code=0x7ffc0000 [ 64.284723][ T29] audit: type=1326 audit(1790980816.437:1096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.3.407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcdcebbe159 code=0x7ffc0000 [ 64.284768][ T29] audit: type=1326 audit(1790980816.437:1097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.3.407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcdcebbdec2 code=0x7ffc0000 [ 64.284801][ T29] audit: type=1326 audit(1790980816.437:1098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.3.407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcdceb7e98e code=0x7ffc0000 [ 64.370256][ T4670] loop0: detected capacity change from 0 to 1024 [ 64.374656][ T4670] EXT4-fs: Ignoring removed oldalloc option [ 64.374823][ T4670] EXT4-fs: Ignoring removed orlov option [ 64.379730][ T29] audit: type=1326 audit(1790980816.527:1099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.3.407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fcdcebbdf87 code=0x7ffc0000 [ 64.408486][ T4670] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 64.424216][ T29] audit: type=1326 audit(1790980816.577:1100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4667 comm="syz.3.407" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcdceb7e98e code=0x7ffc0000 [ 64.424855][ T4668] loop3: detected capacity change from 0 to 256 [ 64.507827][ T4668] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 64.634166][ T51] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 64.651491][ T3879] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.343013][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 65.477206][ T4702] FAULT_INJECTION: forcing a failure. [ 65.477206][ T4702] name failslab, interval 1, probability 0, space 0, times 0 [ 65.477237][ T4702] CPU: 1 UID: 0 PID: 4702 Comm: syz.5.414 Not tainted syzkaller #0 PREEMPT(lazy) [ 65.477272][ T4702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 65.477290][ T4702] Call Trace: [ 65.477300][ T4702] [ 65.477313][ T4702] __dump_stack+0x1d/0x30 [ 65.477380][ T4702] dump_stack_lvl+0x95/0xd0 [ 65.477411][ T4702] dump_stack+0x15/0x1b [ 65.477440][ T4702] should_fail_ex+0x262/0x280 [ 65.477532][ T4702] should_failslab+0x8c/0xb0 [ 65.477573][ T4702] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 65.477607][ T4702] ? sock_alloc_inode+0x36/0xf0 [ 65.477697][ T4702] ? sock_alloc_inode+0x36/0xf0 [ 65.477732][ T4702] ? selinux_socket_create+0xfd/0x180 [ 65.477823][ T4702] ? __pfx_sock_alloc_inode+0x10/0x10 [ 65.477857][ T4702] sock_alloc_inode+0x36/0xf0 [ 65.477897][ T4702] alloc_inode+0x40/0x170 [ 65.477999][ T4702] __sock_create+0x121/0x580 [ 65.478040][ T4702] ? __se_sys_futex+0x2f6/0x370 [ 65.478088][ T4702] ? xfd_validate_state+0x45/0xf0 [ 65.478117][ T4702] __sys_socket+0xaf/0x180 [ 65.478155][ T4702] __x64_sys_socket+0x3f/0x50 [ 65.478219][ T4702] x64_sys_call+0x246e/0x2550 [ 65.478300][ T4702] do_syscall_64+0x112/0x360 [ 65.478348][ T4702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.478377][ T4702] RIP: 0033:0x7f88f05ae159 [ 65.478475][ T4702] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 65.478494][ T4702] RSP: 002b:00007f88ef007028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 65.478515][ T4702] RAX: ffffffffffffffda RBX: 00007f88f0835fa0 RCX: 00007f88f05ae159 [ 65.478529][ T4702] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 65.478546][ T4702] RBP: 00007f88f064506b R08: 0000000000000000 R09: 0000000000000000 [ 65.478562][ T4702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 65.478654][ T4702] R13: 00007f88f0836038 R14: 00007f88f0835fa0 R15: 00007ffe6b9d2398 [ 65.478673][ T4702] [ 65.539923][ T4702] socket: no more sockets [ 65.855639][ T4726] loop3: detected capacity change from 0 to 256 [ 65.864643][ T4726] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 65.905080][ T12] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 65.936058][ T4735] netlink: 'syz.0.424': attribute type 1 has an invalid length. [ 65.953121][ T4735] 8021q: adding VLAN 0 to HW filter on device bond2 [ 65.979874][ T4743] netlink: 8 bytes leftover after parsing attributes in process `syz.5.427'. [ 65.984623][ T4740] syzkaller0: entered promiscuous mode [ 65.984650][ T4740] syzkaller0: entered allmulticast mode [ 66.309287][ T4743] loop5: detected capacity change from 0 to 128 [ 66.472088][ T4751] FAULT_INJECTION: forcing a failure. [ 66.472088][ T4751] name failslab, interval 1, probability 0, space 0, times 0 [ 66.472119][ T4751] CPU: 0 UID: 0 PID: 4751 Comm: syz.1.429 Not tainted syzkaller #0 PREEMPT(lazy) [ 66.472220][ T4751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 66.472238][ T4751] Call Trace: [ 66.472247][ T4751] [ 66.472257][ T4751] __dump_stack+0x1d/0x30 [ 66.472292][ T4751] dump_stack_lvl+0x95/0xd0 [ 66.472367][ T4751] dump_stack+0x15/0x1b [ 66.472429][ T4751] should_fail_ex+0x262/0x280 [ 66.472466][ T4751] ? security_inode_alloc+0x37/0x100 [ 66.472505][ T4751] should_failslab+0x8c/0xb0 [ 66.472558][ T4751] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 66.472608][ T4751] ? security_inode_alloc+0x37/0x100 [ 66.472715][ T4751] security_inode_alloc+0x37/0x100 [ 66.472809][ T4751] inode_init_always_gfp+0x495/0x4e0 [ 66.472839][ T4751] ? __pfx_sock_alloc_inode+0x10/0x10 [ 66.472973][ T4751] alloc_inode+0x58/0x170 [ 66.473002][ T4751] __sock_create+0x121/0x580 [ 66.473042][ T4751] ? xfd_validate_state+0x45/0xf0 [ 66.473081][ T4751] __sys_socket+0xaf/0x180 [ 66.473151][ T4751] __x64_sys_socket+0x3f/0x50 [ 66.473205][ T4751] x64_sys_call+0x246e/0x2550 [ 66.473240][ T4751] do_syscall_64+0x112/0x360 [ 66.473280][ T4751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.473356][ T4751] RIP: 0033:0x7fd474c6e159 [ 66.473378][ T4751] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 66.473402][ T4751] RSP: 002b:00007fd4736c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 66.473429][ T4751] RAX: ffffffffffffffda RBX: 00007fd474ef5fa0 RCX: 00007fd474c6e159 [ 66.473450][ T4751] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 66.473503][ T4751] RBP: 00007fd474d0506b R08: 0000000000000000 R09: 0000000000000000 [ 66.473528][ T4751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 66.473545][ T4751] R13: 00007fd474ef6038 R14: 00007fd474ef5fa0 R15: 00007ffd14d65bb8 [ 66.473573][ T4751] [ 66.475016][ T4751] socket: no more sockets [ 66.739789][ T4769] netlink: 96 bytes leftover after parsing attributes in process `syz.3.435'. [ 66.800054][ T4776] loop3: detected capacity change from 0 to 256 [ 66.816075][ T4776] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 66.846870][ T12] FAT-fs (loop3): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 66.893548][ T4785] netlink: 'syz.3.438': attribute type 1 has an invalid length. [ 66.915576][ T4785] 8021q: adding VLAN 0 to HW filter on device bond1 [ 66.942756][ T4790] syzkaller0: entered promiscuous mode [ 66.942859][ T4790] syzkaller0: entered allmulticast mode [ 66.959966][ T4779] loop2: detected capacity change from 0 to 512 [ 66.969197][ T4779] EXT4-fs: test_dummy_encryption option not supported [ 66.972647][ T4779] netlink: 36 bytes leftover after parsing attributes in process `syz.2.437'. [ 67.002479][ T4795] FAULT_INJECTION: forcing a failure. [ 67.002479][ T4795] name failslab, interval 1, probability 0, space 0, times 0 [ 67.002601][ T4795] CPU: 0 UID: 0 PID: 4795 Comm: syz.3.441 Not tainted syzkaller #0 PREEMPT(lazy) [ 67.002625][ T4795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 67.002674][ T4795] Call Trace: [ 67.002682][ T4795] [ 67.002693][ T4795] __dump_stack+0x1d/0x30 [ 67.002727][ T4795] dump_stack_lvl+0x95/0xd0 [ 67.002754][ T4795] dump_stack+0x15/0x1b [ 67.002775][ T4795] should_fail_ex+0x262/0x280 [ 67.002801][ T4795] should_failslab+0x8c/0xb0 [ 67.002874][ T4795] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 67.002909][ T4795] ? sock_alloc_inode+0x36/0xf0 [ 67.002938][ T4795] ? sock_alloc_inode+0x36/0xf0 [ 67.002977][ T4795] ? selinux_socket_create+0xfd/0x180 [ 67.003046][ T4795] ? __pfx_sock_alloc_inode+0x10/0x10 [ 67.003086][ T4795] sock_alloc_inode+0x36/0xf0 [ 67.003136][ T4795] alloc_inode+0x40/0x170 [ 67.003206][ T4795] __sock_create+0x121/0x580 [ 67.003300][ T4795] ? __se_sys_futex+0x2f6/0x370 [ 67.003332][ T4795] ? xfd_validate_state+0x45/0xf0 [ 67.003365][ T4795] __sys_socket+0xaf/0x180 [ 67.003427][ T4795] __x64_sys_socket+0x3f/0x50 [ 67.003474][ T4795] x64_sys_call+0x246e/0x2550 [ 67.003560][ T4795] do_syscall_64+0x112/0x360 [ 67.003606][ T4795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.003637][ T4795] RIP: 0033:0x7fcdcebbe159 [ 67.003688][ T4795] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 67.003707][ T4795] RSP: 002b:00007fcdcd617028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 67.003728][ T4795] RAX: ffffffffffffffda RBX: 00007fcdcee45fa0 RCX: 00007fcdcebbe159 [ 67.003747][ T4795] RDX: 000000000000000c RSI: 0000000000000003 RDI: 0000000000000010 [ 67.003779][ T4795] RBP: 00007fcdcec5506b R08: 0000000000000000 R09: 0000000000000000 [ 67.003794][ T4795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 67.003807][ T4795] R13: 00007fcdcee46038 R14: 00007fcdcee45fa0 R15: 00007ffc061eec48 [ 67.003827][ T4795] [ 67.003852][ T4795] socket: no more sockets [ 67.276058][ T4799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 67.276255][ T4799] ext4 filesystem being mounted at /91/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 67.343098][ T4805] syzkaller0: entered promiscuous mode [ 67.343124][ T4805] syzkaller0: entered allmulticast mode [ 67.372445][ T4805] tipc: Enabled bearer , priority 0 [ 67.373810][ T4800] tipc: Resetting bearer [ 67.390139][ T4800] tipc: Disabling bearer [ 67.444428][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 67.494885][ T4823] netlink: 96 bytes leftover after parsing attributes in process `syz.2.446'. [ 67.562866][ T4830] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'. [ 68.195420][ T4843] syzkaller0: entered promiscuous mode [ 68.195445][ T4843] syzkaller0: entered allmulticast mode [ 68.203169][ T4843] tipc: Enabled bearer , priority 0 [ 68.216099][ T4842] tipc: Resetting bearer [ 68.227430][ T4842] tipc: Disabling bearer [ 68.287054][ T4852] netlink: 48 bytes leftover after parsing attributes in process `syz.5.459'. [ 68.300569][ T4853] netlink: 96 bytes leftover after parsing attributes in process `syz.0.460'. [ 68.361708][ T4857] syzkaller0: entered promiscuous mode [ 68.361743][ T4857] syzkaller0: entered allmulticast mode [ 68.388113][ T4861] netlink: 8 bytes leftover after parsing attributes in process `syz.5.464'. [ 68.389373][ T4857] tipc: Enabled bearer , priority 0 [ 68.392024][ T4856] tipc: Resetting bearer [ 68.395290][ T4856] tipc: Disabling bearer [ 68.407634][ T4861] set_capacity_and_notify: 2 callbacks suppressed [ 68.407687][ T4861] loop5: detected capacity change from 0 to 128 [ 68.550401][ T4873] syzkaller0: entered promiscuous mode [ 68.550422][ T4873] syzkaller0: entered allmulticast mode [ 68.553381][ T4873] tipc: Started in network mode [ 68.553408][ T4873] tipc: Node identity 629284b33ac, cluster identity 4711 [ 68.553443][ T4873] tipc: Enabled bearer , priority 0 [ 68.554804][ T4872] tipc: Resetting bearer [ 68.594463][ T4872] tipc: Disabling bearer [ 68.659374][ T4881] netlink: 96 bytes leftover after parsing attributes in process `syz.1.474'. [ 68.679086][ T4884] netlink: 48 bytes leftover after parsing attributes in process `syz.1.475'. [ 69.382356][ T4909] syzkaller0: entered promiscuous mode [ 69.382376][ T4909] syzkaller0: entered allmulticast mode [ 69.401645][ T4909] tipc: Enabled bearer , priority 0 [ 69.402394][ T4908] tipc: Resetting bearer [ 69.405025][ T4908] tipc: Disabling bearer [ 69.532087][ T29] kauditd_printk_skb: 138 callbacks suppressed [ 69.532108][ T29] audit: type=1326 audit(1790980821.687:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4914 comm="syz.0.487" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4dd7e159 code=0x7ffc0000 [ 69.533168][ T29] audit: type=1326 audit(1790980821.687:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4914 comm="syz.0.487" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fea4dd7e159 code=0x7ffc0000 [ 69.533645][ T29] audit: type=1326 audit(1790980821.687:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4914 comm="syz.0.487" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4dd7e159 code=0x7ffc0000 [ 69.534136][ T29] audit: type=1326 audit(1790980821.687:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4914 comm="syz.0.487" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fea4dd7e159 code=0x7ffc0000 [ 69.534214][ T29] audit: type=1326 audit(1790980821.687:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4914 comm="syz.0.487" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4dd7e159 code=0x7ffc0000 [ 69.534298][ T29] audit: type=1326 audit(1790980821.687:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4914 comm="syz.0.487" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4dd7e159 code=0x7ffc0000 [ 69.534998][ T29] audit: type=1326 audit(1790980821.687:1245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4914 comm="syz.0.487" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fea4dd7e159 code=0x7ffc0000 [ 69.535130][ T29] audit: type=1326 audit(1790980821.687:1246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4914 comm="syz.0.487" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4dd7e159 code=0x7ffc0000 [ 69.542397][ T29] audit: type=1326 audit(1790980821.697:1247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4914 comm="syz.0.487" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fea4dd7e159 code=0x7ffc0000 [ 69.833608][ T29] audit: type=1326 audit(1790980821.987:1248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4931 comm="syz.3.494" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdcebbe159 code=0x7ffc0000 [ 69.901934][ T4938] syzkaller0: entered promiscuous mode [ 69.901989][ T4938] syzkaller0: entered allmulticast mode [ 69.964226][ T4944] syzkaller0: entered promiscuous mode [ 69.964289][ T4944] syzkaller0: entered allmulticast mode [ 69.978623][ T4944] tipc: Enabled bearer , priority 0 [ 69.993917][ T4941] tipc: Resetting bearer [ 70.006796][ T4941] tipc: Disabling bearer [ 70.162902][ T4962] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 70.536201][ T4966] loop3: detected capacity change from 0 to 128 [ 70.630426][ T4970] syzkaller0: entered promiscuous mode [ 70.630777][ T4970] syzkaller0: entered allmulticast mode [ 70.728555][ T4982] syzkaller0: entered promiscuous mode [ 70.728645][ T4982] syzkaller0: entered allmulticast mode [ 70.773332][ T4984] syzkaller0: entered promiscuous mode [ 70.773354][ T4984] syzkaller0: entered allmulticast mode [ 70.777630][ T4984] tipc: Started in network mode [ 70.777702][ T4984] tipc: Node identity baf2103a6d79, cluster identity 4711 [ 70.777738][ T4984] tipc: Enabled bearer , priority 0 [ 70.779102][ T4983] tipc: Resetting bearer [ 70.782551][ T4983] tipc: Disabling bearer [ 70.900932][ T4993] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 70.942075][ T4998] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.942165][ T4998] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.008219][ T5002] loop0: detected capacity change from 0 to 1024 [ 71.031207][ T5002] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.054057][ T5008] syzkaller0: entered promiscuous mode [ 71.054135][ T5008] syzkaller0: entered allmulticast mode [ 71.099639][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.242542][ T5019] tipc: Enabled bearer , priority 0 [ 71.258111][ T5017] tipc: Disabling bearer [ 71.263930][ T5016] syzkaller0: entered promiscuous mode [ 71.263950][ T5016] syzkaller0: entered allmulticast mode [ 71.687483][ T5035] loop2: detected capacity change from 0 to 1024 [ 71.729039][ T5035] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.819004][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.886838][ T5045] syzkaller0: entered promiscuous mode [ 71.886900][ T5045] syzkaller0: entered allmulticast mode [ 72.052858][ T5054] loop1: detected capacity change from 0 to 512 [ 72.070850][ T5057] tipc: Enabled bearer , priority 0 [ 72.080034][ T5056] tipc: Disabling bearer [ 72.112390][ T5063] loop2: detected capacity change from 0 to 256 [ 72.113549][ T5063] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 72.216182][ T5071] __nla_validate_parse: 1 callbacks suppressed [ 72.216204][ T5071] netlink: 28 bytes leftover after parsing attributes in process `syz.1.551'. [ 72.339538][ T12] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1) [ 72.398607][ T5082] loop5: detected capacity change from 0 to 1024 [ 72.408521][ T5082] EXT4-fs: Ignoring removed oldalloc option [ 72.408597][ T5082] EXT4-fs: Ignoring removed orlov option [ 72.444789][ T5082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 72.511711][ T5091] loop0: detected capacity change from 0 to 512 [ 72.568836][ T5094] tipc: Enabled bearer , priority 0 [ 72.589819][ T5093] tipc: Disabling bearer [ 72.786268][ T5107] syzkaller0: entered promiscuous mode [ 72.786301][ T5107] syzkaller0: entered allmulticast mode [ 73.019695][ T3879] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 73.064832][ T5130] FAULT_INJECTION: forcing a failure. [ 73.064832][ T5130] name failslab, interval 1, probability 0, space 0, times 0 [ 73.064866][ T5130] CPU: 0 UID: 0 PID: 5130 Comm: syz.1.573 Not tainted syzkaller #0 PREEMPT(lazy) [ 73.064892][ T5130] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 73.064909][ T5130] Call Trace: [ 73.064917][ T5130] [ 73.064927][ T5130] __dump_stack+0x1d/0x30 [ 73.064981][ T5130] dump_stack_lvl+0x95/0xd0 [ 73.065011][ T5130] dump_stack+0x15/0x1b [ 73.065048][ T5130] should_fail_ex+0x262/0x280 [ 73.065075][ T5130] ? pipapo_maybe_clone+0x74/0x870 [ 73.065103][ T5130] should_failslab+0x8c/0xb0 [ 73.065182][ T5130] __kmalloc_noprof+0xd0/0x4d0 [ 73.065232][ T5130] ? pipapo_maybe_clone+0x74/0x870 [ 73.065267][ T5130] pipapo_maybe_clone+0x74/0x870 [ 73.065457][ T5130] nft_pipapo_insert+0x9a/0xda0 [ 73.065480][ T5130] ? __rcu_read_unlock+0x4e/0x70 [ 73.065548][ T5130] ? nft_set_elem_init+0x7c/0x430 [ 73.065630][ T5130] ? __kmalloc_noprof+0x403/0x4d0 [ 73.065673][ T5130] ? nft_trans_alloc+0x1e/0x100 [ 73.065709][ T5130] ? __kmalloc_noprof+0x403/0x4d0 [ 73.065765][ T5130] nft_setelem_insert+0x6a/0x380 [ 73.065805][ T5130] nf_tables_newsetelem+0x21de/0x2d80 [ 73.065937][ T5130] nfnetlink_rcv+0xbf7/0x1740 [ 73.066037][ T5130] netlink_unicast+0x5a9/0x680 [ 73.066076][ T5130] netlink_sendmsg+0x5be/0x6f0 [ 73.066106][ T5130] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.066131][ T5130] ____sys_sendmsg+0x532/0x580 [ 73.066230][ T5130] ___sys_sendmsg+0x195/0x1e0 [ 73.066276][ T5130] __x64_sys_sendmsg+0xd4/0x160 [ 73.066353][ T5130] x64_sys_call+0x22ab/0x2550 [ 73.066385][ T5130] do_syscall_64+0x112/0x360 [ 73.066410][ T5130] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.066438][ T5130] RIP: 0033:0x7fd474c6e159 [ 73.066460][ T5130] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 73.066563][ T5130] RSP: 002b:00007fd4736c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.066591][ T5130] RAX: ffffffffffffffda RBX: 00007fd474ef5fa0 RCX: 00007fd474c6e159 [ 73.066609][ T5130] RDX: 0000000000000000 RSI: 0000200000000400 RDI: 0000000000000004 [ 73.066626][ T5130] RBP: 00007fd474d0506b R08: 0000000000000000 R09: 0000000000000000 [ 73.066645][ T5130] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 73.066661][ T5130] R13: 00007fd474ef6038 R14: 00007fd474ef5fa0 R15: 00007ffd14d65bb8 [ 73.066712][ T5130] [ 73.316189][ T5134] tipc: Enabled bearer , priority 0 [ 73.326659][ T5133] tipc: Disabling bearer [ 73.847465][ T5158] loop0: detected capacity change from 0 to 1024 [ 73.849678][ T5158] EXT4-fs: Ignoring removed oldalloc option [ 73.849773][ T5158] EXT4-fs: Ignoring removed orlov option [ 73.875631][ T5158] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.440468][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 74.469624][ T5172] tipc: Enabled bearer , priority 0 [ 74.471385][ T5171] tipc: Disabling bearer [ 74.550315][ T5185] loop1: detected capacity change from 0 to 1024 [ 74.550722][ T5185] EXT4-fs: Ignoring removed oldalloc option [ 74.550755][ T5185] EXT4-fs: Ignoring removed orlov option [ 74.584315][ T5185] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.607429][ T29] kauditd_printk_skb: 550 callbacks suppressed [ 74.607465][ T29] audit: type=1400 audit(1790980826.767:1799): avc: denied { write } for pid=5183 comm="syz.1.594" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 74.660657][ T5197] loop3: detected capacity change from 0 to 1024 [ 74.668818][ T5197] EXT4-fs: Ignoring removed oldalloc option [ 74.669002][ T5197] EXT4-fs: Ignoring removed orlov option [ 74.696836][ T5197] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 74.704480][ T29] audit: type=1400 audit(1790980826.857:1800): avc: denied { write } for pid=5196 comm="syz.3.598" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.357816][ T5208] tipc: Enabled bearer , priority 0 [ 75.361788][ T5207] tipc: Disabling bearer [ 75.446248][ T5210] team0: Port device bridge0 removed [ 75.473546][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.540499][ T5218] loop5: detected capacity change from 0 to 512 [ 75.580728][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.667726][ T5232] syzkaller0: entered promiscuous mode [ 75.667751][ T5232] syzkaller0: entered allmulticast mode [ 75.746612][ T5239] loop3: detected capacity change from 0 to 1024 [ 75.755515][ T5240] tipc: Enabled bearer , priority 0 [ 75.774781][ T5237] tipc: Disabling bearer [ 75.784642][ T5239] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 75.815848][ T29] audit: type=1400 audit(1790980827.967:1801): avc: denied { write } for pid=5238 comm="syz.3.611" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 75.980795][ T5248] team0: Port device bridge0 removed [ 76.258030][ T5266] tipc: Enabled bearer , priority 0 [ 76.260045][ T5265] tipc: Disabling bearer [ 76.444859][ T5276] syzkaller0: entered promiscuous mode [ 76.444886][ T5276] syzkaller0: entered allmulticast mode [ 76.459120][ T29] audit: type=1326 audit(1790980828.617:1802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5278 comm="syz.5.629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f05ae159 code=0x7ffc0000 [ 76.459428][ T29] audit: type=1326 audit(1790980828.617:1803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5278 comm="syz.5.629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88f05ae159 code=0x7ffc0000 [ 76.459674][ T29] audit: type=1326 audit(1790980828.617:1804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5278 comm="syz.5.629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f05ae159 code=0x7ffc0000 [ 76.459926][ T29] audit: type=1326 audit(1790980828.617:1805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5278 comm="syz.5.629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f88f05ae159 code=0x7ffc0000 [ 76.460117][ T29] audit: type=1326 audit(1790980828.617:1806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5278 comm="syz.5.629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f05ae159 code=0x7ffc0000 [ 76.460392][ T29] audit: type=1326 audit(1790980828.617:1807): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5278 comm="syz.5.629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f88f05ae159 code=0x7ffc0000 [ 76.460648][ T29] audit: type=1326 audit(1790980828.617:1808): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5278 comm="syz.5.629" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f88f05ae159 code=0x7ffc0000 [ 76.787424][ T5282] team0: Port device bridge0 removed [ 76.883666][ T5287] loop5: detected capacity change from 0 to 512 [ 76.893964][ T5287] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.633: iget: bad extended attribute block 134217728 [ 76.893996][ T5287] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 76.894265][ T5287] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.633: couldn't read orphan inode 15 (err -117) [ 76.894300][ T5287] loop5: lost filesystem error report for type 5 error -117 [ 76.894833][ T5287] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 76.999506][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.054902][ T5302] loop1: detected capacity change from 0 to 1024 [ 77.072219][ T5302] EXT4-fs: Ignoring removed oldalloc option [ 77.072311][ T5302] EXT4-fs: Ignoring removed orlov option [ 77.088310][ T5300] tipc: Enabled bearer , priority 0 [ 77.106069][ T5299] tipc: Disabling bearer [ 77.117903][ T5302] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.185982][ T5293] EXT4-fs error (device loop5): ext4_validate_block_bitmap:445: comm ext4lazyinit: bg 0: block 465: padding at end of block bitmap is not set [ 77.259902][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 77.353636][ T5311] syzkaller0: entered promiscuous mode [ 77.353662][ T5311] syzkaller0: entered allmulticast mode [ 77.494762][ T5332] tipc: Enabled bearer , priority 0 [ 77.496764][ T5330] tipc: Disabling bearer [ 77.523575][ T5333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.649'. [ 77.550230][ T5333] loop0: detected capacity change from 0 to 128 [ 77.570132][ T5335] loop3: detected capacity change from 0 to 1024 [ 77.570520][ T5335] EXT4-fs: Ignoring removed oldalloc option [ 77.570555][ T5335] EXT4-fs: Ignoring removed orlov option [ 77.600445][ T5335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 77.686832][ T3879] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.194828][ T5353] syzkaller0: entered promiscuous mode [ 78.194931][ T5353] syzkaller0: entered allmulticast mode [ 78.374491][ T5374] netlink: 8 bytes leftover after parsing attributes in process `syz.5.667'. [ 78.453285][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 78.470302][ T5380] netlink: 8 bytes leftover after parsing attributes in process `syz.5.670'. [ 78.495124][ T5380] loop5: detected capacity change from 0 to 128 [ 78.625686][ T5383] team0: Port device bridge0 removed [ 78.757274][ T5395] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.757316][ T5395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.757479][ T5395] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.757521][ T5395] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.759564][ T5395] team0: Port device bridge0 added [ 78.852389][ T5401] EXT4-fs error (device loop2): ext4_orphan_get:1403: inode #15: comm syz.2.680: iget: bad extended attribute block 134217728 [ 78.852431][ T5401] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 78.852569][ T5401] EXT4-fs error (device loop2): ext4_orphan_get:1408: comm syz.2.680: couldn't read orphan inode 15 (err -117) [ 78.852603][ T5401] loop2: lost filesystem error report for type 5 error -117 [ 78.853286][ T5401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 78.961491][ T5410] set_capacity_and_notify: 1 callbacks suppressed [ 78.961509][ T5410] loop5: detected capacity change from 0 to 1024 [ 79.004819][ T5410] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 79.044208][ T5418] netlink: 8 bytes leftover after parsing attributes in process `syz.0.687'. [ 79.058054][ T5418] loop0: detected capacity change from 0 to 128 [ 79.257571][ T5431] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.257618][ T5431] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.257784][ T5431] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.257885][ T5431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.259730][ T5431] team0: Port device bridge0 added [ 79.380724][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.679702][ T5454] netlink: 8 bytes leftover after parsing attributes in process `syz.2.702'. [ 79.699501][ T5454] loop2: detected capacity change from 0 to 128 [ 79.842099][ T3879] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.931430][ T5464] loop5: detected capacity change from 0 to 512 [ 79.950117][ T5464] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.707: iget: bad extended attribute block 134217728 [ 79.950148][ T5464] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 79.951919][ T5464] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.707: couldn't read orphan inode 15 (err -117) [ 79.951956][ T5464] loop5: lost filesystem error report for type 5 error -117 [ 79.953912][ T5464] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 80.087344][ T29] kauditd_printk_skb: 405 callbacks suppressed [ 80.087363][ T29] audit: type=1326 audit(1790980832.247:2214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5470 comm="syz.2.710" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff241d3e159 code=0x7ffc0000 [ 80.087391][ T29] audit: type=1326 audit(1790980832.247:2215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5470 comm="syz.2.710" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff241d3e159 code=0x7ffc0000 [ 80.092325][ T29] audit: type=1326 audit(1790980832.247:2216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5470 comm="syz.2.710" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff241d3e159 code=0x7ffc0000 [ 80.092367][ T29] audit: type=1326 audit(1790980832.247:2217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5470 comm="syz.2.710" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff241d3e159 code=0x7ffc0000 [ 80.092399][ T29] audit: type=1326 audit(1790980832.247:2218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5470 comm="syz.2.710" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff241d3e159 code=0x7ffc0000 [ 80.130525][ T29] audit: type=1326 audit(1790980832.257:2219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5470 comm="syz.2.710" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7ff241d3e159 code=0x7ffc0000 [ 80.130638][ T29] audit: type=1326 audit(1790980832.257:2220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5470 comm="syz.2.710" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff241d3e159 code=0x7ffc0000 [ 80.130731][ T29] audit: type=1326 audit(1790980832.257:2221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5470 comm="syz.2.710" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff241d3e159 code=0x7ffc0000 [ 80.133410][ T29] audit: type=1326 audit(1790980832.287:2222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5470 comm="syz.2.710" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7ff241d3e159 code=0x7ffc0000 [ 80.133500][ T29] audit: type=1326 audit(1790980832.287:2223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5470 comm="syz.2.710" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff241d3e159 code=0x7ffc0000 [ 80.378349][ T5479] syzkaller0: entered promiscuous mode [ 80.378370][ T5479] syzkaller0: entered allmulticast mode [ 80.415371][ T5485] netlink: 8 bytes leftover after parsing attributes in process `syz.2.715'. [ 80.427153][ T5485] loop2: detected capacity change from 0 to 128 [ 80.483039][ T5489] loop3: detected capacity change from 0 to 1024 [ 80.484401][ T3879] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 80.499205][ T5489] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 80.652030][ T5507] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 80.741278][ T5515] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 81.331830][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 81.594661][ T5523] loop3: detected capacity change from 0 to 512 [ 81.604323][ T5523] EXT4-fs error (device loop3): ext4_orphan_get:1403: inode #15: comm syz.3.728: iget: bad extended attribute block 134217728 [ 81.604367][ T5523] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 81.604630][ T5523] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.728: couldn't read orphan inode 15 (err -117) [ 81.604655][ T5523] loop3: lost filesystem error report for type 5 error -117 [ 81.605253][ T5523] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 82.121961][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 82.140267][ T5527] netlink: 8 bytes leftover after parsing attributes in process `syz.3.729'. [ 82.142458][ T5527] loop3: detected capacity change from 0 to 128 [ 83.598156][ T5502] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 83.689910][ T5534] netlink: 8 bytes leftover after parsing attributes in process `syz.1.732'. [ 83.719460][ T5541] loop5: detected capacity change from 0 to 1024 [ 83.741418][ T5541] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 83.930726][ T5562] loop1: detected capacity change from 0 to 512 [ 84.355256][ T5562] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 84.365054][ T5562] EXT4-fs (loop1): 1 truncate cleaned up [ 84.366247][ T5562] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.493062][ T5568] loop0: detected capacity change from 0 to 512 [ 84.514033][ T5568] EXT4-fs error (device loop0): ext4_orphan_get:1403: inode #15: comm syz.0.744: iget: bad extended attribute block 134217728 [ 84.514093][ T5568] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 84.514981][ T5568] EXT4-fs error (device loop0): ext4_orphan_get:1408: comm syz.0.744: couldn't read orphan inode 15 (err -117) [ 84.515032][ T5568] loop0: lost filesystem error report for type 5 error -117 [ 84.528993][ C0] EXT4-fs (loop0): error count since last fsck: 2 [ 84.529018][ C0] EXT4-fs (loop0): initial error at time 1790980836: ext4_orphan_get:1403: inode 15 [ 84.529050][ C0] EXT4-fs (loop0): last error at time 1790980836: ext4_orphan_get:1408 [ 84.584387][ T5568] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 84.619356][ T3879] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.746644][ T5576] loop3: detected capacity change from 0 to 1024 [ 84.749772][ T5576] EXT4-fs: Ignoring removed oldalloc option [ 84.749809][ T5576] EXT4-fs: Ignoring removed orlov option [ 84.777264][ T5576] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.191158][ T3296] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.356580][ T3297] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 85.482070][ T5600] netlink: 8 bytes leftover after parsing attributes in process `syz.3.754'. [ 85.489875][ T5600] loop3: detected capacity change from 0 to 128 [ 85.507046][ T5602] loop2: detected capacity change from 0 to 1024 [ 85.520647][ T5602] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 85.526114][ T29] kauditd_printk_skb: 83 callbacks suppressed [ 85.526164][ T29] audit: type=1400 audit(1790980837.677:2307): avc: denied { write } for pid=5601 comm="syz.2.755" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 85.751222][ T5607] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 86.138505][ T5602] ================================================================== [ 86.138536][ T5602] BUG: KCSAN: data-race in file_write_and_wait_range / xas_set_mark [ 86.138568][ T5602] [ 86.138575][ T5602] write to 0xffff8881075a772c of 4 bytes by task 5605 on cpu 1: [ 86.138604][ T5602] xas_set_mark+0x12b/0x140 [ 86.138633][ T5602] tag_pages_for_writeback+0xe3/0x2e0 [ 86.138690][ T5602] ext4_do_writepages+0x6b4/0x2870 [ 86.138716][ T5602] ext4_writepages+0x191/0x300 [ 86.138750][ T5602] do_writepages+0x1b9/0x300 [ 86.138791][ T5602] file_write_and_wait_range+0x178/0x2f0 [ 86.138820][ T5602] ext4_sync_file+0x114/0x5c0 [ 86.138859][ T5602] vfs_fsync_range+0xc5/0xe0 [ 86.138893][ T5602] ext4_buffered_write_iter+0x427/0x480 [ 86.138929][ T5602] ext4_file_write_iter+0x36e/0x1020 [ 86.138959][ T5602] iter_file_splice_write+0x6a0/0xa60 [ 86.138982][ T5602] direct_splice_actor+0x158/0x280 [ 86.139002][ T5602] splice_direct_to_actor+0x2f9/0x680 [ 86.139033][ T5602] do_splice_direct+0x119/0x1a0 [ 86.139060][ T5602] do_sendfile+0x37d/0x640 [ 86.139089][ T5602] __x64_sys_sendfile64+0x105/0x150 [ 86.139110][ T5602] x64_sys_call+0x1015/0x2550 [ 86.139135][ T5602] do_syscall_64+0x112/0x360 [ 86.139156][ T5602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.139185][ T5602] [ 86.139193][ T5602] read to 0xffff8881075a772c of 4 bytes by task 5602 on cpu 0: [ 86.139215][ T5602] file_write_and_wait_range+0x130/0x2f0 [ 86.139252][ T5602] ext4_sync_file+0x114/0x5c0 [ 86.139290][ T5602] vfs_fsync_range+0xc5/0xe0 [ 86.139322][ T5602] ext4_buffered_write_iter+0x427/0x480 [ 86.139362][ T5602] ext4_file_write_iter+0x36e/0x1020 [ 86.139398][ T5602] iter_file_splice_write+0x6a0/0xa60 [ 86.139426][ T5602] direct_splice_actor+0x158/0x280 [ 86.139461][ T5602] splice_direct_to_actor+0x2f9/0x680 [ 86.139496][ T5602] do_splice_direct+0x119/0x1a0 [ 86.139524][ T5602] do_sendfile+0x37d/0x640 [ 86.139545][ T5602] __x64_sys_sendfile64+0x105/0x150 [ 86.139565][ T5602] x64_sys_call+0x1015/0x2550 [ 86.139589][ T5602] do_syscall_64+0x112/0x360 [ 86.139615][ T5602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.139639][ T5602] [ 86.139644][ T5602] value changed: 0x01000021 -> 0x02000021 [ 86.139660][ T5602] [ 86.139665][ T5602] Reported by Kernel Concurrency Sanitizer on: [ 86.139676][ T5602] CPU: 0 UID: 0 PID: 5602 Comm: syz.2.755 Not tainted syzkaller #0 PREEMPT(lazy) [ 86.139700][ T5602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 86.139713][ T5602] ================================================================== [ 86.432408][ T3301] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.450178][ T3302] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.902624][ T5585] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512