last executing test programs: 13m23.535399566s ago: executing program 32 (id=666): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x8010) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000280)={0x0, 0x3, 0x30, 0x7a, 0xfffffffffffffffe}, &(0x7f00000003c0)=0x18) 12m31.948658591s ago: executing program 33 (id=1690): creat(&(0x7f0000001380)='./file0\x00', 0x4) r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000180)='./file0\x00', 0x400017e) removexattr(&(0x7f0000000580)='./file0\x00', &(0x7f0000000640)=@known='system.posix_acl_default\x00') 11m30.934868137s ago: executing program 34 (id=2976): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4c0000001000010027bd70041cd4df2500000000", @ANYRES32=r2, @ANYBLOB="984e0600e96a01002c001280110001006272696467655f736c617665000000001400058005000a00000000000500060001"], 0x4c}, 0x1, 0x0, 0x0, 0x400c000}, 0x200088c2) 11m2.278333707s ago: executing program 35 (id=3288): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x7, 0xe2120, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x4, @perf_config_ext={0x5, 0x10001}, 0xecc8, 0x2b0, 0x0, 0x4, 0x8, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000940)="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", 0x559, r0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000780)={r1, 0x0, 0xffffffbb}, &(0x7f00000007c0)=ANY=[@ANYBLOB='enc=pkcs1 hash=('], 0x0, 0x0) 10m17.073802789s ago: executing program 36 (id=3995): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1, 0x8000000000000003, {}, 0xfd}, 0x18) close(r0) 9m56.649241124s ago: executing program 37 (id=4382): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/sched/filter\x00', 0x1, 0x0) write$binfmt_format(r0, &(0x7f00000000c0)='0\x00', 0x2) 9m21.979391717s ago: executing program 38 (id=4982): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth1_to_bond\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x48, 0x10, 0x401, 0xfffffffe, 0x200, {0x0, 0x0, 0x0, 0x0, 0x10227}, [@IFLA_MASTER={0x8, 0xa, r1}, @IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x840) 8m0.411684795s ago: executing program 39 (id=6412): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/net/bond0/bonding/arp_ip_target\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)="2b3139322e3136382e312e3132f7", 0xe) 7m37.85557193s ago: executing program 40 (id=6974): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x458002, 0x55) unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x200) 6m11.777916562s ago: executing program 41 (id=8173): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[], 0xa4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000001100000000000a20000000000a01"], 0xa4}}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40008d0}, 0x40) 6m10.400785518s ago: executing program 42 (id=8195): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x201, 0x1, 0x8004}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040084) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {}, {0x2, 0xfff1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x4008000) 5m15.1314592s ago: executing program 43 (id=9190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000cc0)=ANY=[@ANYBLOB="000086dd0203050009000a004000683739ed002889fffe8000000000000000000000000000aaff020000000000000000000000000001"], 0xfdef) 5m4.016165459s ago: executing program 44 (id=9269): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000180)={r2, 0x6}, &(0x7f00000001c0)=0x8) 4m17.84669456s ago: executing program 4 (id=9981): capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000fe4000/0x11000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ff1000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) openat$zero(0xffffffffffffff9c, &(0x7f0000000080), 0x500, 0x0) io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xcf67, 0x1f480, 0x0, 0x399}) 4m17.83414719s ago: executing program 4 (id=9982): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@barrier}]}, 0x4, 0x523, &(0x7f0000000540)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x10b442, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x42, 0xe) fallocate(r0, 0x0, 0x0, 0x8ffff) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000040)={0x0, r0, 0x1, 0x7, 0x4, 0x1000000000001}) 4m17.665621793s ago: executing program 4 (id=9983): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x131d0ea, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x6, 0x2c1, &(0x7f0000000540)="$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") r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') sendmsg$802154_dgram(r0, &(0x7f0000000480)={&(0x7f0000000100)={0x24, @short={0x2, 0xffff, 0xfffe}}, 0x14, &(0x7f0000000440)={&(0x7f0000000340)="9fa388d369b4f03f4b163f78102b02f43f1d32b266423278cf3fe5d7f4d4d5006a3dcd3633865a182b38c0cf114133f72753fc65cf71278f3921f7a1986eb5820888edeae05eb0c1b89c9796a15d15d2e73e5ca44da2309c43f6b02716452104049c2913e2324592a9e3509768b91e64668a21e19de93e29c090b8be0c418ea7b8365f8f", 0x84}, 0x1, 0x0, 0x0, 0x24000000}, 0x840) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) read$msr(r0, &(0x7f0000000d40)=""/43, 0x2b) 4m17.442359027s ago: executing program 4 (id=9984): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000080)='tmpfs\x00', 0x8c9b, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x9801) move_mount(r0, 0x0, 0xffffffffffffff9c, 0x0, 0x44) 4m17.387319818s ago: executing program 4 (id=9985): r0 = fsopen(&(0x7f00000000c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat$cgroup_subtree(r1, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000040)={[{0x2b, 'rdma'}, {0x2b, 'cpuset'}]}, 0xe) 4m16.811471579s ago: executing program 4 (id=9991): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x6, 0x4c032, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_bp={0x0, 0xe}, 0x2000, 0x8b, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) 4m16.75072544s ago: executing program 45 (id=9991): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x6, 0x4c032, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x1, @perf_bp={0x0, 0xe}, 0x2000, 0x8b, 0x0, 0x2, 0x1, 0x3, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0x3) 3m21.458029312s ago: executing program 9 (id=10990): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x7) llistxattr(&(0x7f0000002e00)='./file0\x00', 0x0, 0x0) 3m21.383068634s ago: executing program 9 (id=10992): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000300)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90e, &(0x7f0000000400)={[{@init_itable_val={'init_itable', 0x3d, 0x957}}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2a}}, {@stripe={'stripe', 0x3d, 0x8}}, {@orlov}, {@resgid={'resgid', 0x3d, 0xee00}}]}, 0x4, 0x46f, &(0x7f0000000780)="$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") r0 = socket(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e2b, 0x42003, @local, 0x4}, 0x1c) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') sendfile(r0, r1, 0x0, 0xffffffff) 3m21.149542308s ago: executing program 9 (id=10995): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10) sendto$inet(r0, &(0x7f0000000140)="8495c6c69275", 0x6, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) shutdown(r0, 0x1) recvfrom$inet(r0, 0x0, 0xcb2f7236, 0x43, 0x0, 0x0) 3m20.761080496s ago: executing program 9 (id=11007): syz_mount_image$ext4(&(0x7f0000000700)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x2, &(0x7f0000000740), 0x7, 0x4f5, &(0x7f0000000800)="$eJzs3E9sFFUcAODfbLe0hSIVEaWiFtHYaGyhoHAwMRhNPGhixIMem7YQZKGmrYkQAkti8GhIvBrj0asHr2q8GE4mXvFoYkiI4QJ4WjO7s+12O136Z9tK+33Jsu/NvJn33r55s2/eYxvAljWQ/pNE9EbEzYjYFRGF5gQDtbd7dy6N3b9zaSzKlcrJf5L0sLibxjNJ9r4jiwwWIgpfJHM7GkxfuHh2tFSamMriwzPnPh2evnDxlTPnRk9PnJ44P3L8+NEjh4+9NvLq8iuVk19ar7v9lyf373vn4+vvjRXr27uz98Z6tMtADOQVpeqFdme2wXY2hJNiq5RvrH1hWLL0+k+bq7Pa/3dFR7RsPGATqVQqla4s3Llwd7nS7OqCLcBDK4mNLgGwMepf9Onzb/2VN07YtnZDkA11+0TtASit973sFfFsdWN9HqSz6fm2nQaiGB+V//02faXx4hrMQwAANPr5RH0k2DT+64vY25DukWwNpS8iHo2I3RHxWETsiYjHo5b2iYh4sun8HRFRaZH/QFN84fizcGt1NWwtHf+9nq1tzY3/onEVrK8ji+2MqA+YJw5ln8lgdHadOlOaONwij1/e+uOrxfal9a+P/9JXmn99LJiV41axa/4x46MzoyuucJPbVyP6i831T4oRyexKQBIR+yKi/9dvlnzevobwmZe+3z8baZpkfHD9qyq562htWKqofBfxYq39yzGv/edyTFqvTw53R2ni0HB6FRzKzePG79fez9ueLKX+P/7VfNjbx346mfWs1Uvbf3vD9R/19du5+vclEcnseu30Iie6snge1/78ctFnmpVe/9uSD3ui4bn089GZmanDEduSd2PB9pHZZd56vPoe5Vr9Bw/m9//d2THpJ/FURKQX8dMR8UzUnhAHonLlQEQ8FxEHF69+/Pbm85+svP5rK63/eO79b177z63Xp4F069S8LaOlpFxLPbdlNtBx9sDN+/35+S+t/Y9WQ4PZlvz7XzLvFrGwFPmBVX58AAAA8FAoRERvw1xSbxQKQ0O1OaA9sb1QmpyeeTmZ/Oz8eO03An0NaWvzwZ1Jff6zryE+0hQ/ks0bf93RU40PjU2WxjeozkDNjmqfTwpDs/eCWv9P/d2eKWbg/8xPfmDrelD/33t9nQoCrDvf/7BVTV1uiJQXSVT2P2Vgc1rK97+5QNic8vp/i//P7YEBNomK7gxb2nL6//y0N3a1vTDAuirGB7PhwoaWBFhvxv+wJS3pR/IrDlS68nd1x8LE0d36hB2xsmL05OS1IYF0ZLXK89RbbXlH9eTuKrY+qv7XFBZNE4XlFb5r7k9GJKtp01Orb4vTe9t98XdWsvWxdl82P6xJP31g454dLbW+b4z0tv1WBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAsCb+CwAA//+0FNMg") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x400c4d06, &(0x7f0000000a00)) 3m20.50551356s ago: executing program 9 (id=11000): perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x8, 0x520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, @perf_config_ext={0x2, 0x8}, 0x10ecc8, 0x2c65, 0x0, 0x5, 0x5, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = socket$kcm(0x28, 0x1, 0x0) close(r0) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)=[{&(0x7f0000000500)="5c00000013006bec9e3be35c6e17aa31076b87670d000000ba090000160af3653c001ac00400020208003800000001a12c000000eeb556a705251e618294ff0051f60a84c9f4d4938037e786a6d0000300000000000000ffffc6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2000c090) 3m17.454711738s ago: executing program 9 (id=11040): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000001c0)={[{@nodiscard}, {@errors_remount}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@delalloc}, {@data_err_ignore}]}, 0x1, 0x571, &(0x7f0000000780)="$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") ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, &(0x7f0000000100)={0x1fffffff803, 0xfffffffffffffffd, 0x0, 0x7fff}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40283) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000002280)={0x0, 0x5, 0xe08}) 3m17.451073628s ago: executing program 46 (id=11040): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x2008042, &(0x7f00000001c0)={[{@nodiscard}, {@errors_remount}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@delalloc}, {@data_err_ignore}]}, 0x1, 0x571, &(0x7f0000000780)="$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") ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020660b, &(0x7f0000000100)={0x1fffffff803, 0xfffffffffffffffd, 0x0, 0x7fff}) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x33ed0000) r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x40283) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000002280)={0x0, 0x5, 0xe08}) 2m35.819178312s ago: executing program 1 (id=11693): bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="230000000800000002000000ffff000005"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r0}, &(0x7f0000000280), &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3fff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x52, '\x00', 0x0, @fallback=0x9af8dba271b76fd5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r1}, 0xc) 2m35.763362753s ago: executing program 1 (id=11695): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000006000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0x1ce7, &(0x7f0000000040)={0x0, 0xe9f9, 0x4480, 0x1, 0x18d}) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00') preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/106, 0x6a}], 0x1, 0x4, 0x0) 2m35.682917245s ago: executing program 1 (id=11697): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = socket(0xa, 0x3, 0x87) sendto(r1, &(0x7f00000003c0)="e1118ce4769b", 0xfdef, 0x800, &(0x7f0000000600)=@l2tp6={0xa, 0x0, 0x7, @local, 0x5}, 0x80) ioctl$int_in(r1, 0x5452, &(0x7f0000000100)=0x2) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 2m35.590197036s ago: executing program 1 (id=11698): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000001940)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000002200)=[{{0x0, 0x0, 0x0}}], 0x40000000000027f, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 2m35.574441737s ago: executing program 1 (id=11700): mkdir(&(0x7f0000001a80)='./file0\x00', 0x18b) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) mount$bpf(0x0, &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x24000, 0x0) mount$bpf(0x200000000000, &(0x7f0000000000)='.\x00', 0x0, 0x8b7848, 0x0) 2m35.552671697s ago: executing program 1 (id=11701): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x29) write(r0, &(0x7f0000000000)='7', 0x1) socket$inet_sctp(0x2, 0x1, 0x84) 2m20.500798241s ago: executing program 47 (id=11701): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x29) write(r0, &(0x7f0000000000)='7', 0x1) socket$inet_sctp(0x2, 0x1, 0x84) 1m46.335208565s ago: executing program 0 (id=12500): r0 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000940)={&(0x7f00000001c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0xa}}, 0x10, 0x0}, 0x30004081) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000002c0)="5c00000012006bab9e3fe3d86e6c1d000014a10da6000000000004b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64e9f4080003000601000004000200d700b2b7", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x4080) 1m45.495710811s ago: executing program 0 (id=12515): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) syz_emit_ethernet(0x36, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x5, 0x0, @dev={0xac, 0x14, 0x14, 0x32}, @private=0xa010100}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x0, 0xfffd}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}}, 0x0) 1m44.566605739s ago: executing program 0 (id=12529): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syslog(0x2, &(0x7f00000001c0)=""/229, 0xe5) 1m43.93261055s ago: executing program 0 (id=12547): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000edf000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0xa, 0x20002f7}) perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0xe4010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_bp={0x0, 0xc}, 0x82, 0x0, 0x0, 0x6, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'wlan1\x00', 0x0}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1m43.879721301s ago: executing program 0 (id=12548): perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x22, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, @perf_bp={0x0, 0x3}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0x4000000007, 0x520, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x4, @perf_config_ext={0x7fffffffffffffff, 0x1400000000000}, 0x10acc8, 0x1224, 0x0, 0x5, 0x3, 0x20005, 0x7, 0x0, 0x0, 0x0, 0x2000001020000001}, 0x0, 0xffdfffffffffffff, 0xffffffffffffffff, 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x180) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x38b1012, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='//sys\x00\x00\x00\x00\x00\x00\x80\x004\x00\x00s/\x92ync_\x93\x96\xff\x92\xaf\x00Se\xf44.\x00'/49}, 0x30) mount$bpf(0x200000000000, &(0x7f0000000200)='./file0\x00', 0x0, 0x206002, 0x0) 1m43.731926434s ago: executing program 0 (id=12552): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) unshare(0x2000400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0}}, 0x10) 1m28.58368006s ago: executing program 48 (id=12552): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000010000000bfa300000000000007030000f0ffffff7a0af0ff0000000079a4f0ff00000000b706000000000081ad64020000000000450404000100ff0f1704000001130a00b7050000010000006a0af2fe0000000085000000a3000000b700000000000000950000000000000000e154cd8445974b26c933f7ffffffffe4fbffffff55bb2007ee51050512b5b42128aa090a79507df79f298129daa7a6b2f91af50342115e17392ac627c87867c000006146001e04aeacea799a22a2fa798b5adc43eb27d53319d0ad229e5752548300000000dbc2777df150b7cdd77b2314fd085f028f2ed1a4535550614e09d6378198a6097a670838337af2abd55a87ac0394b2f92ffab7d153d62058d0a413b2173619ccf55520f22c9ca8b6712f3024b7041b1df65b3e1b9bf115646d14ce53d13d0ccacda1ef0900094fa737c28b99938512c816fdcceaede3faedc51d29a47fc813a2ec00f4c7a53ac271d6d7f4ea6bf97f2f33e2ea2e534300bcb3fdc4b4861004eefbda7f54f82a804da4f86bb47a4a69bf9bc5fa96ee293fbd165a5a68488e40b030166565a097b1b44b451de736bb6d43db8dd63d4b77b206000000000000e254a6d491b849a5a787e814c4fd21a18986252a70f8f92eb6f0e8c7db4bf23242a1f2c28159f09943b1b0452d1b72183aacf4a84f9130b775dd4e9e3070756f97ad91935a6ddfa8f90e79321a0574fb30ff0000001989328c8ddc20ea011bf5742e0e0d4334db8b20ce3f9f16cb7fc20fb4791ec85821d0c48fb657c29b309c73f0977e7cde65a82b94c461d7962b0d2277a84af326f3813e2c25a61ec45c3af9948f17da954aff3fc8c108755f75ca13fb7c8bbd8b6e7dac1aba4b20dc7de058a4dfa7e85a8bdf1d41a2d8bda74d66f47cc180f82c5f573c6d294d3665016ac59dda0fde4745db06753a7ac74a2d32f7528751313694bf5700b20ef0c248ddd3da32396a614cacad4aff2066bb5d4045c958559b7dcb98a6273b8c651e24d9f679e4fbe948dfb4cc4a389469600241730459f0123fd39206000000000000eb55dad46de56ef907b059b90b8aa49afb9a79ae5498f6589880ed6eea7b9c670012be05e7de0940313c5870786554df26236ebced9390cb6941b8375d936a7d2120eca291963eb2d537d8ee4de5c12e28ef97d9ebd9c77f1774cf4683c960119451c31539b22809e1d7f0cda06a9fa87d64cb77872a2cd8a104e16bb1a2bacf13464ca03aff14a9aa4bd9539f5096412b92012e095b84c20243ff98df3347f011000000f27e3c33269c0e153b28b2d4410572bc45b9d3fa02208d304d455c36300000000022320178b00cc6ed7966130b547dbf8b497a6103876843ee04ed9ff002000000cd1d00000020000000ef19349ee7f31abc11c800000000000000000000000928ee53595a779d243a48cea769470424d28804c04b2c4324ab7f4a5c81921f0128dfd70b438af60b060000000000000056642b49b745f3bf2cf7908b6d7d748308eea09fc361b4735efbf3411718d6ee7aebf9ef679dbfae9fb4a79f8a836804ed3a1079b0282a12043408cd60b687dcff91af19010000000000000000456f7d2a42bd1304202274f20675eb781925440578e93046aaddea8ec4ca37f71c2710a7ea8ae0dc214e1cc275b26adfa892e6de92000000000000000000ddff004cff9ec780f535e62f4eeee50e5bafecea4d4134f9d006c8d6883eca5c9c58c9e9338c73de2f04f15d005387577f480000ea65559eb00e76e9d0ada201bcbb5c252b28a60ca770663da451790cc36000906d5a9fad98c308e39bd5ffb6151d79c1cee1cd102e3c8e63e9fba05e3633be3f00000015762e5f5a3a0bc33fdbe28a5ffc83f2b485185cc92fe7f791e8f6429309d6adab4b96508e5bf024ed8f8a005f2bbf96c89739f5cf1e750d50517a59a3ad09e8802e8f4f535447cc0fc9d5f99a73145dfcedad69da9cd4375c624600e78f4458542b14f29611f95d4a31838eeb20c20bb82aa31771cd379ec83554cea5e6539db7384e1f58d81f2f2653c4d9818708e25c89b552d7fcd116bce9c764c714c9402c21d1aac59efb28d4f91652f6000000000000000320f8059195729d60c534ee8e8ff0755b67fe4c25edb85bcff24c757aa8090000000000008c420eb4304f66e3a37aaf000000c42a575939206d0c0f0e9dd5fd545470f862f8c3c14fa9ecd1e877b0d8ca84c044859e85e6158f9184bc61a9a284db80e4636c25b96174327d82761c26e329555f9290af4100000000000000ff0ffd3763655500344bae34137f5ab0d534b8d63e4ca3b671f2de1cdf519192c6b59a601fd419adc16e2055b85058f793484305d7a1759782e4c571ee855a47bc00edf5e9020c09ab004321610b857e8717764b633b21cb32f0e03280e09758bd445ab91d20baca005452b79d7b574a247f1d2fe45b3c4e93da3d51de647c10dd49944dc87c92332af00f191b66b6a6f732a91f0e2e9120be61e58c79d497247d278888901d442ad7f8536607a644e9e3d769db497c3960dfde12182334caee994adc38a436367a54b9e182b78e9a0ceb9a2c4f63902c1ad1a7c5a08d0920a23c2a86abbdf357849a651733e57f31019876026888c8ccb85c86b4f8ffffff7f000000002c331fca0e541b7ca211c28ed61c525708a13d115b43f8b1894c8fa8a14dc4810f61ae96c18cc7130000000000002100000000000000000001000027c9a46157a3609b6fd9843ee19ec647249a9375de5858818f3c4a4fa6ce46f4d42b07199de8b99231ace58c77819ee214e49666c464d35ca9b5143ed3b3dc8c17a23692759ccf5a205311b7ab22532697b861dfb54609fd88e6043bd52ae84c1bb0c8000000edb3d42c68a27ef6a1296dfff4a979369b0e8ebc62887aa46e820a74f91381dcc198e353047db70686d147357024eb3cb94f1e89cb5ba0a56aa046b4dc521a3d9356b4b8b5917c4c860495b240e80063bde261fd00000000007271e28ef6806bc8e139c49b91c76bea3858f7f05b47d3e519f1634e8fbd8d31330d89069f9648a2ff93060ff073b3a113e47edf76f7d116d2b0976cf2ec447c030931651dd315003b7a6a5433a2bb560ae99ec4b227eda2e63a1c31a2c2bd48a822cbe92b6524e0cd8020ecaa34e19e7141d5e221509342bfe7d294d1eb3de6a50ca0301f89c2ee627e949c68b3a4a426a996d503a26e9a714ee5f72d8805dd1bfbd081f6a5d1f1289dfe14cb9194e26a44fac273461fc5c0e0a33db76cf059f40fa2640b6bfb74dd35391b8fa18479da9f4b6641fce9a24b96767b837ca037a1199735c375c705c798e0e208e4a5259d0bfa526b462af45a6eab34000000000000000000000000c4426344ec1a3366515dee221e747f55d7dd02534bc503b9b28277c253e410986bef2111a99cc448d652929f8a67a6a1d3f00dcad91aff428aade3f85714a1d3ef29acd4d49b62339c10c2ec0dac4728288e78980c1184d8223edbccbf9258b7374e79a1f8bf3fb73c8c6dbb7bbdfc399847db97c02461792e3a49dac16c60c3fcaab222025d78963c3ac899fa8b63f58a30212c9b2d7fe751e2046b78f86e22861b6504c667350244dd6d9189a8b9c45f8aaff9db694811ca86ed978f23eed7459c0382074170cf1e25b0e9ba3d1cc309353eea4cd8ab96bafda393276bdd8d32ead8db9e1b54d2d3d50e2815268fc1a6ec566981bc8ccfe6cc1897449ba5f26a9d66ac73e6f5c401376f23a314e0b9ff997d22f3e34b7524642c248aa813edaa626f0000000000000000000000000000000003ba34b611569a451564d3a5400f9097ffe7a37e765be352be71ee24250d6828562c7e24cb763062d6000c409de6a6135eae8a00000000008d797190a26c933f933aff5c521eeb7a84a62d148a846e74e76b515b6b8be29e8b69310fa130cf6d6b74f33205d3cc218ca554ed8085ae044f5bf2e89a0000bde05c114e7a020fc1a5fd3eeeb822008b2d7d1cc062b51b0aca4956b557e51a1385cc572b0074b0950fb1437de2590bf99ec7ceb69e1fe2465fce099c992d57b804a22e148ae3411523814aee03ee2df877edfabf4aa94f07c6fdd127e57a8bf7975f2e606c25a299980a6e52fcf7849d45bb38573fbba8afef1aa7a24c805f7aee3e39a3000000000000000000000000000000000000878f88c4742ac490951c36c610a0d266588ec6a0bd300cf160b5a5d9e9fafa49ecc8430832d795e727b7fc2b76e7fc4141fdbb82f45d3cdd3fb8d4b443ab4954fdf5c1b9a6ab3e457f098329307ccb0a1989b6c37509692e952e7244f48bc12569ff8eb30d0f887b85b5ef44fb9a7571319190be0c226ed72f346cc4aa071ae0c72fa8bd00d5590c4f4ba65d0c8e1f4870fe3c414681e41b40163eb1aa2a7429a2208cd6e69c7d959e87da3fd0101159a03ab7fe78881ee7a1ee7a2edff75fb18a181e0c54352be2b7a5b5273198291c28d9141deeb3cdba5d414ae4b0000000000000000000000000009eacd83458d8a606be71970497a4fd4ca3b48ca482ab3804e2fac216b3ba613608b1a465456a33fd08491d337d7344c01cfc9e73"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) openat$ppp(0xffffffffffffff9c, 0x0, 0x161042, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffff8}, 0x50) unshare(0x2000400) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r0, 0xc0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffe3b, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0, 0x0, 0x0}}, 0x10) 1m10.888625943s ago: executing program 3 (id=13082): r0 = socket$kcm(0x29, 0x2, 0x0) close(r0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x12}}, 0x10, 0x0}, 0x30004040) setsockopt$sock_attach_bpf(r0, 0x1, 0xd, &(0x7f00000000c0), 0xfe11) close(r0) 1m10.861432604s ago: executing program 3 (id=13083): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r0, 0xa) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) listen(r0, 0x0) 1m10.668405148s ago: executing program 3 (id=13085): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x1, 0x4, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x3, 0x200000000000}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x44, 0x5, [{{@in6=@private1, 0x2, 0x2b}, 0xa, @in6=@local, 0x0, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r1, &(0x7f00000000c0)={0x0, 0xfe, &(0x7f0000000000)=[{&(0x7f0000000040)="0207000902000000e4a17c45c8d260c9", 0x10}], 0x1}, 0x0) r2 = socket$kcm(0x2, 0x5, 0x0) sendmsg$inet(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xff}}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000140)='\x00', 0x1}], 0x1}, 0x3e8) 1m10.509810741s ago: executing program 3 (id=13091): syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000240)='./file1\x00', 0x3810744, &(0x7f00000000c0)={[{@nombcache}, {@inlinecrypt}, {@usrquota}, {@jqfmt_vfsv1}, {@nombcache}, {@delalloc}, {@dioread_lock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@i_version}]}, 0x1, 0x46b, &(0x7f0000000b00)="$eJzs3M1vVFUbAPDn3s4AL/AyFfEDBK2isfGjpQWVhS40mrjQxEQXuKxtIchADa2JEKLVGFwaEvfGpYl/gStXRl2ZuNW9ISFKTEA3jrkz99LOMFOmMO1A5/dLLpwz98w958k953LmnBkCGFgj2R9JxPaI+DUiKo1sc4GRxl9XL5+b/vvyuekkarU3/0jq5a5cPjddFC3ety3PjKYR6adJXkmz+TNnT0xVq7On8/z4wsn3xufPnH36+MmpY7PHZk9NHj586ODEc89OPtOTOLM2Xdnz4dze3a++feH16SMX3vnxm6y99+5rnF8eRze2d1FmJAv8z1pd67nHVlPZHeDf2lKcSanfraFbQxGR3a5yffxXYiiWbl4lXvmkr40D1lT2zN7c+fRiDdjAkuh3C4D+KP6hzz7/Fsc6TT1uC5debHwAyuK+mh+NM6VI8zLlNax/JCKOLP7zZXZEyzpErc26AQDArfoum/88df38r7430ijywra8bCUihiPirojYGRF3R8SuiLgnL3tfRNy/yvpbt4aun3+mF282tm5k87/n872t5vlfMfuL4aE89/96/OXk6PHq7IGI2BERo1HenOUn2l28uMTLv3zeqf7l87/syOov5oL5RS6WWhboZqYWpno1Kb30ccSeUrv4k2s7AVlf2B0Re1Z36R1F4vgTX+/tVOjG8a+gB/tMta8iHm/c/8Voib+QrLw/Ob4lqrMHxotecb2ffj7/Rqf6byn+Hsju/9bm/t9SovJXsny/dn71dZz/7bOOnylLN9n/NyVv1fdgN+WvfTC1sHB6ImJT8lo93/T65NJ7i3xRPot/dP9S/BFL439n/p4s/gciIuvE+yLiwYh4KL93D0fEIxGxf4X4f3jp0Xc7nbsd7v9M2+fftf4/3Hz/V58YOvH9t53q7+75d6ieGs1fqT//bqBzc7bkJW62NwMAAMCdJ61/lz1Jx66l03RsrPF9+V2xNa3OzS88eXTu/VMzje+8D0c5LVa6KsvWQyeSxfyKjfxkvlZcnD+Yrxt/MfS/en5seq460+fYYdBt6zD+M78P9bt1wJq70T6a5wBsXK3jP+1TO4D15/faMLiMfxhc3Y7/Q2vcDmD9tRv/H7XkrQHCxmT+D4PL+IfBZfzD4DL+YSDdyu/61ypRWuHX++uWKK/4nwhInI30tmiGRJtEqQeju88PJgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgB75LwAA//+MOu7f") r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000001c0)=0x10) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1m10.488612751s ago: executing program 3 (id=13093): r0 = perf_event_open(&(0x7f00000000c0)={0x5, 0x80, 0xec, 0x7, 0x40, 0x6, 0x0, 0x38159f4e, 0x10050, 0xd, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2000004, 0x2, @perf_bp={0x0, 0x2}, 0x10088a, 0x7ff, 0x5, 0x3, 0xb, 0x2002, 0x3ff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x100000b, 0x12011, r0, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x4c, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2e2a5, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff8, 0x0, @perf_config_ext={0xe, 0x80}, 0x1080, 0xfffffffffffffffe, 0x0, 0x4, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) close(0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x4000004) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) 1m10.438293942s ago: executing program 3 (id=13097): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002580)={0xc, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe640}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 1m10.424457632s ago: executing program 49 (id=13097): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{r0, 0xffffffffffffffff}, &(0x7f00000001c0), &(0x7f0000000240)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002580)={0xc, 0x1c, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xe640}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.174292418s ago: executing program 7 (id=14366): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setpgid(r0, r0) setpgid(0x0, r0) tkill(r0, 0x7) wait4(r0, 0x0, 0x0, 0x0) syz_open_procfs(r0, 0x0) 2.066187131s ago: executing program 2 (id=14370): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x6, 0x4, 0x8, 0x8}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20000000}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r0, 0x0, 0x94, 0x0, 0x0, 0x0, 0x11, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 2.059894761s ago: executing program 7 (id=14371): r0 = perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_config_ext={0x395}, 0x204, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x8) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x5, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="180800000000000000000000000000001800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x48, '\x00', 0x0, @fallback=0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000}, 0x94) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, r1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]}) r2 = epoll_create1(0x0) epoll_wait(r2, &(0x7f0000000100)=[{}], 0x1, 0xff) 1.973259072s ago: executing program 2 (id=14373): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x3}, 0x8) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r1 = dup(r0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x13f, 0x4}}, 0x20) 1.742204126s ago: executing program 6 (id=14381): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001000)=0x10, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x11, 0x4, 0x4, 0x10, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001500)={r1, &(0x7f0000001600), &(0x7f0000001700)=@udp=r0}, 0x20) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000002000)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r1}, @generic={0xb7, 0x2}, @generic={0xb7, 0x3}, @generic={0x85, 0x0, 0x0, 0x0, 0x33}, @generic={0x95}], &(0x7f0000003000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000004000)={r2, 0x0, 0xe, 0x0, &(0x7f0000005000)="00112233445566778899aabbccdd", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.699617417s ago: executing program 7 (id=14382): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000005c0)={0x2, 0x80, 0xf9, 0x1, 0x0, 0x0, 0x0, 0x7fffffffc, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, @perf_bp={0x0, 0x8}, 0x131, 0x80002, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$key(0xf, 0x3, 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 1.654740578s ago: executing program 6 (id=14383): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0x0, 0x8, 0x1}, 0x1c) mmap(&(0x7f0000001000/0x3000)=nil, 0x30000, 0x0, 0x11, r0, 0x0) mremap(&(0x7f0000003000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000007000/0x1000)=nil) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) 1.526500501s ago: executing program 6 (id=14386): timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x2}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x7}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r0 = socket(0x2d, 0x2, 0x0) recvfrom$inet_nvme(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 1.319956995s ago: executing program 8 (id=14390): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x0, 0x4000000000000004, 0x4, 0xfffffffffffffffb, 0x7, 0xfffffffffffffffa, 0x2002}, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r0, 0x1, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) 1.099938029s ago: executing program 2 (id=14396): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)={0x38, r3, 0x801, 0x70bd29, 0x0, {0x7}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x9}, @L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x7}]}, 0x38}}, 0x0) 1.0275441s ago: executing program 2 (id=14398): sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f00000000c0)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2, @perf_config_ext={0x10001, 0x8}, 0x0, 0x0, 0x800000, 0x6, 0x0, 0x101, 0xffff, 0x0, 0x0, 0x0, 0xbf}, 0x0, 0xfff8000000000001, 0xffffffffffffffff, 0x0) semtimedop(0x0, 0x0, 0x0, 0x0) semop(0x0, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) 926.197062ms ago: executing program 2 (id=14400): socket$nl_route(0x10, 0x3, 0x0) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6c6, 0x4, @perf_config_ext={0x3, 0xdf52}, 0x11030, 0x2, 0xffffdf7e, 0x2, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x9899}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) syz_clone(0xde280000, 0x0, 0x0, 0x0, 0x0, 0x0) 857.287883ms ago: executing program 7 (id=14401): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000040), 0x10) sendmsg$can_bcm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="05"], 0x48}}, 0x80) sendmsg$can_bcm(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="0500000000e0ffffffffffff", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000008001"], 0x48}}, 0x40000) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x901b, 0x8181}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x240008c4}, 0x4054) 736.726055ms ago: executing program 7 (id=14403): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000000)=0x2) ioctl$PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000180)={0x1, &(0x7f0000000080)=[{0x6, 0xfd}]}) ioctl$PPPIOCSDEBUG(r0, 0x40047440, &(0x7f0000000540)=0xfff) write$ppp(r0, &(0x7f0000000280)='B`', 0x2) 736.628535ms ago: executing program 5 (id=14404): r0 = syz_open_procfs(0x0, &(0x7f0000000300)='task\x00') fchdir(r0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r1, 0x0, 0x4, 0xfffffffffffffffe) syz_open_procfs(r1, &(0x7f0000000040)='net/ptype\x00') 729.395546ms ago: executing program 7 (id=14405): r0 = perf_event_open(&(0x7f00000006c0)={0x2, 0x80, 0x2f, 0x1, 0x0, 0x0, 0x0, 0xd, 0xb41bd, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000066, 0x2, @perf_bp={0x0, 0x6}, 0x204, 0x4, 0x43a1bd76, 0x8, 0x9, 0x2, 0x2, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x4000000000, 0xffffffffffffffff, 0x9) ioctl$PERF_EVENT_IOC_SET_BPF(r0, 0x40042408, 0xffffffffffffffff) perf_event_open(&(0x7f0000000380)={0x2, 0x80, 0x63, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1, @perf_config_ext={0xfffffffd, 0xfc}, 0x0, 0x4, 0x800000, 0x6, 0xc313, 0xcb, 0xffff, 0x0, 0x0, 0x0, 0xc0}, 0x0, 0xfff7ffbfffffffff, 0xffffffffffffffff, 0x1) futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080)=0x1000000, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000000040)={0x77359400}, &(0x7f0000048000), 0x0) 632.783318ms ago: executing program 6 (id=14406): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x7002}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000600)={'pim6reg1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) pread64(r0, &(0x7f0000002200)=""/87, 0x57, 0xfffd) 566.793549ms ago: executing program 6 (id=14407): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x2) writev(0xffffffffffffffff, 0x0, 0x0) listns(0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, 0x0, 0x0) fchmod(0xffffffffffffffff, 0xc0) 566.632538ms ago: executing program 6 (id=14408): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000300), 0x4, 0xbaf, &(0x7f00000017c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x40, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r1, &(0x7f0000000200)="c7", 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 534.749709ms ago: executing program 5 (id=14409): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 497.31281ms ago: executing program 5 (id=14410): r0 = socket$kcm(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000140)={0x84, @dev={0xac, 0x14, 0x14, 0x3a}, 0x4e21, 0x3, 'sh\x00', 0x9, 0x80002, 0x64}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast2, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@dev={0xac, 0x14, 0x14, 0x41}, 0x4e20, 0x2, 0xcd}}, 0x44) sendmsg$sock(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@in6={0x2, 0x4e21, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 415.262261ms ago: executing program 5 (id=14411): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000002c80)={0xa, 0x14e24}, 0x1c) connect$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) recvmmsg(r0, &(0x7f0000005280)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000001d40)=""/61, 0x36}, {0x0, 0x20}], 0x2}, 0x10009}], 0x1, 0x10000, 0x0) sendmmsg$inet6(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000004f80)="000000f5b8ac2bb992ebd4c7b3ba4f60bfed002da6280c91950619c2a0e39042e0e7800ae7b041ff132d7fb40180000014c56dc066ca", 0x36}], 0x1}}], 0x1, 0x20e8086) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 414.800152ms ago: executing program 8 (id=14412): r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x800000000009, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000700)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x0) r1 = perf_event_open(&(0x7f0000001480)={0x2, 0x80, 0x84, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x20000000}, 0x2980, 0x2, 0x0, 0x0, 0x0, 0xd}, 0x0, 0xffffffffffffffff, r0, 0x0) perf_event_open(&(0x7f0000000200)={0x2, 0x80, 0x9d, 0x1, 0x0, 0x0, 0x0, 0x9, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x3, 0x3, 0xfff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, r0, 0x8) perf_event_open(&(0x7f0000002100)={0x1, 0x80, 0x2, 0x0, 0x0, 0x0, 0x0, 0x8, 0x80100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x2, 0x401}, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r0, 0x0) close(r1) 266.292834ms ago: executing program 8 (id=14413): r0 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r0, 0x0) ftruncate(r0, 0x51a9497) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) close_range(r0, r0, 0x0) 266.148294ms ago: executing program 8 (id=14414): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000340)={0x2, 0x80, 0x6c, 0x6, 0x0, 0x0, 0x0, 0x8, 0x40022, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc08c, 0x7, @perf_bp={0x0, 0x2}, 0x1a1ed, 0x0, 0x11000, 0x2, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x0, 0xdfffffffffffffff, 0xffffffffffffffff, 0x9) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="120000000a0100000800000002"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f0000001d80), &(0x7f0000001d40)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20) 223.009736ms ago: executing program 8 (id=14415): getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x8442, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x48) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 162.300907ms ago: executing program 5 (id=14416): syz_io_uring_setup(0x339, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, @perf_config_ext={0x0, 0x5b}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000c00)='GPL\x00'}, 0x94) syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0), 0xffffffffffffffff) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) 85.280938ms ago: executing program 8 (id=14417): perf_event_open(&(0x7f0000000540)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0xb79, 0xe40c9, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x107b7e, 0x7, @perf_bp={0x0}, 0x8080, 0x3, 0x43a1bd76, 0x1, 0x4, 0x5, 0x2, 0x0, 0x0, 0x0, 0x200c}, 0x0, 0x3fffffffff, 0xffffffffffffffff, 0x9) symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000100)='./file0\x00') r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$lock(r0, 0x410, &(0x7f0000000200)={0x0, 0x0, 0x1000000000000003, 0x9b}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) removexattr(&(0x7f0000000180)='./file0\x00', &(0x7f0000000080)=@known='security.apparmor\x00') 23.647019ms ago: executing program 5 (id=14418): ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f0000000740)={{0xffffffffffffffff, 0x0, 0x240002, 0x0, 0x7c9, 0x0, 0x0}, 0x1, &(0x7f00000005c0)=[{0x3, 0x20bc, 0x0, &(0x7f0000000480)="81bb", 0x2, 0x10}]}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000400000000000000000000850000002c000000850000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x61, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000001680)={r2, r1, 0x25, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x4, 0x0, 0x1}}, 0x3c) syz_emit_ethernet(0xfc0, &(0x7f0000000080)=ANY=[], 0x0) 0s ago: executing program 2 (id=14419): sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): ror tun [ 757.571593][ T5088] ip_tables: iptables: counters copy to user failed while replacing table [ 758.013943][ T29] audit: type=1400 audit(1788037624.862:4382): avc: denied { read } for pid=5106 comm="syz.6.12312" name="/" dev="configfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 758.013998][ T29] audit: type=1400 audit(1788037624.862:4383): avc: denied { read open } for pid=5106 comm="syz.6.12312" path="/" dev="configfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 758.118365][ T5111] all: renamed from lo [ 758.214543][ T5119] netlink: 56 bytes leftover after parsing attributes in process `syz.3.12318'. [ 758.860469][ T5051] Set syz1 is full, maxelem 65536 reached [ 759.072704][ T29] audit: type=1400 audit(1788037625.922:4384): avc: denied { mounton } for pid=5123 comm="syz.3.12321" path="/file0" dev="bpf" ino=116822 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 759.128844][ T5134] netlink: 'syz.6.12320': attribute type 30 has an invalid length. [ 759.200205][ T5134] bond1: option arp_missed_max: invalid value (0) [ 759.200228][ T5134] bond1: option arp_missed_max: allowed values 1 - 255 [ 759.241583][ T5134] bond1 (unregistering): Released all slaves [ 759.848612][ T5174] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12341'. [ 760.292913][ T5210] netlink: 26 bytes leftover after parsing attributes in process `syz.6.12355'. [ 760.619003][ T5225] IPv6: NLM_F_CREATE should be specified when creating new route [ 761.411744][ T5247] netlink: 'syz.6.12371': attribute type 30 has an invalid length. [ 761.450012][ T5247] bond1: option arp_missed_max: invalid value (0) [ 761.450037][ T5247] bond1: option arp_missed_max: allowed values 1 - 255 [ 761.468703][ T5247] bond1 (unregistering): Released all slaves [ 762.590823][ T5286] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12387'. [ 762.626187][ T5288] netlink: 'syz.3.12389': attribute type 4 has an invalid length. [ 762.646691][ T5288] netlink: 'syz.3.12389': attribute type 4 has an invalid length. [ 764.192713][ T5313] ip_tables: iptables: counters copy to user failed while replacing table [ 764.411380][ T5319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12403'. [ 764.438167][ T5319] netlink: 12 bytes leftover after parsing attributes in process `syz.2.12403'. [ 765.047212][ T5275] Set syz1 is full, maxelem 65536 reached [ 765.207074][ T5337] netlink: 8 bytes leftover after parsing attributes in process `syz.7.12412'. [ 765.995517][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 766.189154][ T5466] netlink: 32 bytes leftover after parsing attributes in process `syz.7.12425'. [ 766.189178][ T5466] netlink: 32 bytes leftover after parsing attributes in process `syz.7.12425'. [ 766.752910][ T5512] netlink: 'syz.0.12444': attribute type 2 has an invalid length. [ 766.853831][ T29] audit: type=1400 audit(1788037633.702:4385): avc: denied { accept } for pid=5520 comm="syz.0.12449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 766.881467][ T29] audit: type=1400 audit(1788037633.742:4386): avc: denied { getopt } for pid=5517 comm="syz.3.12447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 767.563361][ T5560] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12466'. [ 768.890420][ T29] audit: type=1326 audit(1788037635.742:4387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.3.12487" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58d6ce159 code=0x7ffc0000 [ 768.890467][ T29] audit: type=1326 audit(1788037635.742:4388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.3.12487" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58d6ce159 code=0x7ffc0000 [ 768.956007][ T29] audit: type=1326 audit(1788037635.782:4389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.3.12487" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fd58d6ce159 code=0x7ffc0000 [ 768.956039][ T29] audit: type=1326 audit(1788037635.782:4390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.3.12487" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58d6ce159 code=0x7ffc0000 [ 768.956064][ T29] audit: type=1326 audit(1788037635.782:4391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.3.12487" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58d6ce159 code=0x7ffc0000 [ 768.956110][ T29] audit: type=1326 audit(1788037635.782:4392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.3.12487" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd58d6ce159 code=0x7ffc0000 [ 769.186450][ T29] audit: type=1326 audit(1788037636.042:4393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.3.12487" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58d6ce159 code=0x7ffc0000 [ 769.186486][ T29] audit: type=1326 audit(1788037636.042:4394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5603 comm="syz.3.12487" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd58d6ce159 code=0x7ffc0000 [ 769.329300][ T5613] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12488'. [ 772.125701][ T5745] netlink: 75 bytes leftover after parsing attributes in process `syz.3.12546'. [ 773.635836][ T29] audit: type=1400 audit(1788037640.492:4395): avc: denied { bind } for pid=5897 comm="syz.3.12570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 773.661100][ T29] audit: type=1400 audit(1788037640.522:4396): avc: denied { listen } for pid=5897 comm="syz.3.12570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 773.952788][ T5916] netlink: 'syz.6.12577': attribute type 6 has an invalid length. [ 774.369647][ T29] audit: type=1326 audit(1788037641.222:4397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5934 comm="syz.2.12584" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456f1de159 code=0x7ffc0000 [ 774.369697][ T29] audit: type=1326 audit(1788037641.222:4398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5934 comm="syz.2.12584" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456f1de159 code=0x7ffc0000 [ 774.437189][ T29] audit: type=1326 audit(1788037641.292:4399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5934 comm="syz.2.12584" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f456f1de159 code=0x7ffc0000 [ 774.636585][ T29] audit: type=1326 audit(1788037641.482:4400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5934 comm="syz.2.12584" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456f1de159 code=0x7ffc0000 [ 774.636680][ T29] audit: type=1326 audit(1788037641.482:4401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5934 comm="syz.2.12584" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456f1de159 code=0x7ffc0000 [ 775.032043][ T5950] lo: entered promiscuous mode [ 775.039836][ T5950] tunl0: entered promiscuous mode [ 775.049963][ T5950] gre0: entered promiscuous mode [ 775.099422][ T5950] gretap0: entered promiscuous mode [ 775.109277][ T5950] erspan0: entered promiscuous mode [ 775.133878][ T5950] ip_vti0: entered promiscuous mode [ 775.146205][ T5950] ip6_vti0: entered promiscuous mode [ 775.157715][ T5950] sit0: entered promiscuous mode [ 775.186296][ T5950] ip6tnl0: entered promiscuous mode [ 775.202992][ T5950] ip6gre0: entered promiscuous mode [ 775.213587][ T5950] syz_tun: entered promiscuous mode [ 775.225968][ T5950] ip6gretap0: entered promiscuous mode [ 775.250874][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state [ 775.251010][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state [ 775.251273][ T5950] bridge0: entered promiscuous mode [ 775.311966][ T5950] vcan0: entered promiscuous mode [ 775.330117][ T5950] bond0: entered promiscuous mode [ 775.330138][ T5950] bond_slave_0: entered promiscuous mode [ 775.330275][ T5950] bond_slave_1: entered promiscuous mode [ 775.362409][ T5950] team0: entered promiscuous mode [ 775.362430][ T5950] team_slave_0: entered promiscuous mode [ 775.362532][ T5950] team_slave_1: entered promiscuous mode [ 775.393934][ T5950] dummy0: entered promiscuous mode [ 775.434199][ T5950] nlmon0: entered promiscuous mode [ 775.457932][ T5950] batadv0: entered promiscuous mode [ 775.489854][ T5950] vxcan0: entered promiscuous mode [ 775.499284][ T5950] vxcan1: entered promiscuous mode [ 775.509490][ T5950] veth0: entered promiscuous mode [ 775.520386][ T5950] veth1: entered promiscuous mode [ 775.539774][ T5950] wg0: entered promiscuous mode [ 775.547617][ T5950] wg1: entered promiscuous mode [ 775.555104][ T5950] wg2: entered promiscuous mode [ 775.563750][ T5950] veth0_to_bridge: entered promiscuous mode [ 775.624274][ T5950] veth1_to_bridge: entered promiscuous mode [ 775.650812][ T5950] veth0_to_bond: entered promiscuous mode [ 775.664076][ T5950] veth1_to_bond: entered promiscuous mode [ 775.674668][ T5950] veth0_to_team: entered promiscuous mode [ 775.687982][ T5950] veth1_to_team: entered promiscuous mode [ 775.720249][ T5950] veth0_to_batadv: entered promiscuous mode [ 775.730693][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 775.730741][ T5950] batadv_slave_0: entered promiscuous mode [ 775.791932][ T5950] veth1_to_batadv: entered promiscuous mode [ 775.822157][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 775.822189][ T5950] batadv_slave_1: entered promiscuous mode [ 775.847540][ T5950] xfrm0: entered promiscuous mode [ 775.871147][ T5950] veth0_to_hsr: entered promiscuous mode [ 775.908308][ T5950] veth1_to_hsr: entered promiscuous mode [ 775.927359][ T5950] hsr0: entered promiscuous mode [ 775.939570][ T5950] veth1_virt_wifi: entered promiscuous mode [ 775.962592][ T5950] veth0_virt_wifi: entered promiscuous mode [ 775.982533][ T5950] vlan0: entered promiscuous mode [ 775.993853][ T5950] vlan1: entered promiscuous mode [ 776.011419][ T5950] macvlan0: entered promiscuous mode [ 776.037849][ T5950] macvlan1: entered promiscuous mode [ 776.045830][ T5950] ipvlan0: entered promiscuous mode [ 776.056917][ T5950] ipvlan1: entered promiscuous mode [ 776.078115][ T5950] macvtap0: entered promiscuous mode [ 776.094991][ T5950] macsec0: entered promiscuous mode [ 776.339977][ T5950] geneve0: entered promiscuous mode [ 776.352159][ T5950] geneve1: entered promiscuous mode [ 776.380092][ T5950] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 776.390199][ T5950] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 776.403983][ T5950] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 776.414142][ T5950] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 776.442551][ T5950] @: entered promiscuous mode [ 776.450315][ T5950] gre1: entered promiscuous mode [ 776.450440][ T5950] sit1: entered promiscuous mode [ 776.495813][T12866] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.495918][T12866] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.495950][T12866] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.495977][T12866] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.496150][T12866] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.496177][T12866] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 776.496206][T12866] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 776.496267][T12866] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 777.004308][ T5994] netlink: 764 bytes leftover after parsing attributes in process `syz.2.12609'. [ 777.004348][ T5994] netlink: 764 bytes leftover after parsing attributes in process `syz.2.12609'. [ 778.545230][ T29] audit: type=1326 audit(1788037645.392:4402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6053 comm="syz.2.12633" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456f1de159 code=0x7ffc0000 [ 778.545267][ T29] audit: type=1326 audit(1788037645.392:4403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6053 comm="syz.2.12633" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456f1de159 code=0x7ffc0000 [ 778.613848][ T29] audit: type=1326 audit(1788037645.472:4404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6053 comm="syz.2.12633" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7f456f1de159 code=0x7ffc0000 [ 778.646658][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 778.646676][ T29] audit: type=1326 audit(1788037645.502:4407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6053 comm="syz.2.12633" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f456f1de159 code=0x7ffc0000 [ 778.646706][ T29] audit: type=1326 audit(1788037645.502:4408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6053 comm="syz.2.12633" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456f1de159 code=0x7ffc0000 [ 778.646733][ T29] audit: type=1326 audit(1788037645.502:4409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6053 comm="syz.2.12633" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456f1de159 code=0x7ffc0000 [ 779.193158][ T6085] netlink: 'syz.3.12647': attribute type 1 has an invalid length. [ 779.219905][ T6085] 8021q: adding VLAN 0 to HW filter on device bond1 [ 779.279729][ T6085] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 779.953132][ T6120] netlink: 27 bytes leftover after parsing attributes in process `syz.7.12662'. [ 780.355987][ T6136] ip_tables: iptables: counters copy to user failed while replacing table [ 780.810118][ T6164] netlink: 12 bytes leftover after parsing attributes in process `syz.7.12680'. [ 781.984076][ T6215] netlink: 48 bytes leftover after parsing attributes in process `syz.3.12704'. [ 782.834350][ T6251] netlink: 5 bytes leftover after parsing attributes in process `syz.6.12719'. [ 783.275573][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 783.922924][ T6295] netlink: 'syz.6.12736': attribute type 30 has an invalid length. [ 783.965930][ T6295] netlink: 'syz.6.12736': attribute type 30 has an invalid length. [ 784.445044][ T6326] netlink: 4 bytes leftover after parsing attributes in process `syz.7.12750'. [ 784.460009][ T6326] team0: Port device team_slave_1 removed [ 784.751005][ T29] audit: type=1326 audit(1788037651.602:4410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6342 comm="syz.2.12758" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456f1de159 code=0x7ffc0000 [ 784.751042][ T29] audit: type=1326 audit(1788037651.602:4411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6342 comm="syz.2.12758" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456f1de159 code=0x7ffc0000 [ 784.751119][ T29] audit: type=1326 audit(1788037651.602:4412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6342 comm="syz.2.12758" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456f1de159 code=0x7ffc0000 [ 784.751183][ T29] audit: type=1326 audit(1788037651.602:4413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6342 comm="syz.2.12758" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f456f1de159 code=0x7ffc0000 [ 784.882276][ T29] audit: type=1326 audit(1788037651.742:4414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6342 comm="syz.2.12758" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f456f19e98e code=0x7ffc0000 [ 784.882320][ T29] audit: type=1326 audit(1788037651.742:4415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6342 comm="syz.2.12758" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f456f1de159 code=0x7ffc0000 [ 784.882351][ T29] audit: type=1326 audit(1788037651.742:4416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6342 comm="syz.2.12758" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f456f19e98e code=0x7ffc0000 [ 784.975942][ T29] audit: type=1326 audit(1788037651.772:4417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6342 comm="syz.2.12758" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f456f19e98e code=0x7ffc0000 [ 784.975979][ T29] audit: type=1326 audit(1788037651.802:4418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6342 comm="syz.2.12758" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f456f19e98e code=0x7ffc0000 [ 784.976005][ T29] audit: type=1326 audit(1788037651.832:4419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6342 comm="syz.2.12758" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f456f19e98e code=0x7ffc0000 [ 786.729019][T12866] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.789698][T12866] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.828682][T12866] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 786.859993][T12866] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 787.053585][T12866] bridge_slave_1: left allmulticast mode [ 787.053680][T12866] bridge_slave_1: left promiscuous mode [ 787.053816][T12866] bridge0: port 2(bridge_slave_1) entered disabled state [ 787.082213][T12866] bridge_slave_0: left allmulticast mode [ 787.082274][T12866] bridge_slave_0: left promiscuous mode [ 787.082364][T12866] bridge0: port 1(bridge_slave_0) entered disabled state [ 787.242372][ T6407] netlink: 'syz.7.12777': attribute type 4 has an invalid length. [ 787.277508][T12866] team0: Port device bridge0 removed [ 787.296533][T12866] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 787.311669][T12866] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 787.328193][T12866] bond0 (unregistering): Released all slaves [ 787.340741][T12866] bond1 (unregistering): Released all slaves [ 787.378331][T12866] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 787.378350][T12866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 787.401754][T12866] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 787.401773][T12866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 787.438978][T12866] veth1_macvtap: left promiscuous mode [ 787.439006][T12866] veth0_macvtap: left promiscuous mode [ 787.454891][T12866] veth1_vlan: left promiscuous mode [ 787.454988][T12866] veth0_vlan: left promiscuous mode [ 787.745944][T12866] team0 (unregistering): Port device team_slave_1 removed [ 787.787257][T12866] team0 (unregistering): Port device team_slave_0 removed [ 787.831460][ T3023] 8021q: adding VLAN 0 to HW filter on device eth21 [ 787.942605][T12866] IPVS: stop unused estimator thread 0... [ 788.132573][ T6426] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.132608][ T6426] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.151620][ T6426] bridge_slave_0: entered allmulticast mode [ 788.152312][ T6426] bridge_slave_0: entered promiscuous mode [ 788.177148][ T6426] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.177180][ T6426] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.177234][ T6426] bridge_slave_1: entered allmulticast mode [ 788.177712][ T6426] bridge_slave_1: entered promiscuous mode [ 788.258772][ T6426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 788.275147][ T6389] bridge0: port 1(bridge_slave_0) entered blocking state [ 788.275181][ T6389] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.275233][ T6389] bridge_slave_0: entered allmulticast mode [ 788.300524][ T6389] bridge_slave_0: entered promiscuous mode [ 788.311300][ T3023] 8021q: adding VLAN 0 to HW filter on device eth22 [ 788.322454][ T6426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.348668][ T6389] bridge0: port 2(bridge_slave_1) entered blocking state [ 788.348702][ T6389] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.348844][ T6389] bridge_slave_1: entered allmulticast mode [ 788.349242][ T6389] bridge_slave_1: entered promiscuous mode [ 788.397647][ T6426] team0: Port device team_slave_0 added [ 788.406211][ T6426] team0: Port device team_slave_1 added [ 788.452954][ T6426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 788.452985][ T6426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.453015][ T6426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 788.506506][ T6426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 788.506526][ T6426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.506560][ T6426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 788.579574][ T6389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 788.606540][ T6389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 788.671677][ T6389] team0: Port device team_slave_0 added [ 788.695305][ T6389] team0: Port device team_slave_1 added [ 788.735166][ T6426] hsr_slave_0: entered promiscuous mode [ 788.745606][ T6426] hsr_slave_1: entered promiscuous mode [ 788.809113][T12866] bridge_slave_1: left promiscuous mode [ 788.809212][T12866] bridge0: port 2(bridge_slave_1) entered disabled state [ 788.825171][T12866] bridge_slave_0: left allmulticast mode [ 788.825193][T12866] bridge_slave_0: left promiscuous mode [ 788.825276][T12866] bridge0: port 1(bridge_slave_0) entered disabled state [ 788.923518][T12866] team0: Port device bridge1 removed [ 788.977627][ T6389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 788.977645][ T6389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 788.977685][ T6389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 789.048582][ T3023] 8021q: adding VLAN 0 to HW filter on device eth23 [ 789.069205][ T6389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 789.069222][ T6389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 789.069318][ T6389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 789.122420][T12866] tipc: Disabling bearer [ 789.122476][T12866] tipc: Left network mode [ 789.178998][T12866] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 789.179355][T12866] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 789.197280][T12866] veth1_macvtap: left allmulticast mode [ 789.315665][T12866] team0 (unregistering): Port device team_slave_1 removed [ 789.347654][T12866] team0 (unregistering): Port device team_slave_0 removed [ 789.506888][ T6389] hsr_slave_0: entered promiscuous mode [ 789.519120][ T6389] hsr_slave_1: entered promiscuous mode [ 789.519290][ T6389] debugfs: 'hsr0' already exists in 'hsr' [ 789.519307][ T6389] Cannot create hsr debugfs directory [ 789.666319][ T3023] 8021q: adding VLAN 0 to HW filter on device eth24 [ 789.837800][T12866] IPVS: stop unused estimator thread 0... [ 790.004555][ T6426] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 790.015478][ T29] kauditd_printk_skb: 56 callbacks suppressed [ 790.015496][ T29] audit: type=1400 audit(1788037656.872:4476): avc: denied { write } for pid=6519 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 790.069894][ T6426] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 790.087809][ T6426] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 790.101730][ T6426] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 790.123195][ T6426] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 790.137483][ T6426] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 790.148447][ T6426] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 790.171663][ T6426] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 790.184948][ T29] audit: type=1400 audit(1788037657.042:4477): avc: denied { write } for pid=6535 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 790.279475][ T3023] 8021q: adding VLAN 0 to HW filter on device eth26 [ 790.346279][ T6389] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 790.361050][ T6389] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 790.373638][ T6389] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 790.391596][ T6389] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 790.401311][ T6389] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 790.417533][ T6389] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 790.431056][ T6389] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 790.449472][ T6389] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 790.474221][ T6426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.511329][ T6426] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.535010][T12866] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.535046][T12866] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.561779][T21720] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.561812][T21720] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.663212][ T6389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 790.701623][ T6389] 8021q: adding VLAN 0 to HW filter on device team0 [ 790.726952][T12781] bridge0: port 1(bridge_slave_0) entered blocking state [ 790.726985][T12781] bridge0: port 1(bridge_slave_0) entered forwarding state [ 790.753419][ T29] audit: type=1400 audit(1788037657.602:4478): avc: denied { read } for pid=6566 comm="syz.6.12798" path="socket:[120970]" dev="sockfs" ino=120970 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 790.786732][ T6426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 790.798664][T12781] bridge0: port 2(bridge_slave_1) entered blocking state [ 790.798697][T12781] bridge0: port 2(bridge_slave_1) entered forwarding state [ 790.918069][ T6426] veth0_vlan: entered promiscuous mode [ 790.949446][ T29] audit: type=1400 audit(1788037657.802:4479): avc: denied { write } for pid=6560 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 790.981899][ T6426] veth1_vlan: entered promiscuous mode [ 791.034499][ T6389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 791.066124][ T6426] veth0_macvtap: entered promiscuous mode [ 791.084401][ T6426] veth1_macvtap: entered promiscuous mode [ 791.118441][ T29] audit: type=1400 audit(1788037657.972:4480): avc: denied { write } for pid=6611 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 791.150375][ T6426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 791.172615][ T6426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.231465][ T3023] 8021q: adding VLAN 0 to HW filter on device eth27 [ 791.241096][ T6389] veth0_vlan: entered promiscuous mode [ 791.248762][T12731] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.248865][T12731] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.248954][T12731] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.248985][T12731] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.324820][ T6389] veth1_vlan: entered promiscuous mode [ 791.380002][ T6389] veth0_macvtap: entered promiscuous mode [ 791.399599][ T6389] veth1_macvtap: entered promiscuous mode [ 791.439148][ T6389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 791.459898][ T6389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 791.495496][T12866] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.496232][T12866] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.496267][T12866] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.496374][T12866] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.795342][ T29] audit: type=1400 audit(1788037658.642:4481): avc: denied { write } for pid=6635 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 791.884943][ T29] audit: type=1400 audit(1788037658.732:4482): avc: denied { write } for pid=6655 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 791.960573][ T3023] 8021q: adding VLAN 0 to HW filter on device eth28 [ 792.059585][ T6662] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=6662 comm=syz.2.12810 [ 792.189100][ T29] audit: type=1400 audit(1788037659.042:4483): avc: denied { write } for pid=6660 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 792.281483][ T29] audit: type=1400 audit(1788037659.132:4484): avc: denied { write } for pid=6672 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 792.353925][ T3023] 8021q: adding VLAN 0 to HW filter on device eth29 [ 792.571961][ T29] audit: type=1400 audit(1788037659.422:4485): avc: denied { write } for pid=6674 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 792.711570][ T6698] loop8: detected capacity change from 0 to 512 [ 792.738541][ T6698] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 792.759370][ T6698] ext4 filesystem being mounted at /3/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 792.827456][ T6698] ip_tables: iptables: counters copy to user failed while replacing table [ 792.950201][ T6426] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 793.021721][ T6710] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 793.192008][ T6736] netlink: 27 bytes leftover after parsing attributes in process `syz.2.12825'. [ 793.229379][ T6741] netlink: 'syz.2.12827': attribute type 15 has an invalid length. [ 793.243497][ T6741] netlink: 'syz.2.12827': attribute type 15 has an invalid length. [ 793.255851][T21720] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 793.258896][T12781] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 793.259053][T12781] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 793.259190][T12781] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 793.300145][ T6742] netlink: 168 bytes leftover after parsing attributes in process `syz.6.12826'. [ 793.582145][ T6766] loop8: detected capacity change from 0 to 8192 [ 793.609198][ T6766] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 793.941520][ T6807] netlink: 20 bytes leftover after parsing attributes in process `syz.8.12846'. [ 794.826693][ T6903] loop8: detected capacity change from 0 to 512 [ 794.890032][ T6903] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 794.890185][ T6903] ext4 filesystem being mounted at /15/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 794.952557][ T6426] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 795.224758][ T29] kauditd_printk_skb: 57 callbacks suppressed [ 795.224805][ T29] audit: type=1400 audit(1788037662.072:4543): avc: denied { write } for pid=6922 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 795.324810][ T29] audit: type=1400 audit(1788037662.172:4544): avc: denied { write } for pid=6943 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 795.495722][ T29] audit: type=1400 audit(1788037662.342:4545): avc: denied { create } for pid=6966 comm="syz.3.12886" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=blk_file permissive=1 [ 795.578835][ T6975] netlink: 36 bytes leftover after parsing attributes in process `syz.2.12888'. [ 795.614507][ T29] audit: type=1400 audit(1788037662.462:4546): avc: denied { write } for pid=6956 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 795.718401][ T29] audit: type=1400 audit(1788037662.572:4547): avc: denied { write } for pid=6987 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 795.826863][ T6995] tipc: Started in network mode [ 795.826907][ T6995] tipc: Node identity 785634120000000021436587, cluster identity 4711 [ 795.828837][ T6995] tipc: Enabling of bearer rejected, failed to enable media [ 795.984390][ T29] audit: type=1400 audit(1788037662.832:4548): avc: denied { write } for pid=6994 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.059279][ T29] audit: type=1400 audit(1788037662.912:4549): avc: denied { write } for pid=7019 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.136386][ T29] audit: type=1400 audit(1788037662.992:4550): avc: denied { checkpoint_restore } for pid=7015 comm="syz.2.12899" capability=40 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 796.211745][ T29] audit: type=1400 audit(1788037663.062:4551): avc: denied { write } for pid=7021 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.275249][ T29] audit: type=1400 audit(1788037663.122:4552): avc: denied { write } for pid=7036 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 796.327881][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz.8.12902'. [ 798.017822][ T7251] loop8: detected capacity change from 0 to 4096 [ 798.018346][ T7251] EXT4-fs: test_dummy_encryption option not supported [ 798.050722][ T7255] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12947'. [ 798.050807][ T7255] netlink: 60 bytes leftover after parsing attributes in process `syz.2.12947'. [ 798.299851][ T7269] ip_tables: iptables: counters copy to user failed while replacing table [ 798.548379][ T7284] netlink: 8 bytes leftover after parsing attributes in process `syz.6.12963'. [ 798.953666][ T7330] tipc: Started in network mode [ 798.953699][ T7330] tipc: Node identity ac1414aa, cluster identity 4711 [ 798.953907][ T7330] tipc: New replicast peer: 172.20.20.187 [ 798.954376][ T7330] tipc: Enabled bearer , priority 10 [ 799.057710][ T7336] netlink: 'syz.7.12982': attribute type 2 has an invalid length. [ 799.295826][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12990'. [ 799.295855][ T7354] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12990'. [ 799.295996][ T7354] netlink: 8 bytes leftover after parsing attributes in process `syz.3.12990'. [ 799.296016][ T7354] netlink: 36 bytes leftover after parsing attributes in process `syz.3.12990'. [ 800.066894][T16769] tipc: Node number set to 2886997162 [ 800.427890][ T7332] dummy0: entered promiscuous mode [ 800.515898][ T7425] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13018'. [ 800.515923][ T7425] netlink: 12 bytes leftover after parsing attributes in process `syz.8.13018'. [ 800.593864][ T7432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13021'. [ 800.647677][ T29] kauditd_printk_skb: 47 callbacks suppressed [ 800.647707][ T29] audit: type=1326 audit(1788037667.502:4600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7436 comm="syz.8.13023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 800.648610][ T29] audit: type=1326 audit(1788037667.502:4601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7436 comm="syz.8.13023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=227 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 800.648882][ T29] audit: type=1326 audit(1788037667.502:4602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7436 comm="syz.8.13023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 800.649619][ T29] audit: type=1326 audit(1788037667.502:4603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7436 comm="syz.8.13023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 800.650026][ T29] audit: type=1326 audit(1788037667.502:4604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7436 comm="syz.8.13023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 800.651523][ T29] audit: type=1326 audit(1788037667.502:4605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7436 comm="syz.8.13023" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 801.090600][ T7447] netlink: 'syz.3.13027': attribute type 3 has an invalid length. [ 801.090635][ T7447] netlink: 'syz.3.13027': attribute type 3 has an invalid length. [ 801.367070][ T7469] loop8: detected capacity change from 0 to 4096 [ 801.378970][ T7469] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 801.401280][ T29] audit: type=1400 audit(1788037668.252:4606): avc: denied { write } for pid=7468 comm="syz.8.13037" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 801.648441][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13040'. [ 801.648479][ T7476] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13040'. [ 801.686861][ T7478] A link change request failed with some changes committed already. Interface gre1 may have been left with an inconsistent configuration, please check. [ 804.377558][ T6426] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 804.415884][ T29] audit: type=1400 audit(1788037671.272:4607): avc: denied { accept } for pid=7531 comm="syz.8.13039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 804.912387][ T7563] __nla_validate_parse: 1 callbacks suppressed [ 804.912423][ T7563] netlink: 8 bytes leftover after parsing attributes in process `syz.3.13077'. [ 805.390441][ T7581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.390622][ T7581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.412634][ T7581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 805.412740][ T7581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 805.796122][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state [ 805.796160][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.796364][ T7710] bridge_slave_0: entered allmulticast mode [ 805.797749][ T7710] bridge_slave_0: entered promiscuous mode [ 805.799847][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state [ 805.799938][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state [ 805.800105][ T7710] bridge_slave_1: entered allmulticast mode [ 805.801345][ T7710] bridge_slave_1: entered promiscuous mode [ 805.826155][ T7710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 805.828987][ T7710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 805.857244][ T7710] team0: Port device team_slave_0 added [ 805.859307][ T7710] team0: Port device team_slave_1 added [ 805.885202][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 805.885270][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.885364][ T7710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 805.887469][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 805.887509][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 805.887593][ T7710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 805.926286][ T7710] hsr_slave_0: entered promiscuous mode [ 805.927228][ T7710] hsr_slave_1: entered promiscuous mode [ 805.927900][ T7710] debugfs: 'hsr0' already exists in 'hsr' [ 805.927941][ T7710] Cannot create hsr debugfs directory [ 806.067474][T12845] bridge_slave_1: left allmulticast mode [ 806.067818][T12845] bridge0: port 2(bridge_slave_1) entered disabled state [ 806.082993][T12845] bridge_slave_0: left allmulticast mode [ 806.083370][T12845] bridge0: port 1(bridge_slave_0) entered disabled state [ 806.124291][T12845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 806.135358][T12845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 806.146646][T12845] bond0 (unregistering): Released all slaves [ 806.154286][T12845] bond1 (unregistering): (slave veth3): Releasing backup interface [ 806.165095][T12845] bond1 (unregistering): Released all slaves [ 806.192082][T12845] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 806.192526][T12845] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 806.245078][T12845] team0 (unregistering): Port device team_slave_1 removed [ 806.259922][T12845] team0 (unregistering): Port device team_slave_0 removed [ 806.303517][ T29] audit: type=1400 audit(1788037673.152:4608): avc: denied { write } for pid=7727 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 806.341114][ T29] audit: type=1400 audit(1788037673.192:4609): avc: denied { write } for pid=7738 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 806.379028][ T3023] 8021q: adding VLAN 0 to HW filter on device eth17 [ 806.462180][ T29] audit: type=1400 audit(1788037673.312:4610): avc: denied { write } for pid=7741 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 806.497296][ T29] audit: type=1400 audit(1788037673.352:4611): avc: denied { write } for pid=7752 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 806.534634][ T3023] 8021q: adding VLAN 0 to HW filter on device eth18 [ 806.612933][ T29] audit: type=1400 audit(1788037673.462:4612): avc: denied { write } for pid=7755 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 806.651131][ T29] audit: type=1400 audit(1788037673.502:4613): avc: denied { write } for pid=7766 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 806.690769][ T3023] 8021q: adding VLAN 0 to HW filter on device eth19 [ 806.751376][ T29] audit: type=1400 audit(1788037673.602:4614): avc: denied { write } for pid=7768 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 806.782728][T12845] IPVS: stop unused estimator thread 0... [ 806.794052][ T29] audit: type=1400 audit(1788037673.652:4615): avc: denied { write } for pid=7779 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 806.880618][ T29] audit: type=1400 audit(1788037673.732:4616): avc: denied { write } for pid=7781 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 806.915484][ T29] audit: type=1400 audit(1788037673.772:4617): avc: denied { write } for pid=7792 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 807.137777][ T3023] 8021q: adding VLAN 0 to HW filter on device eth20 [ 807.505233][ T7710] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 807.517845][ T7710] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 807.527668][ T7710] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 807.537775][ T7710] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 807.547233][ T7710] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 807.557571][ T7710] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 807.566728][ T7710] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 807.576629][ T7710] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 807.614154][ T7710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 807.626961][ T7710] 8021q: adding VLAN 0 to HW filter on device team0 [ 807.637510][T12845] bridge0: port 1(bridge_slave_0) entered blocking state [ 807.637551][T12845] bridge0: port 1(bridge_slave_0) entered forwarding state [ 807.659254][T14895] bridge0: port 2(bridge_slave_1) entered blocking state [ 807.659324][T14895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 807.709956][ T7710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 807.735301][ T7710] veth0_vlan: entered promiscuous mode [ 807.743697][ T7710] veth1_vlan: entered promiscuous mode [ 807.760295][ T7710] veth0_macvtap: entered promiscuous mode [ 807.763357][ T7710] veth1_macvtap: entered promiscuous mode [ 807.774897][ T7710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 807.782372][ T7710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.806354][T12845] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.826253][T12587] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.826468][T12587] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.826708][T12587] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 811.168453][ T8186] netlink: 'syz.8.13104': attribute type 2 has an invalid length. [ 811.232427][ T8192] loop5: detected capacity change from 0 to 512 [ 811.244339][ T8192] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 811.260896][ T8192] EXT4-fs (loop5): 1 truncate cleaned up [ 811.261426][ T8192] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 811.320348][ T7710] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 811.551802][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13127'. [ 811.747135][ T8260] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 811.858060][ T8274] netlink: 132 bytes leftover after parsing attributes in process `syz.8.13148'. [ 812.080567][ T8296] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13158'. [ 813.581814][ T8334] syzkaller1: entered allmulticast mode [ 816.107004][ T29] kauditd_printk_skb: 49 callbacks suppressed [ 816.107030][ T29] audit: type=1326 audit(1788037682.962:4667): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.7.13213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418f0fe159 code=0x7ffc0000 [ 816.109454][ T29] audit: type=1326 audit(1788037682.962:4668): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.7.13213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418f0fe159 code=0x7ffc0000 [ 816.172414][ T29] audit: type=1326 audit(1788037683.022:4669): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.7.13213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418f0fe159 code=0x7ffc0000 [ 816.172901][ T29] audit: type=1326 audit(1788037683.022:4670): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.7.13213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418f0fe159 code=0x7ffc0000 [ 816.174560][ T29] audit: type=1326 audit(1788037683.022:4671): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.7.13213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f418f0fe159 code=0x7ffc0000 [ 816.178886][ T29] audit: type=1326 audit(1788037683.032:4672): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.7.13213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418f0fe159 code=0x7ffc0000 [ 816.181307][ T29] audit: type=1326 audit(1788037683.032:4673): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.7.13213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418f0fe159 code=0x7ffc0000 [ 816.181573][ T29] audit: type=1326 audit(1788037683.032:4674): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.7.13213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418f0fe159 code=0x7ffc0000 [ 816.182830][ T29] audit: type=1326 audit(1788037683.032:4675): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.7.13213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f418f0fe159 code=0x7ffc0000 [ 816.183825][ T29] audit: type=1326 audit(1788037683.032:4676): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8441 comm="syz.7.13213" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418f0fe159 code=0x7ffc0000 [ 816.468669][ T8451] netlink: 'syz.2.13215': attribute type 25 has an invalid length. [ 816.468708][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13215'. [ 816.468924][ T8451] netlink: 'syz.2.13215': attribute type 25 has an invalid length. [ 816.468982][ T8451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13215'. [ 816.530119][ T8454] loop8: detected capacity change from 0 to 128 [ 816.548297][ T8454] EXT4-fs: Ignoring removed i_version option [ 816.560450][ T8454] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 816.576478][ T8454] ext4 filesystem being mounted at /95/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 816.641873][ T8454] EXT4-fs error (device loop8): dx_make_map:1296: inode #2: block 34: comm syz.8.13217: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 816.670797][ T8454] EXT4-fs (loop8): Remounting filesystem read-only [ 816.699881][ T6426] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 816.715780][ T8463] netlink: 8 bytes leftover after parsing attributes in process `syz.7.13221'. [ 816.862714][ T8477] sit0: entered promiscuous mode [ 816.862820][ T8477] netlink: 1 bytes leftover after parsing attributes in process `syz.7.13227'. [ 816.994237][ T8499] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13237'. [ 817.760039][ T8578] geneve3: entered promiscuous mode [ 817.760198][ T8578] geneve3: entered allmulticast mode [ 817.795820][ T8591] loop5: detected capacity change from 0 to 512 [ 817.837505][ T8591] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 817.866650][ T7710] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.973153][ T8610] netlink: 16 bytes leftover after parsing attributes in process `syz.2.13278'. [ 817.973184][ T8610] netlink: 3 bytes leftover after parsing attributes in process `syz.2.13278'. [ 818.242326][ T8622] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 818.476293][ C0] ip6_tunnel:  xmit: Local address not yet configured! [ 821.580073][ T8803] netlink: 129384 bytes leftover after parsing attributes in process `syz.7.13298'. [ 821.693193][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 821.693224][ T29] audit: type=1400 audit(1788037688.542:4722): avc: denied { write } for pid=8810 comm="syz.2.13302" name="usb_gadget" dev="configfs" ino=2056 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 821.933061][ T8801] Set syz1 is full, maxelem 65536 reached [ 821.962036][ T8834] syz_tun: entered allmulticast mode [ 821.967912][ T8834] syz_tun: left allmulticast mode [ 822.045777][ T8840] ref_ctr_offset mismatch. inode: 0xe91 offset: 0x0 ref_ctr_offset(old): 0x0 ref_ctr_offset(new): 0x900000080 [ 822.138885][ T7331] hid-generic 0000:0000:0000.001A: unknown main item tag 0x0 [ 822.140626][ T7331] hid-generic 0000:0000:0000.001A: hidraw0: HID v0.00 Device [syz1] on syz0 [ 822.349896][ T8859] ip6tnl1: entered allmulticast mode [ 822.665611][ T8891] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13335'. [ 822.665763][ T8891] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.666253][ T8891] netlink: 24 bytes leftover after parsing attributes in process `syz.6.13335'. [ 822.666364][ T8891] bridge0: port 1(bridge_slave_0) entered disabled state [ 822.794132][ T8899] loop8: detected capacity change from 0 to 512 [ 822.898280][ T8899] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 822.898364][ T8899] ext4 filesystem being mounted at /121/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 822.936338][ T29] audit: type=1400 audit(1788037689.792:4723): avc: denied { write } for pid=8898 comm="syz.8.13338" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 822.969854][ T29] audit: type=1400 audit(1788037689.822:4724): avc: denied { write } for pid=8898 comm="syz.8.13338" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 822.969905][ T29] audit: type=1400 audit(1788037689.822:4725): avc: denied { write } for pid=8898 comm="syz.8.13338" name="/" dev="loop8" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 822.970045][ T29] audit: type=1400 audit(1788037689.822:4726): avc: denied { rename } for pid=8898 comm="syz.8.13338" name=2E02 dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 822.982733][ T8905] netlink: 'syz.7.13339': attribute type 7 has an invalid length. [ 822.983102][ T8905] netlink: 'syz.7.13339': attribute type 7 has an invalid length. [ 822.984407][ T29] audit: type=1400 audit(1788037689.822:4727): avc: denied { read } for pid=8898 comm="syz.8.13338" name="proc" dev="loop8" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 823.097969][ T6426] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.344269][ T29] audit: type=1400 audit(1788037690.192:4728): avc: denied { write } for pid=8919 comm="syz.5.13346" name="/" dev="configfs" ino=1044 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 823.665236][ T8940] 9p: Bad value for 'rfdno' [ 823.710777][ T8938] netlink: 27 bytes leftover after parsing attributes in process `syz.6.13353'. [ 823.954922][ T8961] loop8: detected capacity change from 0 to 512 [ 823.980659][ T8961] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 823.980767][ T8961] EXT4-fs (loop8): orphan cleanup on readonly fs [ 823.981103][ T8961] Quota error (device loop8): v2_read_file_info: Block with free entry 1 out of range (1, 6). [ 823.981147][ T8961] EXT4-fs warning (device loop8): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 823.982107][ T8961] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 823.983207][ T8961] EXT4-fs error (device loop8): ext4_orphan_get:1403: inode #16: comm syz.8.13364: inode has both inline data and extents flags [ 823.983275][ T8961] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 823.987278][ T8961] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.13364: couldn't read orphan inode 16 (err -117) [ 823.987435][ T8961] loop8: lost filesystem error report for type 5 error -117 [ 823.988901][ T8961] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 824.160800][ T8961] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 824.208369][ T6426] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 824.246264][ T8969] pim6reg: entered allmulticast mode [ 824.260693][ T8971] pim6reg: left allmulticast mode [ 824.360921][ T8987] wg2: entered promiscuous mode [ 824.360985][ T8987] wg2: entered allmulticast mode [ 824.612742][ T9021] loop5: detected capacity change from 0 to 128 [ 824.628645][ T9021] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002] [ 824.628772][ T9021] System zones: 1-3, 19-19, 35-36 [ 824.650106][ T9021] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 824.650385][ T9021] ext4 filesystem being mounted at /41/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 824.659555][ T9021] EXT4-fs warning (device loop5): ext4_group_add:1735: No reserved GDT blocks, can't resize [ 824.726623][ T7710] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 824.800224][ T29] audit: type=1400 audit(1788037691.652:4729): avc: denied { ioctl } for pid=9033 comm="syz.8.13396" path="net:[4026532393]" dev="nsfs" ino=4026532393 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 825.195525][ T9056] device-mapper: ioctl: Invalid ioctl structure: name ýÿÿÿ, dev 3000000000 [ 825.351304][ T9062] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 825.517594][ T9063] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 825.710766][ T9074] netlink: 4 bytes leftover after parsing attributes in process `syz.5.13413'. [ 825.885307][ T9074] team0 (unregistering): Port device team_slave_0 removed [ 825.915716][ T9074] team0 (unregistering): Port device team_slave_1 removed [ 825.940502][ T29] audit: type=1326 audit(1788037692.792:4730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9087 comm="syz.7.13420" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418f0fe159 code=0x7ffc0000 [ 825.981089][ T9080] bridge0: port 2(bridge_slave_1) entered disabled state [ 826.043965][ T9080] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 826.056425][ T9080] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 826.267018][T12587] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.267076][T12587] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.267211][T12587] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.267409][T12587] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 826.553373][ T9140] netlink: 4 bytes leftover after parsing attributes in process `syz.7.13444'. [ 826.554258][ T9138] netlink: 8 bytes leftover after parsing attributes in process `syz.8.13443'. [ 826.554405][ T9138] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13443'. [ 826.719907][ T29] kauditd_printk_skb: 27 callbacks suppressed [ 826.719933][ T29] audit: type=1326 audit(1788037693.572:4758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9147 comm="syz.2.13457" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6edd0ae159 code=0x0 [ 827.800310][ T9184] netlink: 'syz.5.13460': attribute type 1 has an invalid length. [ 827.800346][ T9184] netlink: 'syz.5.13460': attribute type 2 has an invalid length. [ 827.800369][ T9184] netlink: 244 bytes leftover after parsing attributes in process `syz.5.13460'. [ 830.597802][ T9169] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 830.649711][ T9254] netlink: 'syz.7.13498': attribute type 10 has an invalid length. [ 830.786685][ T9266] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13492'. [ 830.786716][ T9266] netlink: 12 bytes leftover after parsing attributes in process `syz.5.13492'. [ 831.108731][ T29] audit: type=1400 audit(1788037697.962:4759): avc: denied { associate } for pid=9284 comm="syz.2.13500" name="core" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 831.390041][ T9294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.13504'. [ 831.568738][ T9294] team0 (unregistering): Port device team_slave_0 removed [ 831.593700][ T9294] team0 (unregistering): Port device team_slave_1 removed [ 831.666447][ T9314] syzkaller1: entered promiscuous mode [ 831.666481][ T9314] syzkaller1: entered allmulticast mode [ 831.697139][ T9316] loop8: detected capacity change from 0 to 128 [ 831.711641][ T9316] FAULT_INJECTION: forcing a failure. [ 831.711641][ T9316] name failslab, interval 1, probability 0, space 0, times 0 [ 831.711693][ T9316] CPU: 1 UID: 0 PID: 9316 Comm: syz.8.13515 Not tainted syzkaller #0 PREEMPT(lazy) [ 831.711771][ T9316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 831.711790][ T9316] Call Trace: [ 831.711800][ T9316] [ 831.711811][ T9316] __dump_stack+0x1d/0x30 [ 831.711873][ T9316] dump_stack_lvl+0x95/0xd0 [ 831.711904][ T9316] dump_stack+0x15/0x1b [ 831.711933][ T9316] should_fail_ex+0x262/0x280 [ 831.712048][ T9316] should_failslab+0x8c/0xb0 [ 831.712090][ T9316] kmem_cache_alloc_lru_noprof+0x7f/0x3f0 [ 831.712127][ T9316] ? fat_alloc_inode+0x3c/0xe0 [ 831.712200][ T9316] ? fat_alloc_inode+0x3c/0xe0 [ 831.712234][ T9316] ? __pfx_fat_alloc_inode+0x10/0x10 [ 831.712297][ T9316] fat_alloc_inode+0x3c/0xe0 [ 831.712343][ T9316] ? __pfx_fat_alloc_inode+0x10/0x10 [ 831.712453][ T9316] alloc_inode+0x40/0x170 [ 831.712515][ T9316] new_inode+0x1d/0xe0 [ 831.712544][ T9316] fat_build_inode+0x163/0x290 [ 831.712648][ T9316] vfat_lookup+0x164/0x2e0 [ 831.712679][ T9316] lookup_one_qstr_excl+0xc7/0x240 [ 831.712727][ T9316] filename_create+0x155/0x220 [ 831.712760][ T9316] filename_mknodat+0x13e/0x450 [ 831.712802][ T9316] __se_sys_mknodat+0x38/0xf0 [ 831.712918][ T9316] __x64_sys_mknodat+0x55/0x70 [ 831.712959][ T9316] x64_sys_call+0x2182/0x2550 [ 831.712997][ T9316] do_syscall_64+0x112/0x360 [ 831.713122][ T9316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 831.713153][ T9316] RIP: 0033:0x7ff94344e159 [ 831.713182][ T9316] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 831.713228][ T9316] RSP: 002b:00007ff941ea7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 831.713251][ T9316] RAX: ffffffffffffffda RBX: 00007ff9436d5fa0 RCX: 00007ff94344e159 [ 831.713265][ T9316] RDX: 0000000000006000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 831.713279][ T9316] RBP: 00007ff9434e5024 R08: 0000000000000000 R09: 0000000000000000 [ 831.713292][ T9316] R10: 0000000000000710 R11: 0000000000000246 R12: 0000000000000000 [ 831.713305][ T9316] R13: 00007ff9436d6038 R14: 00007ff9436d5fa0 R15: 00007ffe474dd448 [ 831.713336][ T9316] [ 831.972910][ T29] audit: type=1326 audit(1788037698.822:4760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.8.13518" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 831.972961][ T29] audit: type=1326 audit(1788037698.822:4761): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.8.13518" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 831.973051][ T29] audit: type=1326 audit(1788037698.822:4762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.8.13518" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 831.973163][ T29] audit: type=1326 audit(1788037698.822:4763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.8.13518" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 831.973224][ T29] audit: type=1326 audit(1788037698.822:4764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.8.13518" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 831.973330][ T29] audit: type=1326 audit(1788037698.822:4765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.8.13518" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 831.973370][ T29] audit: type=1326 audit(1788037698.822:4766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.8.13518" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 831.973509][ T29] audit: type=1326 audit(1788037698.822:4767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.8.13518" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 831.973538][ T29] audit: type=1326 audit(1788037698.822:4768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9321 comm="syz.8.13518" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=269 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 831.973569][ T29] audit: type=1400 audit(1788037698.822:4769): avc: denied { read execute } for pid=9321 comm="syz.8.13518" name="file0" dev="tmpfs" ino=800 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 832.153145][ T9325] netlink: 'syz.2.13519': attribute type 1 has an invalid length. [ 832.324291][ T9331] netlink: 'syz.7.13522': attribute type 4 has an invalid length. [ 832.596439][ T9370] netlink: 4 bytes leftover after parsing attributes in process `syz.8.13541'. [ 832.610349][ T9370] hsr_slave_1 (unregistering): left promiscuous mode [ 832.820139][ C0] vcan0: j1939_tp_rxtimer: 0xffff888107e16400: rx timeout, send abort [ 832.961465][ T9386] bridge0: port 2(bridge_slave_1) entered disabled state [ 832.961788][ T9386] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.028911][ T9386] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 833.043723][ T9386] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 833.155526][T14906] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.155914][T14906] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.155963][T14906] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.156146][T14906] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.320291][ C0] vcan0: j1939_tp_rxtimer: 0xffff888107e16400: abort rx timeout. Force session deactivation [ 833.642463][ T9440] bridge0: port 2(bridge_slave_1) entered disabled state [ 833.642668][ T9440] bridge0: port 1(bridge_slave_0) entered disabled state [ 833.712370][ T9440] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 833.724993][ T9440] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 833.797483][T12776] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 2816 - 0 [ 833.797541][T12776] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.799043][T14907] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 2816 - 0 [ 833.799195][T14907] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.799323][T14907] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 2816 - 0 [ 833.799428][T14907] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.799543][T14907] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 2816 - 0 [ 833.799634][T14907] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 833.949446][ T9463] netlink: 48 bytes leftover after parsing attributes in process `syz.6.13578'. [ 837.489961][ T9526] loop8: detected capacity change from 0 to 256 [ 837.722399][ T9544] loop5: detected capacity change from 0 to 2048 [ 837.752850][ T9544] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 837.771813][ T29] kauditd_printk_skb: 62 callbacks suppressed [ 837.771841][ T29] audit: type=1400 audit(1788037704.622:4832): avc: denied { write } for pid=9543 comm="syz.5.13612" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 837.798218][ T9544] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 837.798544][ T9544] EXT4-fs error (device loop5) in ext4_setattr:6247: error 28 [ 837.850467][ T7710] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 838.149300][ T9587] netlink: 8 bytes leftover after parsing attributes in process `syz.5.13629'. [ 838.241804][ T29] audit: type=1326 audit(1788037705.092:4833): auid=4294967295 uid=49663 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9589 comm="syz.5.13630" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2c5ce4e159 code=0x0 [ 838.937247][ T9657] vhci_hcd vhci_hcd.0: pdev(8) rhport(0) sockfd(3) [ 838.937282][ T9657] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 838.937352][ T9657] vhci_hcd vhci_hcd.0: Device attached [ 838.960730][ T9658] usbip_core: unknown command [ 838.960817][ T9658] vhci_hcd: unknown pdu 587077115 [ 838.960843][ T9658] usbip_core: unknown command [ 838.962160][T12776] vhci_hcd vhci_hcd.8: stop threads [ 838.962177][T12776] vhci_hcd vhci_hcd.8: release socket [ 838.962292][T12776] vhci_hcd vhci_hcd.8: disconnect device [ 839.544491][ T9712] loop8: detected capacity change from 0 to 512 [ 839.574640][ T29] audit: type=1326 audit(1788037706.422:4834): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.2.13683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6edd0ae159 code=0x7ffc0000 [ 839.574820][ T29] audit: type=1326 audit(1788037706.422:4835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.2.13683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6edd0ae159 code=0x7ffc0000 [ 839.575200][ T29] audit: type=1326 audit(1788037706.422:4836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.2.13683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6edd0ae159 code=0x7ffc0000 [ 839.577180][ T29] audit: type=1326 audit(1788037706.422:4837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.2.13683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7f6edd0ae159 code=0x7ffc0000 [ 839.645256][ T29] audit: type=1326 audit(1788037706.492:4838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.2.13683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6edd06e98e code=0x7ffc0000 [ 839.649460][ T29] audit: type=1326 audit(1788037706.502:4839): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.2.13683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6edd06e98e code=0x7ffc0000 [ 839.649635][ T29] audit: type=1326 audit(1788037706.502:4840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.2.13683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6edd06e98e code=0x7ffc0000 [ 839.652192][ T29] audit: type=1326 audit(1788037706.502:4841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9713 comm="syz.2.13683" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6edd06e98e code=0x7ffc0000 [ 839.674012][ T9712] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 839.674230][ T9712] ext4 filesystem being mounted at /185/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 839.842463][ T6426] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 840.609843][ T9755] FAULT_INJECTION: forcing a failure. [ 840.609843][ T9755] name failslab, interval 1, probability 0, space 0, times 0 [ 840.609887][ T9755] CPU: 1 UID: 0 PID: 9755 Comm: syz.2.13700 Not tainted syzkaller #0 PREEMPT(lazy) [ 840.609922][ T9755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 840.609937][ T9755] Call Trace: [ 840.609946][ T9755] [ 840.609957][ T9755] __dump_stack+0x1d/0x30 [ 840.610058][ T9755] dump_stack_lvl+0x95/0xd0 [ 840.610091][ T9755] dump_stack+0x15/0x1b [ 840.610120][ T9755] should_fail_ex+0x262/0x280 [ 840.610147][ T9755] should_failslab+0x8c/0xb0 [ 840.610266][ T9755] __kvmalloc_node_noprof+0x168/0x5c0 [ 840.610312][ T9755] ? io_ring_ctx_alloc+0xbf/0x650 [ 840.610390][ T9755] ? io_ring_ctx_alloc+0xbf/0x650 [ 840.610480][ T9755] io_ring_ctx_alloc+0xbf/0x650 [ 840.610525][ T9755] io_uring_create+0x4d/0x4f0 [ 840.610640][ T9755] __se_sys_io_uring_setup+0x1cb/0x1e0 [ 840.610695][ T9755] __x64_sys_io_uring_setup+0x31/0x40 [ 840.610731][ T9755] x64_sys_call+0x1fbf/0x2550 [ 840.610791][ T9755] do_syscall_64+0x112/0x360 [ 840.610829][ T9755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 840.610854][ T9755] RIP: 0033:0x7f6edd0ae159 [ 840.610871][ T9755] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 840.610892][ T9755] RSP: 002b:00007f6edbb06fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 840.610984][ T9755] RAX: ffffffffffffffda RBX: 0000200000000040 RCX: 00007f6edd0ae159 [ 840.611001][ T9755] RDX: 0000200000000280 RSI: 0000200000000040 RDI: 000000000000000d [ 840.611015][ T9755] RBP: 00007f6edd145024 R08: 0000000000000000 R09: 0000000000000000 [ 840.611067][ T9755] R10: 0000200000000300 R11: 0000000000000206 R12: 0000200000000280 [ 840.611082][ T9755] R13: 0000200000000300 R14: 0000200000000100 R15: 00007fff491528e8 [ 840.611104][ T9755] [ 840.927505][ T9761] bridge0: port 2(bridge_slave_1) entered disabled state [ 840.927664][ T9761] bridge0: port 1(bridge_slave_0) entered disabled state [ 840.998723][ T9761] bridge0: port 2(bridge_slave_1) entered blocking state [ 840.998844][ T9761] bridge0: port 2(bridge_slave_1) entered forwarding state [ 840.999011][ T9761] bridge0: port 1(bridge_slave_0) entered blocking state [ 840.999068][ T9761] bridge0: port 1(bridge_slave_0) entered forwarding state [ 840.999273][ T9761] bridge0: entered promiscuous mode [ 840.999293][ T9761] bridge0: entered allmulticast mode [ 841.666824][ T9826] netlink: 44 bytes leftover after parsing attributes in process `syz.8.13732'. [ 841.678502][ T9826] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=9826 comm=syz.8.13732 [ 841.694767][ T9826] netlink: 44 bytes leftover after parsing attributes in process `syz.8.13732'. [ 842.322702][ T9861] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9861 comm=syz.6.13747 [ 842.323256][ T9861] netlink: 'syz.6.13747': attribute type 3 has an invalid length. [ 842.323306][ T9861] netlink: 92 bytes leftover after parsing attributes in process `syz.6.13747'. [ 844.053837][ T9885] xt_connbytes: Forcing CT accounting to be enabled [ 844.054327][ T9885] xt_CT: You must specify a L4 protocol and not use inversions on it [ 844.181275][ T9892] sd 0:0:1:0: PR command failed: 1026 [ 844.181417][ T9892] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 844.181509][ T9892] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 844.634459][ T9821] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 844.934494][ T29] kauditd_printk_skb: 121 callbacks suppressed [ 844.934568][ T29] audit: type=1400 audit(1788037711.742:4963): avc: denied { write } for pid=9947 comm="syz.7.13784" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 845.085423][ T9966] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9966 comm=syz.6.13792 [ 845.203153][ T9971] bond1: entered allmulticast mode [ 845.203298][ T9971] 8021q: adding VLAN 0 to HW filter on device bond1 [ 845.374035][ T9979] netlink: 40 bytes leftover after parsing attributes in process `syz.8.13798'. [ 845.377671][ T9979] ip6gre1: entered promiscuous mode [ 845.377724][ T9979] ip6gre1: entered allmulticast mode [ 845.775630][T10011] netlink: 'syz.7.13813': attribute type 1 has an invalid length. [ 845.834266][T10014] sctp: [Deprecated]: syz.2.13814 (pid 10014) Use of struct sctp_assoc_value in delayed_ack socket option. [ 845.834266][T10014] Use struct sctp_sack_info instead [ 845.911403][ T29] audit: type=1400 audit(1788037712.762:4964): avc: denied { write } for pid=10017 comm="syz.2.13816" name="event2" dev="devtmpfs" ino=2946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 845.940167][ T29] audit: type=1400 audit(1788037712.762:4965): avc: denied { ioctl } for pid=10017 comm="syz.2.13816" path="/dev/input/event2" dev="devtmpfs" ino=2946 ioctlcmd=0x4580 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 845.940214][ T29] audit: type=1400 audit(1788037712.762:4966): avc: denied { ioctl } for pid=10018 comm="syz.8.13817" path="socket:[128062]" dev="sockfs" ino=128062 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 846.088522][T10028] netlink: 'syz.8.13820': attribute type 39 has an invalid length. [ 846.213147][T10040] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13826'. [ 846.536270][T10065] xt_hashlimit: size too large, truncated to 1048576 [ 846.587700][T10072] xt_hashlimit: size too large, truncated to 1048576 [ 846.606087][T10074] bond1: entered allmulticast mode [ 846.606226][T10074] 8021q: adding VLAN 0 to HW filter on device bond1 [ 846.681004][T10082] netlink: 8 bytes leftover after parsing attributes in process `syz.6.13844'. [ 846.681508][T10082] netlink: 48 bytes leftover after parsing attributes in process `syz.6.13844'. [ 847.102708][T10102] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13851'. [ 847.154050][T10107] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2567 sclass=netlink_route_socket pid=10107 comm=syz.2.13851 [ 847.154561][T10107] netlink: 44 bytes leftover after parsing attributes in process `syz.2.13851'. [ 847.243559][ T29] audit: type=1326 audit(1788037714.092:4967): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10111 comm="syz.5.13855" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5ce4e159 code=0x7ffc0000 [ 847.243644][ T29] audit: type=1326 audit(1788037714.092:4968): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10111 comm="syz.5.13855" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5ce4e159 code=0x7ffc0000 [ 847.243680][ T29] audit: type=1326 audit(1788037714.092:4969): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10111 comm="syz.5.13855" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5ce4e159 code=0x7ffc0000 [ 847.243720][ T29] audit: type=1326 audit(1788037714.092:4970): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10111 comm="syz.5.13855" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=113 compat=0 ip=0x7f2c5ce4e159 code=0x7ffc0000 [ 847.243805][ T29] audit: type=1326 audit(1788037714.092:4971): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10111 comm="syz.5.13855" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5ce4e159 code=0x7ffc0000 [ 847.243846][ T29] audit: type=1326 audit(1788037714.092:4972): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10111 comm="syz.5.13855" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2c5ce4e159 code=0x7ffc0000 [ 847.552368][T10114] loop5: detected capacity change from 0 to 512 [ 847.562678][T10114] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 847.591820][T10114] EXT4-fs (loop5): 1 truncate cleaned up [ 847.592377][T10114] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 847.833771][ T7710] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 847.885914][T10156] netlink: 'syz.7.13874': attribute type 29 has an invalid length. [ 847.922305][T10163] netlink: 'syz.6.13878': attribute type 4 has an invalid length. [ 847.929176][T10163] netlink: 'syz.6.13878': attribute type 4 has an invalid length. [ 848.040493][T10181] netlink: 'syz.2.13885': attribute type 1 has an invalid length. [ 848.072642][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13886'. [ 848.072740][T10184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13886'. [ 848.097885][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13886'. [ 848.097900][T12711] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 848.097923][T10184] netlink: 12 bytes leftover after parsing attributes in process `syz.2.13886'. [ 848.097946][T12711] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 848.125502][T12711] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 848.125616][T12711] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 849.406722][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13934'. [ 849.417815][T10291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.13934'. [ 850.307187][T10351] loop5: detected capacity change from 0 to 128 [ 850.380229][T10355] geneve2: entered promiscuous mode [ 850.380255][T10355] geneve2: entered allmulticast mode [ 850.380947][T14907] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.381100][T14907] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.381282][T14907] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.381453][T14907] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 850.477743][T10358] A link change request failed with some changes committed already. Interface gre2 may have been left with an inconsistent configuration, please check. [ 850.575099][ T29] kauditd_printk_skb: 182 callbacks suppressed [ 850.575127][ T29] audit: type=1326 audit(1788037717.422:5155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.8.13962" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 850.575158][ T29] audit: type=1326 audit(1788037717.422:5156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.8.13962" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 850.575260][ T29] audit: type=1326 audit(1788037717.422:5157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.8.13962" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 850.575296][ T29] audit: type=1326 audit(1788037717.422:5158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.8.13962" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 850.575335][ T29] audit: type=1326 audit(1788037717.422:5159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.8.13962" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 850.675573][ T29] audit: type=1326 audit(1788037717.432:5160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.8.13962" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 850.675693][ T29] audit: type=1326 audit(1788037717.432:5161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.8.13962" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 850.675781][ T29] audit: type=1326 audit(1788037717.432:5162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.8.13962" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 850.675877][ T29] audit: type=1326 audit(1788037717.432:5163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.8.13962" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 850.897235][ T29] audit: type=1326 audit(1788037717.752:5164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10364 comm="syz.8.13962" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 851.353015][T10417] netlink: 'syz.8.13984': attribute type 2 has an invalid length. [ 851.366747][T10417] netlink: 'syz.8.13984': attribute type 2 has an invalid length. [ 851.548167][T10437] pim6reg: entered allmulticast mode [ 851.556642][T10437] pim6reg: left allmulticast mode [ 852.333087][T10475] loop8: detected capacity change from 0 to 1024 [ 852.339431][T10475] EXT4-fs: Ignoring removed nobh option [ 852.339639][T10475] EXT4-fs: Ignoring removed bh option [ 852.368264][T10478] __nla_validate_parse: 7 callbacks suppressed [ 852.368292][T10478] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14011'. [ 852.378644][T10475] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a802c028, mo2=0002] [ 852.378674][T10475] System zones: 0-1, 3-12 [ 852.404986][T10478] team0: entered promiscuous mode [ 852.405078][T10478] team0: entered allmulticast mode [ 852.411259][T10475] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 852.429178][T10478] 8021q: adding VLAN 0 to HW filter on device team0 [ 852.468470][ T6426] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 852.544828][T10483] netlink: 20 bytes leftover after parsing attributes in process `syz.6.14013'. [ 852.564184][T10487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 852.564320][T10487] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 853.008114][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14030'. [ 853.008143][T10522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14030'. [ 853.065681][T10522] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14030'. [ 853.065711][T10522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14030'. [ 853.191129][T10534] 9p: Bad value for 'wfdno' [ 853.830042][T10558] loop8: detected capacity change from 0 to 512 [ 853.849806][T10558] EXT4-fs: Ignoring removed orlov option [ 853.852299][T10558] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 853.858029][T10558] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #16: comm syz.8.14045: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 853.858452][T10558] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 853.859047][T10558] EXT4-fs error (device loop8): ext4_orphan_get:1408: comm syz.8.14045: couldn't read orphan inode 16 (err -117) [ 853.859157][T10558] loop8: lost filesystem error report for type 5 error -117 [ 853.859724][T10558] EXT4-fs (loop8): 1 orphan inode deleted [ 853.861811][T10558] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 853.904766][ T6426] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 854.144736][T10587] netlink: 'syz.7.14057': attribute type 4 has an invalid length. [ 854.144852][T10587] netlink: 'syz.7.14057': attribute type 4 has an invalid length. [ 854.231962][T10591] 9pnet: p9_errstr2errno: server reported unknown error 0x00000 [ 854.317923][T10598] 9pnet: p9_errstr2errno: server reported unknown error p [ 854.391369][T10610] loop5: detected capacity change from 0 to 256 [ 854.588772][T10617] netlink: 'syz.6.14070': attribute type 14 has an invalid length. [ 854.588795][T10617] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14070'. [ 854.589022][T10617] netlink: 'syz.6.14070': attribute type 14 has an invalid length. [ 854.589043][T10617] netlink: 4 bytes leftover after parsing attributes in process `syz.6.14070'. [ 854.993898][T10647] netlink: 72 bytes leftover after parsing attributes in process `syz.5.14082'. [ 855.238377][T10663] netlink: 14 bytes leftover after parsing attributes in process `syz.8.14089'. [ 856.448718][ T29] kauditd_printk_skb: 549 callbacks suppressed [ 856.448762][ T29] audit: type=1326 audit(1788037723.302:5714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10724 comm="syz.7.14117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418f0fe159 code=0x7ffc0000 [ 856.448811][ T29] audit: type=1326 audit(1788037723.302:5715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10724 comm="syz.7.14117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418f0fe159 code=0x7ffc0000 [ 856.458447][ T29] audit: type=1326 audit(1788037723.312:5716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10724 comm="syz.7.14117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418f0fe159 code=0x7ffc0000 [ 856.458810][ T29] audit: type=1326 audit(1788037723.312:5717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10724 comm="syz.7.14117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418f0fe159 code=0x7ffc0000 [ 856.513960][ T29] audit: type=1326 audit(1788037723.352:5718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10724 comm="syz.7.14117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418f0fe159 code=0x7ffc0000 [ 856.514340][ T29] audit: type=1326 audit(1788037723.352:5719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10724 comm="syz.7.14117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f418f0fdec2 code=0x7ffc0000 [ 856.514786][ T29] audit: type=1326 audit(1788037723.352:5720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10724 comm="syz.7.14117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f418f0fdf57 code=0x7ffc0000 [ 856.518635][ T29] audit: type=1326 audit(1788037723.352:5721): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10724 comm="syz.7.14117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f418f0bae51 code=0x7ffc0000 [ 856.519979][ T29] audit: type=1326 audit(1788037723.382:5722): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10724 comm="syz.7.14117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f418f0fef49 code=0x7ffc0000 [ 856.520471][ T29] audit: type=1326 audit(1788037723.382:5723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10724 comm="syz.7.14117" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=273 compat=0 ip=0x7f418f0ba5ac code=0x7ffc0000 [ 856.744481][T10723] loop5: detected capacity change from 0 to 8192 [ 856.759328][T10723] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 857.151346][T10754] netlink: 'syz.2.14126': attribute type 1 has an invalid length. [ 857.172961][T10754] 8021q: adding VLAN 0 to HW filter on device bond1 [ 857.198190][T10754] bond1: (slave geneve3): making interface the new active one [ 857.210562][T10754] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 857.386735][T10780] __nla_validate_parse: 2 callbacks suppressed [ 857.386759][T10780] netlink: 24 bytes leftover after parsing attributes in process `syz.2.14137'. [ 857.386790][T10780] bond0: ARP target 170.170.170.170 is already present [ 857.386810][T10780] bond0: option arp_ip_target: invalid value (2863311530) [ 857.494610][T10791] FAULT_INJECTION: forcing a failure. [ 857.494610][T10791] name failslab, interval 1, probability 0, space 0, times 0 [ 857.494660][T10791] CPU: 0 UID: 0 PID: 10791 Comm: syz.2.14142 Not tainted syzkaller #0 PREEMPT(lazy) [ 857.494695][T10791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 857.494712][T10791] Call Trace: [ 857.494720][T10791] [ 857.494731][T10791] __dump_stack+0x1d/0x30 [ 857.494765][T10791] dump_stack_lvl+0x95/0xd0 [ 857.494793][T10791] dump_stack+0x15/0x1b [ 857.494813][T10791] should_fail_ex+0x262/0x280 [ 857.494834][T10791] ? anon_vma_clone+0xc2/0x450 [ 857.494872][T10791] should_failslab+0x8c/0xb0 [ 857.494901][T10791] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 857.494928][T10791] ? anon_vma_clone+0xc2/0x450 [ 857.494970][T10791] anon_vma_clone+0xc2/0x450 [ 857.495003][T10791] vma_modify+0x97d/0xd50 [ 857.495027][T10791] vma_modify_flags+0x1be/0x250 [ 857.495066][T10791] mlock_fixup+0x166/0x460 [ 857.495101][T10791] apply_mlockall_flags+0x1d3/0x250 [ 857.495141][T10791] __ia32_sys_munlockall+0xdb/0x190 [ 857.495178][T10791] x64_sys_call+0x1a18/0x2550 [ 857.495216][T10791] do_syscall_64+0x112/0x360 [ 857.495253][T10791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.495283][T10791] RIP: 0033:0x7f6edd0ae159 [ 857.495304][T10791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 857.495329][T10791] RSP: 002b:00007f6edbb07028 EFLAGS: 00000246 ORIG_RAX: 0000000000000098 [ 857.495351][T10791] RAX: ffffffffffffffda RBX: 00007f6edd335fa0 RCX: 00007f6edd0ae159 [ 857.495370][T10791] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 857.495386][T10791] RBP: 00007f6edd335fa0 R08: 0000000000000000 R09: 0000000000000000 [ 857.495403][T10791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 857.495420][T10791] R13: 00007f6edd336038 R14: 00007f6edd335fa0 R15: 00007fff491528e8 [ 857.495449][T10791] [ 857.739806][T16768] i801_smbus 0000:00:00.0: SMBus base address uninitialized, upgrade BIOS [ 857.740305][T16768] i801_smbus 0000:00:01.0: SMBus base address uninitialized, upgrade BIOS [ 857.750678][T16768] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 857.750740][T16768] i801_smbus 0000:00:01.3: PCI INT A: no GSI [ 857.750888][T16768] i801_smbus 0000:00:01.3: SMBus base address uninitialized, upgrade BIOS [ 857.851079][T16768] ACPI: \_SB_.LNKA: Enabled at IRQ 11 [ 857.851200][T16768] i801_smbus 0000:00:05.0: SMBus base address uninitialized, upgrade BIOS [ 857.948773][T10815] netlink: 16 bytes leftover after parsing attributes in process `syz.6.14153'. [ 858.311111][T10841] IPv6: sit5: Disabled Multicast RS [ 858.361790][T10847] bridge1: entered promiscuous mode [ 858.361814][T10847] bridge1: entered allmulticast mode [ 858.785224][T10868] Format for deleting device is "id" (uint). [ 859.150019][T12587] IPVS: starting estimator thread 0... [ 859.194864][T10883] netlink: 8 bytes leftover after parsing attributes in process `syz.5.14185'. [ 859.236630][T10881] IPVS: using max 2208 ests per chain, 110400 per kthread [ 859.344266][T10889] loop5: detected capacity change from 0 to 512 [ 859.350786][T10889] EXT4-fs: Ignoring removed i_version option [ 859.350895][T10889] ext2: Unknown parameter 'obj_user' [ 859.366725][T10887] netlink: 16 bytes leftover after parsing attributes in process `syz.7.14187'. [ 859.708215][T10916] loop5: detected capacity change from 0 to 1024 [ 859.733456][T10916] EXT4-fs (loop5): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 859.733544][T10916] ext4 filesystem being mounted at /177/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 859.805269][ T7710] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 859.829394][T10927] netlink: 'syz.2.14204': attribute type 4 has an invalid length. [ 859.906891][T10938] syz.7.14208: vmalloc error: size 8589938688, exceeds total pages, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz7,mems_allowed=0 [ 859.907044][T10938] CPU: 1 UID: 0 PID: 10938 Comm: syz.7.14208 Not tainted syzkaller #0 PREEMPT(lazy) [ 859.907079][T10938] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 859.907095][T10938] Call Trace: [ 859.907102][T10938] [ 859.907114][T10938] __dump_stack+0x1d/0x30 [ 859.907145][T10938] dump_stack_lvl+0x95/0xd0 [ 859.907177][T10938] dump_stack+0x15/0x1b [ 859.907211][T10938] warn_alloc+0x146/0x1c0 [ 859.907273][T10938] ? __rcu_read_unlock+0x4e/0x70 [ 859.907433][T10938] ? __futex_wait+0x1fd/0x260 [ 859.907490][T10938] __vmalloc_node_range_noprof+0xa3/0x1000 [ 859.907579][T10938] ? __pfx_futex_wake_mark+0x10/0x10 [ 859.907652][T10938] ? __rcu_read_unlock+0x4e/0x70 [ 859.907752][T10938] ? xskq_create+0x38/0x160 [ 859.907998][T10938] ? __kmalloc_cache_noprof+0x331/0x400 [ 859.908124][T10938] xskq_create+0xea/0x160 [ 859.908236][T10938] ? xsk_init_queue+0x70/0xb0 [ 859.908418][T10938] xsk_init_queue+0x70/0xb0 [ 859.908597][T10938] xsk_setsockopt+0x471/0x640 [ 859.908701][T10938] ? __pfx_xsk_setsockopt+0x10/0x10 [ 859.908851][T10938] __sys_setsockopt+0x184/0x200 [ 859.909044][T10938] __x64_sys_setsockopt+0x64/0x80 [ 859.909274][T10938] x64_sys_call+0x248f/0x2550 [ 859.909399][T10938] do_syscall_64+0x112/0x360 [ 859.909515][T10938] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 859.909622][T10938] RIP: 0033:0x7f418f0fe159 [ 859.909690][T10938] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 859.909781][T10938] RSP: 002b:00007f418db57028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 859.909849][T10938] RAX: ffffffffffffffda RBX: 00007f418f385fa0 RCX: 00007f418f0fe159 [ 859.909883][T10938] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 859.909931][T10938] RBP: 00007f418f195024 R08: 0000000000000004 R09: 0000000000000000 [ 859.909985][T10938] R10: 0000200000000900 R11: 0000000000000246 R12: 0000000000000000 [ 859.910034][T10938] R13: 00007f418f386038 R14: 00007f418f385fa0 R15: 00007fff7bb65418 [ 859.910166][T10938] [ 859.914494][T10938] Mem-Info: [ 859.914528][T10938] active_anon:3358 inactive_anon:47163 isolated_anon:0 [ 859.914528][T10938] active_file:9820 inactive_file:20335 isolated_file:0 [ 859.914528][T10938] unevictable:0 dirty:277 writeback:0 [ 859.914528][T10938] slab_reclaimable:2806 slab_unreclaimable:27277 [ 859.914528][T10938] mapped:29334 shmem:34240 pagetables:6124 [ 859.914528][T10938] sec_pagetables:0 bounce:0 [ 859.914528][T10938] kernel_misc_reclaimable:0 [ 859.914528][T10938] free:1751781 free_pcp:2977 free_cma:0 [ 859.914831][T10938] Node 0 active_anon:13432kB inactive_anon:188652kB active_file:39280kB inactive_file:81340kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:117336kB dirty:1108kB writeback:0kB shmem:136960kB kernel_stack:5456kB pagetables:24496kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 859.915135][T10938] Node 0 DMA free:15360kB boost:0kB min:20kB low:32kB high:44kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 859.915360][T10938] lowmem_reserve[]: 0 2877 7856 7856 [ 859.915531][T10938] Node 0 DMA32 free:2946928kB boost:0kB min:4124kB low:7048kB high:9972kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:3129332kB managed:2946928kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 859.915832][T10938] lowmem_reserve[]: 0 0 4978 4978 [ 859.917247][T10938] Node 0 Normal free:4044836kB boost:0kB min:7188kB low:12284kB high:17380kB reserved_highatomic:0kB free_highatomic:0kB active_anon:13432kB inactive_anon:188652kB active_file:39280kB inactive_file:81340kB unevictable:0kB writepending:1108kB zspages:0kB present:5242880kB managed:5098228kB mlocked:0kB bounce:0kB free_pcp:11908kB local_pcp:1112kB free_cma:0kB [ 859.917372][T10938] lowmem_reserve[]: 0 0 0 0 [ 859.917557][T10938] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 859.918036][T10938] Node 0 DMA32: 4*4kB (M) 2*8kB (M) 5*16kB (M) 2*32kB (M) 3*64kB (M) 2*128kB (M) 1*256kB (M) 4*512kB (M) 5*1024kB (M) 1*2048kB (M) 717*4096kB (M) = 2946928kB [ 859.921090][T10938] Node 0 Normal: 5177*4kB (UME) 2249*8kB (UME) 991*16kB (UME) 662*32kB (UME) 624*64kB (UME) 386*128kB (UME) 155*256kB (UME) 162*512kB (UM) 107*1024kB (UME) 71*2048kB (UME) 855*4096kB (UM) = 4044764kB [ 859.921861][T10938] Node 0 hugepages_total=121 hugepages_free=119 hugepages_surp=0 hugepages_size=2048kB [ 859.921920][T10938] 64433 total pagecache pages [ 859.921951][T10938] 46 pages in swap cache [ 859.921982][T10938] Free swap = 124812kB [ 859.922005][T10938] Total swap = 124996kB [ 859.923695][T10938] 2097051 pages RAM [ 859.923726][T10938] 0 pages HighMem/MovableOnly [ 859.923750][T10938] 81922 pages reserved [ 860.311287][T10953] loop5: detected capacity change from 0 to 512 [ 860.322264][T10953] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.14212: inode has both inline data and extents flags [ 860.322291][T10953] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 860.322540][T10953] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.14212: couldn't read orphan inode 15 (err -117) [ 860.322735][T10953] loop5: lost filesystem error report for type 5 error -117 [ 860.324026][T10953] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 860.522410][ T7710] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 860.641995][T10966] netlink: 16 bytes leftover after parsing attributes in process `syz.5.14218'. [ 860.987273][T10970] netlink: 4 bytes leftover after parsing attributes in process `syz.5.14221'. [ 861.070459][T10979] netlink: 20 bytes leftover after parsing attributes in process `syz.7.14225'. [ 861.098746][T10979] netlink: 20 bytes leftover after parsing attributes in process `syz.7.14225'. [ 861.224609][T10992] netlink: 'syz.6.14230': attribute type 1 has an invalid length. [ 861.249768][T10991] netlink: 20 bytes leftover after parsing attributes in process `syz.8.14231'. [ 861.268788][T10992] 8021q: adding VLAN 0 to HW filter on device bond2 [ 861.306466][T10997] netlink: 8 bytes leftover after parsing attributes in process `syz.7.14233'. [ 861.320709][T10992] bond2: (slave geneve3): making interface the new active one [ 861.333082][T10992] bond2: (slave geneve3): Enslaving as an active interface with an up link [ 861.335984][T12587] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.336165][T12587] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.336289][T12587] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.336440][T12587] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 861.340097][T10999] hugetlbfs: syz.8.14234 (10999): Using mlock ulimits for SHM_HUGETLB is obsolete [ 861.582780][T11010] ieee802154 phy0 wpan0: encryption failed: -126 [ 862.680279][ T29] kauditd_printk_skb: 660 callbacks suppressed [ 862.680303][ T29] audit: type=1326 audit(1788037729.532:6384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11051 comm="syz.7.14257" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418f0fe159 code=0x7ffc0000 [ 862.680400][ T29] audit: type=1326 audit(1788037729.532:6385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11051 comm="syz.7.14257" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418f0fe159 code=0x7ffc0000 [ 862.680498][ T29] audit: type=1326 audit(1788037729.532:6386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11051 comm="syz.7.14257" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418f0fe159 code=0x7ffc0000 [ 862.680548][ T29] audit: type=1326 audit(1788037729.532:6387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11051 comm="syz.7.14257" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=298 compat=0 ip=0x7f418f0fe159 code=0x7ffc0000 [ 862.680650][ T29] audit: type=1326 audit(1788037729.532:6388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11051 comm="syz.7.14257" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418f0fe159 code=0x7ffc0000 [ 862.680837][ T29] audit: type=1326 audit(1788037729.532:6389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11051 comm="syz.7.14257" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418f0fe159 code=0x7ffc0000 [ 862.680938][ T29] audit: type=1326 audit(1788037729.532:6390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11051 comm="syz.7.14257" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418f0fe159 code=0x7ffc0000 [ 862.681053][ T29] audit: type=1326 audit(1788037729.532:6391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11051 comm="syz.7.14257" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f418f0fe159 code=0x7ffc0000 [ 862.681216][ T29] audit: type=1326 audit(1788037729.532:6392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11051 comm="syz.7.14257" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418f0fe159 code=0x7ffc0000 [ 862.681359][ T29] audit: type=1326 audit(1788037729.532:6393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11051 comm="syz.7.14257" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418f0fe159 code=0x7ffc0000 [ 863.012757][T11057] __nla_validate_parse: 1 callbacks suppressed [ 863.012785][T11057] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14259'. [ 863.129357][T11065] FAULT_INJECTION: forcing a failure. [ 863.129357][T11065] name failslab, interval 1, probability 0, space 0, times 0 [ 863.129407][T11065] CPU: 0 UID: 0 PID: 11065 Comm: syz.5.14263 Not tainted syzkaller #0 PREEMPT(lazy) [ 863.129443][T11065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 863.129480][T11065] Call Trace: [ 863.129489][T11065] [ 863.129499][T11065] __dump_stack+0x1d/0x30 [ 863.129526][T11065] dump_stack_lvl+0x95/0xd0 [ 863.129559][T11065] dump_stack+0x15/0x1b [ 863.129588][T11065] should_fail_ex+0x262/0x280 [ 863.129689][T11065] ? skb_clone+0x151/0x1f0 [ 863.129824][T11065] should_failslab+0x8c/0xb0 [ 863.129895][T11065] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 863.129934][T11065] ? skb_clone+0x151/0x1f0 [ 863.130008][T11065] skb_clone+0x151/0x1f0 [ 863.130125][T11065] bpf_clone_redirect+0xed/0x280 [ 863.130256][T11065] bpf_prog_69c2527fbc57d46b+0x5f/0x68 [ 863.130318][T11065] ? __perf_event_task_sched_in+0xa7a/0xae0 [ 863.130342][T11065] ? perf_cgroup_switch+0x10c/0x480 [ 863.130371][T11065] ? xfd_validate_state+0x45/0xf0 [ 863.130408][T11065] ? _raw_spin_unlock+0x9/0x30 [ 863.130564][T11065] ? finish_task_switch+0x121/0x340 [ 863.130609][T11065] ? __schedule+0x79b/0xd20 [ 863.130653][T11065] ? is_bpf_text_address+0x141/0x160 [ 863.130689][T11065] ? sysvec_apic_timer_interrupt+0x44/0x80 [ 863.130793][T11065] ? preempt_schedule_common+0x12/0x40 [ 863.130853][T11065] ? preempt_schedule_thunk+0x16/0x40 [ 863.130894][T11065] ? bpf_test_timer_continue+0xac/0x350 [ 863.131046][T11065] bpf_test_run+0x29b/0x620 [ 863.131137][T11065] ? __list_add_valid_or_report+0x38/0xe0 [ 863.131178][T11065] ? bpf_test_run+0x198/0x620 [ 863.131215][T11065] bpf_prog_test_run_skb+0xe67/0x11b0 [ 863.131263][T11065] ? __rcu_read_unlock+0x4e/0x70 [ 863.131447][T11065] ? __fget_files+0x184/0x1c0 [ 863.131478][T11065] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 863.131552][T11065] bpf_prog_test_run+0x208/0x340 [ 863.131581][T11065] __sys_bpf+0x8da/0xc30 [ 863.131618][T11065] ? do_futex+0x2e0/0x460 [ 863.131668][T11065] __x64_sys_bpf+0x69/0x80 [ 863.131764][T11065] x64_sys_call+0xf26/0x2550 [ 863.131798][T11065] do_syscall_64+0x112/0x360 [ 863.131875][T11065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 863.131905][T11065] RIP: 0033:0x7f2c5ce4e159 [ 863.131928][T11065] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.132000][T11065] RSP: 002b:00007f2c5b8a7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 863.132024][T11065] RAX: ffffffffffffffda RBX: 00007f2c5d0d5fa0 RCX: 00007f2c5ce4e159 [ 863.132117][T11065] RDX: 0000000000000050 RSI: 0000200000002300 RDI: 000000000000000a [ 863.132131][T11065] RBP: 00007f2c5cee5024 R08: 0000000000000000 R09: 0000000000000000 [ 863.132145][T11065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 863.132158][T11065] R13: 00007f2c5d0d6038 R14: 00007f2c5d0d5fa0 R15: 00007ffdc276c598 [ 863.132195][T11065] [ 864.031912][T11082] loop8: detected capacity change from 0 to 1024 [ 864.047568][T11082] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 864.047777][T11082] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 864.074191][T11082] EXT4-fs error (device loop8): ext4_map_blocks:832: inode #15: comm syz.8.14270: lblock 0 mapped to illegal pblock 0 (length 1) [ 864.074725][T11082] EXT4-fs (loop8): Remounting filesystem read-only [ 864.116521][T12735] IPVS: starting estimator thread 0... [ 864.231882][T11090] IPVS: using max 1872 ests per chain, 93600 per kthread [ 864.325220][ T6426] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 864.430199][T11108] netlink: 'syz.6.14277': attribute type 21 has an invalid length. [ 864.687050][T11121] bond2: entered allmulticast mode [ 866.047416][T11158] tipc: Cannot configure node identity twice [ 866.914237][T11195] bridge0: port 1(bridge_slave_0) entered blocking state [ 866.914300][T11195] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.914469][T11195] bridge_slave_0: entered allmulticast mode [ 866.915097][T11195] bridge_slave_0: entered promiscuous mode [ 866.948589][T11195] bridge0: port 2(bridge_slave_1) entered blocking state [ 866.948632][T11195] bridge0: port 2(bridge_slave_1) entered disabled state [ 866.948866][T11195] bridge_slave_1: entered allmulticast mode [ 866.961091][T11195] bridge_slave_1: entered promiscuous mode [ 867.011059][T11195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 867.085089][T11195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 867.114415][T11195] team0: Port device team_slave_0 added [ 867.130750][T11195] team0: Port device team_slave_1 added [ 867.383433][T11195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 867.383467][T11195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.383631][T11195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 867.384210][T11195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 867.384224][T11195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 867.384297][T11195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 867.509637][T11195] hsr_slave_0: entered promiscuous mode [ 867.510735][T11195] hsr_slave_1: entered promiscuous mode [ 867.511228][T11195] debugfs: 'hsr0' already exists in 'hsr' [ 867.511271][T11195] Cannot create hsr debugfs directory [ 867.594316][T11195] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.657032][T11195] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.709631][T11195] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.757389][T11195] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.830667][T11195] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 867.840482][T11195] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 867.841162][T11195] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 867.845981][T11195] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 867.847736][T11195] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 867.853505][T11195] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 867.855076][T11195] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 867.861818][T11195] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 867.917244][T11195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 867.931013][T11195] 8021q: adding VLAN 0 to HW filter on device team0 [ 867.939922][T12711] bridge0: port 1(bridge_slave_0) entered blocking state [ 867.939965][T12711] bridge0: port 1(bridge_slave_0) entered forwarding state [ 867.947814][T14891] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.947918][T14891] bridge0: port 2(bridge_slave_1) entered forwarding state [ 867.993123][T11195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 868.022648][T11195] veth0_vlan: entered promiscuous mode [ 868.028480][T11195] veth1_vlan: entered promiscuous mode [ 868.043379][T11195] veth0_macvtap: entered promiscuous mode [ 868.047639][T11195] veth1_macvtap: entered promiscuous mode [ 868.058623][T11195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 868.062366][T11195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 868.096966][T21720] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.097015][T21720] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.097071][T21720] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 868.097126][T21720] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 869.047804][T11272] netlink: 12 bytes leftover after parsing attributes in process `syz.6.14326'. [ 869.053371][T11272] vlan0: entered promiscuous mode [ 869.053401][T11272] batadv0: entered promiscuous mode [ 869.066426][T11270] loop8: detected capacity change from 0 to 512 [ 869.127190][T11270] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 869.127282][T11270] ext4 filesystem being mounted at /306/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 872.112935][ T6426] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 872.229639][T11301] netlink: 12 bytes leftover after parsing attributes in process `syz.2.14338'. [ 872.422965][T11318] netlink: 'syz.7.14346': attribute type 26 has an invalid length. [ 873.525841][ T29] kauditd_printk_skb: 133 callbacks suppressed [ 873.525871][ T29] audit: type=1326 audit(1788037740.372:6527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.8.14360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 873.526019][ T29] audit: type=1326 audit(1788037740.372:6528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.8.14360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=228 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 873.526139][ T29] audit: type=1326 audit(1788037740.382:6529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.8.14360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 873.635434][ T29] audit: type=1326 audit(1788037740.492:6530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.8.14360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 873.635550][ T29] audit: type=1326 audit(1788037740.492:6531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.8.14360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 873.635597][ T29] audit: type=1326 audit(1788037740.492:6532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11357 comm="syz.8.14360" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff94344e159 code=0x7ffc0000 [ 873.764805][T11360] netlink: 84 bytes leftover after parsing attributes in process `syz.2.14361'. [ 874.039499][ T29] audit: type=1326 audit(1788037740.892:6533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11382 comm="syz.7.14371" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418f0fe159 code=0x7ffc0000 [ 874.039921][ T29] audit: type=1326 audit(1788037740.892:6534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11382 comm="syz.7.14371" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418f0fe159 code=0x7ffc0000 [ 874.040096][ T29] audit: type=1326 audit(1788037740.892:6535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11382 comm="syz.7.14371" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f418f0fe159 code=0x7ffc0000 [ 874.040458][ T29] audit: type=1326 audit(1788037740.892:6536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11382 comm="syz.7.14371" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=291 compat=0 ip=0x7f418f0fe159 code=0x7ffc0000 [ 874.347185][T11403] netlink: 12 bytes leftover after parsing attributes in process `syz.5.14380'. [ 874.485429][T11399] loop8: detected capacity change from 0 to 8192 [ 875.098069][T11448] loop5: detected capacity change from 0 to 512 [ 875.129668][T11448] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 875.223028][T11195] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 875.607625][T14889] IPVS: starting estimator thread 0... [ 875.695772][T11479] IPVS: using max 2256 ests per chain, 112800 per kthread [ 875.989421][T11493] netlink: 56 bytes leftover after parsing attributes in process `syz.5.14416'. [ 876.078742][T11480] ================================================================== [ 876.078791][T11480] BUG: KCSAN: data-race in shmem_file_splice_read / shmem_file_splice_read [ 876.078851][T11480] [ 876.078857][T11480] write to 0xffff8881889425e0 of 8 bytes by task 11474 on cpu 1: [ 876.078874][T11480] shmem_file_splice_read+0x401/0x590 [ 876.078908][T11480] splice_direct_to_actor+0x261/0x680 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 876.078970][T11480] do_splice_direct+0x119/0x1a0 [ 876.079003][T11480] do_sendfile+0x37d/0x640 [ 876.079036][T11480] __x64_sys_sendfile64+0x105/0x150 [ 876.079089][T11480] x64_sys_call+0x1015/0x2550 [ 876.079123][T11480] do_syscall_64+0x112/0x360 [ 876.079157][T11480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.079178][T11480] [ 876.079184][T11480] write to 0xffff8881889425e0 of 8 bytes by task 11480 on cpu 0: [ 876.079199][T11480] shmem_file_splice_read+0x401/0x590 [ 876.079241][T11480] splice_direct_to_actor+0x261/0x680 [ 876.079284][T11480] do_splice_direct+0x119/0x1a0 [ 876.079322][T11480] do_sendfile+0x37d/0x640 [ 876.079367][T11480] __x64_sys_sendfile64+0x105/0x150 [ 876.079405][T11480] x64_sys_call+0x1015/0x2550 [ 876.079429][T11480] do_syscall_64+0x112/0x360 [ 876.079454][T11480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.079478][T11480] [ 876.079483][T11480] value changed: 0x0000000000004738 -> 0x000000000000473a [ 876.079499][T11480] [ 876.079505][T11480] Reported by Kernel Concurrency Sanitizer on: [ 876.079519][T11480] CPU: 0 UID: 0 PID: 11480 Comm: syz.6.14408 Not tainted syzkaller #0 PREEMPT(lazy) [ 876.079552][T11480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 876.079569][T11480] ================================================================== [ 876.279810][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14419'. [ 876.279917][T11501] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14419'. [ 876.325818][T11501] netlink: 8 bytes leftover after parsing attributes in process `syz.2.14419'. [ 876.325852][T11501] netlink: 20 bytes leftover after parsing attributes in process `syz.2.14419'. [ 876.628675][ T9855] syz_tun (unregistering): left allmulticast mode [ 876.628708][ T9855] syz_tun (unregistering): left promiscuous mode [ 876.628808][ T9855] bridge0: port 3(syz_tun) entered disabled state [ 876.671095][T14889] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.742620][T14889] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.811736][T14889] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.860877][T14889] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.937479][T14889] bridge_slave_1: left allmulticast mode [ 876.937556][T14889] bridge_slave_1: left promiscuous mode [ 876.937691][T14889] bridge0: port 2(bridge_slave_1) entered disabled state [ 876.960604][T14889] bridge_slave_0: left allmulticast mode [ 876.960634][T14889] bridge_slave_0: left promiscuous mode [ 876.960877][T14889] bridge0: port 1(bridge_slave_0) entered disabled state [ 877.223565][T14889] bond2 (unregistering): (slave geneve3): Releasing active interface [ 877.257918][T14889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 877.273520][T14889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 877.284163][T14889] bond0 (unregistering): Released all slaves [ 877.288305][T14889] bond1 (unregistering): Released all slaves [ 877.294160][T14889] bond2 (unregistering): Released all slaves [ 877.339499][T14889] tipc: Disabling bearer [ 877.339531][T14889] tipc: Left network mode [ 877.354402][T14889] hsr_slave_0: left promiscuous mode [ 877.361950][T14889] hsr_slave_1: left promiscuous mode [ 877.362494][T14889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 877.363552][T14889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 877.430646][T14889] team0 (unregistering): Port device team_slave_1 removed [ 877.445169][T14889] team0 (unregistering): Port device team_slave_0 removed [ 877.488635][ T3023] 8021q: adding VLAN 0 to HW filter on device eth1 [ 877.604192][ T3023] 8021q: adding VLAN 0 to HW filter on device eth2 [ 877.708908][T14889] IPVS: stop unused estimator thread 0... [ 877.719012][ T3023] 8021q: adding VLAN 0 to HW filter on device eth3 [ 877.798964][T14889] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 877.799016][T14889] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.857658][T14889] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 877.857751][T14889] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.901729][ T3023] 8021q: adding VLAN 0 to HW filter on device eth4 [ 877.927119][T14889] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 877.927183][T14889] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 877.967383][T14889] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 877.967457][T14889] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 878.147077][ T3023] 8021q: adding VLAN 0 to HW filter on device eth21 [ 878.238159][T14889] bridge_slave_1: left allmulticast mode [ 878.238207][T14889] bridge_slave_1: left promiscuous mode [ 878.238374][T14889] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.262418][T14889] bridge_slave_0: left allmulticast mode [ 878.262512][T14889] bridge_slave_0: left promiscuous mode [ 878.262618][T14889] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.496476][T14889] bridge_slave_1: left allmulticast mode [ 878.496502][T14889] bridge_slave_1: left promiscuous mode [ 878.496782][T14889] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.511021][T14889] bridge_slave_0: left allmulticast mode [ 878.511057][T14889] bridge_slave_0: left promiscuous mode [ 878.511359][T14889] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.750053][T14889] bond1 (unregistering): (slave geneve3): Releasing active interface [ 878.785243][T14889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 878.796396][T14889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 878.796859][T14889] bond0 (unregistering): Released all slaves [ 878.800161][T14889] bond1 (unregistering): Released all slaves [ 878.862634][T14889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 878.873782][T14889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 878.885672][T14889] bond0 (unregistering): Released all slaves [ 878.893665][ T3023] 8021q: adding VLAN 0 to HW filter on device eth22 [ 878.930454][T14889] tipc: Left network mode [ 878.940859][T14889] hsr_slave_0: left promiscuous mode [ 878.948005][T14889] hsr_slave_1: left promiscuous mode [ 878.948966][T14889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 878.956995][T14889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 878.972327][T14889] hsr_slave_0: left promiscuous mode [ 878.973290][T14889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 878.979396][T14889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 879.055440][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 879.055476][ T29] audit: type=1400 audit(1788037745.902:6647): avc: denied { write } for pid=11595 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 879.110428][ T29] audit: type=1400 audit(1788037745.962:6648): avc: denied { write } for pid=11606 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 879.154712][T14889] team0 (unregistering): Port device team_slave_1 removed [ 879.163572][T14889] team0 (unregistering): Port device team_slave_0 removed [ 879.194590][ T3023] 8021q: adding VLAN 0 to HW filter on device eth23 [ 879.276936][ T29] audit: type=1400 audit(1788037746.132:6649): avc: denied { write } for pid=11609 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 879.312407][ T29] audit: type=1400 audit(1788037746.162:6650): avc: denied { write } for pid=11620 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 879.342868][ T3023] 8021q: adding VLAN 0 to HW filter on device eth24 [ 879.439376][ T29] audit: type=1400 audit(1788037746.292:6651): avc: denied { write } for pid=11624 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 879.473673][ T29] audit: type=1400 audit(1788037746.332:6652): avc: denied { write } for pid=11635 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 879.514367][ T3023] 8021q: adding VLAN 0 to HW filter on device eth30 [ 879.598498][ T29] audit: type=1400 audit(1788037746.452:6653): avc: denied { write } for pid=11638 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 879.633264][ T29] audit: type=1400 audit(1788037746.482:6654): avc: denied { write } for pid=11649 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 879.667517][T14889] IPVS: stop unused estimator thread 0... [ 879.677586][ T3023] 8021q: adding VLAN 0 to HW filter on device eth31 [ 879.796347][ T29] audit: type=1400 audit(1788037746.652:6655): avc: denied { write } for pid=11653 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 879.830956][ T29] audit: type=1400 audit(1788037746.682:6656): avc: denied { write } for pid=11664 comm="rm" name="hook-state" dev="tmpfs" ino=487 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 879.862824][T14889] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.881311][ T3023] 8021q: adding VLAN 0 to HW filter on device eth32 [ 879.899361][T14889] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.948858][T14889] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 879.998723][T14889] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 880.031819][ T3023] 8021q: adding VLAN 0 to HW filter on device eth33 [ 880.070850][T14889] bridge_slave_1: left allmulticast mode [ 880.070936][T14889] bridge_slave_1: left promiscuous mode [ 880.071178][T14889] bridge0: port 2(bridge_slave_1) entered disabled state [ 880.084928][T14889] bridge_slave_0: left allmulticast mode [ 880.085050][T14889] bridge_slave_0: left promiscuous mode [ 880.085327][T14889] bridge0: port 1(bridge_slave_0) entered disabled state [ 880.153538][T14889] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 880.165687][T14889] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 880.177048][T14889] bond0 (unregistering): Released all slaves [ 880.219415][T14889] hsr_slave_0: left promiscuous mode [ 880.226561][T14889] hsr_slave_1: left promiscuous mode [ 880.227147][T14889] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 880.227173][T14889] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 880.252371][T14889] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 880.252471][T14889] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 880.273632][T14889] veth1_macvtap: left promiscuous mode [ 880.273722][T14889] veth0_macvtap: left promiscuous mode [ 880.273822][T14889] veth1_vlan: left promiscuous mode [ 880.273934][T14889] veth0_vlan: left promiscuous mode [ 880.369004][T14889] team0 (unregistering): Port device team_slave_1 removed [ 880.378232][T14889] team0 (unregistering): Port device team_slave_0 removed [ 880.408792][ T3023] 8021q: adding VLAN 0 to HW filter on device eth34 [ 880.536936][ T3023] 8021q: adding VLAN 0 to HW filter on device eth35 [ 880.590712][T14889] IPVS: stop unused estimator thread 0... [ 880.657483][ T3023] 8021q: adding VLAN 0 to HW filter on device eth36 [ 880.767247][ T3023] 8021q: adding VLAN 0 to HW filter on device eth37