last executing test programs: 1m0.556779491s ago: executing program 0 (id=64): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) close(r1) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0xa, 0x2, 0x4, 0x8}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000004000000010000000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0xe, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 1m0.449434183s ago: executing program 0 (id=68): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1e, 0x2}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x40, 0x800, 0x40}}}}]}, 0x44}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000026c0)=@delchain={0x24, 0x66, 0x221, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xd, 0xfff3}, {}, {0xb, 0xfff3}}}, 0x24}, 0x1, 0x0, 0x0, 0x8048}, 0x20004800) 1m0.333428846s ago: executing program 0 (id=73): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40805) r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa666ae27a87c986dd6900000000140601fe8000000000000000000000000039fe8000000000000000000000000000aa4e224e2400", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180)) ptrace$cont(0x21, r0, 0x80000001, 0x4) 1m0.069175428s ago: executing program 0 (id=79): syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f0000000180)={[{@grpquota}, {@nomblk_io_submit}, {@quota}]}, 0x1, 0x506, &(0x7f0000001d00)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x42, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 59.935925854s ago: executing program 0 (id=81): r0 = perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xd}, 0x10000d, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r0}, 0x8) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x0, &(0x7f0000000200)}) r1 = io_uring_setup(0x3d9f, &(0x7f0000000340)={0x0, 0xf354, 0x40, 0xffffffff, 0x3c5}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x16, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x700}, 0x1) 59.433552664s ago: executing program 0 (id=89): socket$inet_udp(0x2, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, r1, 0x25, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0x9e, &(0x7f00000000c0)=ANY=[], 0x0) 59.397366372s ago: executing program 32 (id=89): socket$inet_udp(0x2, 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000780)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r2}, &(0x7f0000000840), &(0x7f0000000880)=r3}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000280)={r3, r1, 0x25, 0x0, @val=@tcx={@void, @value=r3}}, 0x1c) syz_emit_ethernet(0x9e, &(0x7f00000000c0)=ANY=[], 0x0) 38.56015502s ago: executing program 1 (id=393): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000300)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5d31, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0xffffffffffffffff}, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc}, 0x0, 0xffffbfffffffffff, 0xffffffffffffffff, 0x2) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000001140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3000000000080002400000000350000000120a01010000000000000000020000000900010073797a3000000000070002006f303000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f303900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f313900080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323000080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323100080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323200080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323300080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323400080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323500080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323600080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323700080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323800080003400000000720000480060001000002000005000200110000000c000300080001000000001e50000000120a01010000000000000000020000000900010073797a3000000000070002006f323900080003400000000720000480060001000002000005000200110000000c000300080001000000001e14000000110001"], 0xcd0}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x20, 0x15, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}}, 0x10) 37.345110642s ago: executing program 1 (id=411): socket(0x10, 0x803, 0x0) socket$inet6(0xa, 0x2, 0x3a) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000004500), 0xc00, &(0x7f0000000300)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000}]}}) write$P9_RVERSION(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r1, @ANYRESHEX=r2], 0x15) 37.207840609s ago: executing program 1 (id=415): mmap(0x0, 0x1000, 0x3, 0x32, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x5, 0x100000001}, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="190000000400000008000000"], 0x48) r0 = socket$inet6(0xa, 0x802, 0x0) set_mempolicy(0x4005, 0x0, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r0, 0x29, 0x37, &(0x7f0000000000)=ANY=[@ANYBLOB="000204"], 0x18) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 36.794180931s ago: executing program 1 (id=419): getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x400000000000009, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x8882) pselect6(0x0, 0x0, 0x0, &(0x7f0000000240)={0x1f, 0x3, 0x0, 0xb1bd, 0x0, 0xfffffffffffffffc, 0x0, 0x1b}, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x40505330, &(0x7f00000001c0)={0x800100, 0x101, 0x6, 0xe1d9, 0x3}) perf_event_open(&(0x7f0000001040)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x4, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) getsockopt$IP_SET_OP_GET_FNAME(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000000)={0x8, 0x7, 0x0, 'syz2\x00'}, &(0x7f0000000040)=0x2c) 35.905659678s ago: executing program 1 (id=433): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) syz_clone(0xf41e4500, 0x0, 0x0, 0x0, 0x0, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) 35.000529088s ago: executing program 1 (id=445): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000011c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079c", 0xf}], 0x2) 31.884306907s ago: executing program 3 (id=489): socket$inet_udp(0x2, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x20, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x1, 0xb2, 0x5, 0x2}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 31.022907317s ago: executing program 3 (id=498): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x192d, &(0x7f0000000040)={0x0, 0x7b4e, 0xf080, 0xc, 0xa0002f5}) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x1, @perf_bp={0x0}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) io_uring_enter(r0, 0x6219, 0x7721, 0x1e, 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x48000000, 0x4, 0x6, 0x0}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) ioctl$TIOCSPTLCK(0xffffffffffffffff, 0x40045431, &(0x7f0000000000)) 30.423262727s ago: executing program 3 (id=510): socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x2, 0x200000000000001, 0x106) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x14cf, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x80008, 0xc0}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600100004"], 0x50) sendmmsg(0xffffffffffffffff, &(0x7f0000000100)=[{{0x0, 0x2d, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x51, 0x0) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 30.333865694s ago: executing program 3 (id=512): mkdir(&(0x7f0000000400)='./file0\x00', 0x114) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x81899, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r0, 0x0, 0xffffffffffffff9c, &(0x7f0000000340)='./file0/../file0\x00', 0x14) mount_setattr(r0, &(0x7f00000001c0)='./file0/../file0\x00', 0x8000, &(0x7f00000002c0)={0x1, 0xa, 0x80000, {r0}}, 0x20) umount2(&(0x7f0000000180)='./file0\x00', 0xa) 30.20330721s ago: executing program 3 (id=514): perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_bp={0x0, 0x1}, 0x10c0e8, 0x0, 0x7, 0x4, 0x6, 0x8001, 0x7fff}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB], 0x30}, 0x1, 0x0, 0x0, 0xc005}, 0x4000) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) socket(0x10, 0x3, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x10001) fstat(0xffffffffffffffff, &(0x7f0000000340)) 30.044163242s ago: executing program 3 (id=517): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x1, 0x100, 0x0, 0x0, 0x3b8000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 30.029722495s ago: executing program 33 (id=517): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0a00000004000000080000000a"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x6, 0x4, 0x4, 0x100, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0x4, 0x1, 0x100, 0x0, 0x0, 0x3b8000, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000611800000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000150802000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000bfa200000000000007020000f8ffffff850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r3}, 0xc) 21.844986091s ago: executing program 5 (id=586): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x3, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01000200000000000000070000000c001600fbffffffffffffff140008"], 0x34}}, 0x0) perf_event_open(&(0x7f0000000140)={0x2, 0x80, 0x30, 0x1, 0x0, 0x0, 0x0, 0x7, 0x2520, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffefffc, 0x4e0e7b2abb8edb28, @perf_config_ext={0x6, 0x9}, 0xc499, 0x201224, 0x0, 0x7, 0x9, 0x20005, 0x0, 0x0, 0x0, 0x0, 0x2000001030000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @random="ece65fbcee55", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x3, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3}, "ffb00afe4e70"}}}}}}}, 0x0) 21.69590696s ago: executing program 5 (id=587): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r0, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @timestamp_reply={0xe, 0x0, 0x0, 0x2, 0xf, 0x5, 0x2, 0x9}}}}}, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x80000000, 0x0, 0xfffffffc}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f407000982001f000000fe0000000000000008000f00fd000000", 0x24) 21.605579768s ago: executing program 5 (id=588): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x570, 0x2c0, 0x0, 0xffffffff, 0x0, 0x360, 0x4d8, 0x4d8, 0xffffffff, 0x4d8, 0x4d8, 0x5, 0x0, {[{{@ip={@dev={0xac, 0x14, 0x14, 0x1d}, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth1_to_bond\x00', {}, {}, 0x16}, 0x0, 0x288, 0x2c0, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'bm\x00', "0d01d3e494b2bfd892aa74009b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f5d010000fa5fad26a5925da2650a12bdf9d29248ae63e2349b63b5fb75ea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba00", 0x79, 0x2, {0x1}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_to_bridge\x00', {0x5, 0x1, 0x24, 0xffffffff, 0x4da01491, 0x5, 0x3bde, 0x1ff, 0x78, 0x40}, {0xb}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xd, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @icmp_id=0x65, @gre_key=0x8}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xffffffffffffffff, 0xd, 0x1}, {0x2, 0x1, 0x3}, 0x1000, 0x100}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0xff, 0xffffff00, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {}, 0x6}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @port=0x4e22, @port=0x4f23}}}}, {{@ip={@empty, @remote, 0xffffffff, 0xffffff00, 'vcan0\x00', 'pimreg1\x00', {}, {0xff}, 0x32, 0x2, 0x2d}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id=0x66}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x5d0) 19.922310392s ago: executing program 34 (id=445): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000011c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000340)=[{&(0x7f00000002c0)="89e7ee0c7cdad9b4b47380c988cafb", 0xf}, {&(0x7f0000000440)="448b7c0acf8bc0cefe8360fcbe079c", 0xf}], 0x2) 19.809163235s ago: executing program 5 (id=604): syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x10, &(0x7f0000000140)={[{@norecovery}]}, 0xed, 0x474, &(0x7f0000000b80)="$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") prlimit64(0x0, 0x1, 0x0, 0x0) r0 = getpid() mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ed) mount(0x0, &(0x7f0000000280)='./proc_mnt\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/irq/26/smp_affinity\x00', 0x1, 0x0) r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x8020000) mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0xf, 0x0, 0x100000}, 0x20) 19.676734641s ago: executing program 5 (id=605): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x89901) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0xfffffffd, 0x0, @perf_config_ext={0x3fffffffc}, 0x0, 0x0, 0x0, 0x3, 0xfff, 0x8001, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) move_mount(r2, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) rmdir(&(0x7f0000000640)='./file0\x00') 19.236719008s ago: executing program 5 (id=609): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext={0x4d5, 0x3ff}, 0x0, 0x20000, 0x0, 0x8, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2400, 0x4100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x3c}}, 0x4000000) 19.236239889s ago: executing program 35 (id=609): syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) perf_event_open(&(0x7f0000000840)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, @perf_config_ext={0x4d5, 0x3ff}, 0x0, 0x20000, 0x0, 0x8, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r3, 0x0, 0xf, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=@newlink={0x3c, 0x10, 0x401, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2400, 0x4100}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0x3, r2}]}, 0x3c}}, 0x4000000) 1.599638002s ago: executing program 8 (id=858): r0 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000140)='cgroup.freeze\x00', 0x275a, 0x0) ftruncate(r2, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) 1.236922684s ago: executing program 6 (id=862): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000100)={[{@errors_remount}, {@noload}, {@bh}, {@noquota}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$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") r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb40000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, 0x0, 0x800) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) 1.190763223s ago: executing program 4 (id=863): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./debug/netdevsim/netdevsim0/take_snapshot\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='1\x00', 0x1) close(r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) r3 = getpid() sendmsg$DEVLINK_CMD_RELOAD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x3c, r2, 0x1, 0x0, 0x0, {0x1d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x0, r3}}]}, 0x3c}}, 0x0) 1.167122578s ago: executing program 2 (id=865): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) faccessat2(r0, 0x0, 0xa, 0x4053489edb03f67d) openat$dir(0xffffffffffffff9c, &(0x7f0000000cc0)='./debug/tracing/trace_pipe\x00', 0x20480, 0x4) 1.133435665s ago: executing program 4 (id=866): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 993.915042ms ago: executing program 4 (id=867): timer_create(0x1, 0x0, &(0x7f0000000380)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x25, 0x2, 0x2, 0xb68c}, {0x60}, {0x2}, {0x6, 0x0, 0x0, 0x2}]}) timer_create(0x1, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x77359400}, {0x0, 0x989680}}, 0x0) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x800) io_setup(0x1, &(0x7f0000000b80)=0x0) io_submit(r1, 0x1, &(0x7f0000001d00)=[&(0x7f0000001a80)={0x0, 0x0, 0x0, 0x5, 0x0, r0, 0x0}]) rt_sigprocmask(0x0, &(0x7f00000000c0)={[0xfffff7ec]}, 0x0, 0x8) timer_settime(0x0, 0xe54aef35e9c2845d, &(0x7f000006b000)={{0x77359400}, {0x0, 0x9}}, 0x0) 991.942412ms ago: executing program 2 (id=878): r0 = memfd_create(&(0x7f00000002c0)='%\x00nC\x9a\xe0\f\x94\x90\x8cY~!,\x9b5\x17\x0fQi\x98\xc4\x9a(\xe9\xc0\xc0\xaa\x1b\xfb\xc9\f\xe5\xd9M\xc2d\xdb\xb8\xa5\xdf<\x8b9\xd2\xa3\x1epX\xeb\xdc*\x10\xa0;\x95\xeb\x95\\I\xbd\xe4\x9b\xfeP\xe8\xf3\xe4\x16\xa7\xf2\xf5]\xf4/\x84Syk\x8b\xe2\xe1\xab\x9f\x8d9\xf1\xd6\xf4\x14\xf0\xf6xC\xa2Kv\xcd7\x05\xb0\xa8R\xe0\xd9Z\xa0\xa5\xa7*\xd0\x8f\xd8\xde \x83\x84\xe7\xb0\xc1\xad\xa2\xaf\"]\xc9>\xd9R\xc3\xf5\x17\xf9\f\xfb(\xd6\x96\xf9\x8f\xdd\xee\xa9F\x8d\xdbq\x1d\xe7\xc0?pn\xb6\xee\x9a\x13\b\xcd\x95-PrP\x7f\xc7}@\\\x94\x9a\xa5\x9f\x8fY\x8c\x80\xc5\xd0\x03\xe1\xbc\xaa\xf0\x80<;\xc1f\xc0$\xb1\xf3\xe1\xfa&\x1f\xf3\a\xd3m\x91\xc6#\x00'/218, 0x3) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='smaps_rollup\x00') fchdir(r1) r2 = inotify_init() inotify_add_watch(r2, &(0x7f0000000000)='./file0\x00', 0x80000006) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) fsetxattr$system_posix_acl(r0, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f0000002980)=ANY=[@ANYBLOB="020000000100020000000000040000000000000020"], 0x1c, 0x3) 940.379132ms ago: executing program 2 (id=868): sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x2c}}, 0x0) r0 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r0, &(0x7f0000000040), 0x10) listen(r0, 0x0) r1 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) write$binfmt_elf64(r1, &(0x7f0000000240)=ANY=[], 0x40000) r2 = accept4$unix(r0, 0x0, 0x0, 0x80000) recvmmsg(r2, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000006c0)=""/240, 0x40000}], 0x1}, 0x1bf}], 0x4000000000000ae, 0x40020022, 0x0) 890.435973ms ago: executing program 7 (id=869): socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f0000000040)={0x2, 0x80, 0xec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2103, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0x3}, 0x828, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0500"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r3}, &(0x7f0000000500), &(0x7f0000000700)=r4}, 0x20) 823.139396ms ago: executing program 2 (id=870): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0x2}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x48, 0x10, 0x437, 0x3, 0x3, {0x0, 0x0, 0x0, r3, 0x51b0b}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x7, @remote}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20048800}, 0x4000010) sendto$packet(r1, &(0x7f0000000580)='o', 0x1, 0x4, &(0x7f0000000180)={0x11, 0x8100, r3, 0x1, 0xe9, 0x6, @local}, 0x14) 816.425557ms ago: executing program 8 (id=871): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000a80)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) timer_create(0x0, 0x0, &(0x7f0000000300)=0x0) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) timer_delete(r0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, @perf_bp={0x0, 0x2}, 0x8012, 0x4, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x0, 0xfff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, 0x0) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f00000025c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 789.860123ms ago: executing program 7 (id=873): perf_event_open(&(0x7f0000001140)={0x2, 0x80, 0x47, 0x0, 0x0, 0x0, 0x0, 0xcf, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc094, 0x1, @perf_config_ext={0x8, 0x7}, 0x1004, 0x1, 0xf2ec6ba1, 0x5, 0x2, 0x1, 0x9, 0x0, 0x0, 0x0, 0x30}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8c, 0xfffffffffffff359}, 0x0, 0x80000000, 0x0, 0x9, 0x800000, 0x43, 0x4c7, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mkdir(&(0x7f0000000100)='./sys_mount\x00', 0x0) mount(0x0, &(0x7f00000001c0)='./sys_mount\x00', &(0x7f00000003c0)='sysfs\x00', 0x10000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mount/block/loop0/queue/scheduler\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='b', 0x1) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) 597.690331ms ago: executing program 8 (id=874): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x24000000) ioctl$OCFS2_IOC_GROUP_ADD(0xffffffffffffffff, 0x40186f02, &(0x7f00000000c0)={0x5, 0x2, 0xfffffff8, 0x5}) sched_setscheduler(0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x4880) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x6}, 0x220, 0x2, 0xfffffffe, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r0, 0x2000000) 597.388061ms ago: executing program 2 (id=875): r0 = socket$kcm(0x11, 0x2, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r4, 0x3e8, 0xf, 0x0, &(0x7f0000000000)="c1df07000000d30a298ee688655887", 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 543.651242ms ago: executing program 6 (id=876): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0xa) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000002, 0xc3072, 0xffffffffffffffff, 0x200000) symlink(&(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 538.558403ms ago: executing program 8 (id=877): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff0700000000000000000000850000002300000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xb}, 0x94) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xd362c3f33bcdcdd, 0x401d031, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0xfef3, 0x0, 0x0) 488.920512ms ago: executing program 7 (id=879): perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5d31, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfffffffffffffffe, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000240)='.\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401f, 0x68180, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x6f, 0x0, @perf_config_ext={0x4, 0x1}, 0x10c0e8, 0x3, 0x7, 0x3, 0x6, 0x8001, 0x7fff, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x2) socket(0x10, 0x3, 0x0) unshare(0x6020400) flock(r0, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)={0x28, r2, 0x50dc85624ea6cf59, 0xfffffffe, 0x1, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0x2}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) 460.149608ms ago: executing program 6 (id=880): syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x0, &(0x7f00000000c0), 0x2, 0xbd1, &(0x7f0000001340)="$eJzs3M1rHOcZAPBnRquVbKtduZRS91KVUmwoXUsuMrUp1C4uvfRQaK8Fq/LKCK0/kFRcyTqskn8gX+dALoEkJiGH+OxLQnLNJbGvCTkETFCsBEJIFGY/pI2lleR4V6PIvx+8mvedd7TP8+ywO/PC7gbwxBrJ/qQRxyLiYhJRau5PI6JY7w1G1BrHra4sTX65sjSZxNravz5LIomIBytLk63HSprbI83BYES8/9ckfvb05rhzC4szE9VqZbY5Pjl/5frJuYXFP0xfmbhcuVy5Onb6T+Onxk+PnhnvWq1ffXTu9he/+fsnta9f/ebW58+/nMS5GGrOtdfRLSMxsv6ctCtExES3g+Wkr1lPe51JYYd/SnucFAAAHaVt93C/iFL0xcbNWyne/iDX5AAAAICuWOuLWAMAAAAOuMT6HwAAAA641ucAHqwsTbZavp9I2Fv3z0fEcKP+1WZrzBSiVt8ORn9EHH6QRPvXWpPGvz22kYj4+N6ZN7IWPfoe8nZqyxHxy63Of1Kvf7j+Le7N9acRMdqF+CMPjX9M9Z/rQvy86wfgyXTnfONCtvn6l67f/8QW17/CFteuHyLv61/r/m910/3fRv19He7//rnLGDdfefFGp7ms/j/f/tvrrZbFz7aPVdQjuL8c8avCVvUn6/UnHeq/uMsYpW9vVDrN5V3/2ksRx2Pr+luS7X+f6OTUdLUy2vi7ZYzl98Zf6xQ/7/qz83+4Q/2t33/qdP6v7zLGfy5ceHPTznsb3e3rTz8tJv+u94rNPf+fmJ+fHYsoJv/YvP/U9rm0jmk9Rlb/id9u//rfqv7sPaHWfB6ytcByc5uNn3oo5l9u3XyrUz6t9V+e5/9Sh/PfXv+7hc3n/5ldxvjdO8+d6DTXvv7NWha/tRYGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgJY0IoYiScvr/TQtlyOORMTP43BavTY3//upa/+7eimbixiO/nRquloZjYhSY5xk47F6f2N86qHxHyPiaES8UDpUH5cnr1Uv5V08AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA645ExFAkaTki0ohYLaVpuZx3VgAAAEDXDeedAAAAANBz1v8AAABw8Fn/AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0GNHf33nbhIRtbOH6i1TbM7155oZ0Gtp3gkAuenLOwEgN4W8EwBy84hrfLcLcAAlO8wPdpwZ6HouAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOxfx4/duZtERO3soXrLFJtz/blmBvRa2tZPcswD2Ht9200W9i4PYO95icOTyxof2GntP7hxTO37MwM9ywkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/Weo3pK0HBHF5r5yOeInETEc/cnUdLUyGhE/jYgPS/0D2Xgs55wBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADovrmFxZmJarUym3XSaHbW9/Sg09eM3MMQvekkjbxr+yWfg90ZeHanY/4bjxmiGPui0n3ayfNdCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAvMwtLM5MVKuV2bm8MwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyNrewODNRrVZme9jJu0YAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzXQAAAP//jAsGRw==") perf_event_open(&(0x7f0000000240)={0x1, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400004, 0x0, @perf_config_ext={0x80000001}, 0x82, 0x0, 0x0, 0x1, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap(&(0x7f0000d61000/0x4000)=nil, 0x4000, 0x0, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4003, &(0x7f0000000180)=0x2, 0x9, 0x1) mbind(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4003, &(0x7f0000000180)=0x4, 0x9, 0x1) mlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000000)={0x7, 0xe}) 443.707271ms ago: executing program 8 (id=881): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) perf_event_open(&(0x7f0000000000)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401d, 0x68180, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x72, 0x5, @perf_config_ext={0x5, 0x31}, 0x10c0e8, 0x0, 0x0, 0x3, 0x6, 0x7, 0x7fff, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xff6fbfffffffffff, 0xffffffffffffffff, 0x1) mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8av\x92\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x41, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="1807000008000000000000000300e80018460000fdffffff000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = fsopen(&(0x7f0000000000)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='vers\x00', &(0x7f0000000080)='3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='source\x00', &(0x7f0000000100)='127.0.0.1:/export\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) 359.678248ms ago: executing program 6 (id=882): bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@lld, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0xffffffffffffffdf) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000040)={{r3}, &(0x7f0000000280), &(0x7f0000000240)=r0}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x2040094) 353.178179ms ago: executing program 2 (id=892): bpf$MAP_CREATE(0x0, 0x0, 0x50) perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0xa0000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext={0x401, 0x1}, 0x959, 0x0, 0x7, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000100)={[{@errors_remount}, {@noload}, {@bh}, {@noquota}, {@noblock_validity}, {}, {@mblk_io_submit}, {@acl}, {@resgid}], [], 0x3d}, 0x1, 0x522, &(0x7f00000007c0)="$eJzs3UFsI1cZAOB/HHt3s5s2KXCASpRCi7IrWDtpaBv1UIqE4FQJKPclJE4UxYmj2Gk3UQVZceCIhBAgcSoXLkicOCGhSlw4IqRKcAYBAiHYwgEJ6FS2x+luMk6yjWNn4++TJvPmeeb97zma8byZp5kARtaTEfFSRLyTpumNiJjM8gvZFHudqbXe23dfX2xNSaTpK/9IIsnyumWlbZfjWrbZlYj4yhcjvp4cjtvY2V1bqNWqW9lypbm+WWns7N5cXV9Yqa5UN+bmZp+bf37+2fmZvrRzIiJe/Pxfvv+dn3zhxV9++rU/3vrb9W8kWX4caMcDKh71YafppfZ3ce8GW+8z2HlUbLcwM563xtihnDtnXCcAAHr7QER8IiJuxGSMHX06CwAAADyE0s9OxP+S7r27Qy71yAcAAAAeIoX2GNikUM7G+05EoVAuR3sM74fiaqFWbzQ/tVzf3ljqjJWdilJhebVWncnGCk9FKWktz7bT7y0/c2B5LiIei4jvTY63l8uL9drSsC9+AAAAwIi4dqD//+/JTv8fAAAAuGCmhl0BAAAA4Mzp/wMAAMDFp/8PAAAAF9qXXn65NaXd918vvbqzvVZ/9eZStbFWXt9eLC/WtzbLK/X6SvuZfevHlVer1zc/ExvbtyvNaqNZaezs3lqvb280b63e9wpsAAAAYIAe+9ibv08iYu+F8fbUculkm55wNeC8Ku6nkmyes1v/4dHO/M8DqhQwEGPDrgAwNMVhVwAYmtKwKwAMXXLM5z0H7/wmm3+8v/UBAAD6b/ojPe//Xz56y73CAKoHnCE7MYwu9/9hdLXv/590JK+TBbhQSs4AYOSd+v7/sdL0gSoEAAD03UR7Sgrl7PLeRBQK5XLEI+3XApSS5dVadSYiHo2I302WLreWZ9tbJsf2GQAAAAAAAAAAAAAAAAAAAAAAAACAjjRNIgUAAAAutIjCX5NfdZ7lPz359MTB6wOXkv9MRvaK0Nd+9MoPbi80m1uzrfx/7uc3f5jlPzOMKxgAAAAwEooPsnK3n97txwMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAP7199/XF7jTIuH//XERM5cUvxpX2/EqUIuLqv5Io3rNdEhFjfYg/3vrz4bz4Sata+yHz4o+/cfr4e3eOjB9T2beQF//a6cPDSHuzdfx5KW//K8ST7Xn+/leMuG/5/ep9/Iv9499Yj/3/kRPGePytn1V6xr8T8Xgx//jTjZ/0iP9UXoE///ahrK99dXe3V/z0jYjp3N+f5L5Yleb6ZqWxs3tzdX1hpbpS3Zibm31u/vn5Z+dnKsurtWr2NzfGdz/6i3eOav/VHvGnjmn/0znlXcrJ+/9bt+9+sJMs5cW//lRO/F//OFvjcPxC9tv3ySzd+ny6m97rpO/1xE9/+8RR7V/q0f7j/v/XexV6wI0vf+tPJ1wVABiAxs7u2kKtVt06H4kXou8lt3r4Q2/Xw5f4b3ouqnG2iW/2tcA0TdPWPnWKcpIY3JeQHF3VYR+ZAACAfnvvpH/YNQEAAAAAAAAAAAAAAAAAAIDRNYgnjR2MubefSvrxCG0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL54NwAA//+9V+AI") r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb40000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0], 0xfc}}, 0x0) sendmsg$TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, 0x0, 0x800) connect$inet(r0, &(0x7f0000000280)={0x2, 0x4, @broadcast}, 0x10) 345.115431ms ago: executing program 8 (id=883): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) perf_event_open(&(0x7f00000012c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_bp={0x0, 0x6}, 0x0, 0x0, 0x1, 0x5, 0x5, 0x8003, 0xfffc, 0x0, 0x0, 0x0, 0x100}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) epoll_pwait2(0xffffffffffffffff, &(0x7f0000000140), 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x12, 0x0, &(0x7f0000000380)) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000540)='./bus\x00', 0x8800, &(0x7f0000000080)={[{@barrier_val={'barrier', 0x3d, 0xb2}}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") llistxattr(&(0x7f0000000100)='./file1\x00', 0x0, 0x0) 285.155123ms ago: executing program 7 (id=884): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x68c01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000001480)={'syzkaller0\x00', 0x7101}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c0800, 0x0) close(r2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) close(r0) 224.491085ms ago: executing program 6 (id=885): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x1}) r2 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller1\x00', 0x0}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xfff3}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x88, 0x2c, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0xb, 0x7}, {0xfff1, 0xffff}, {0x300}}, [@filter_kind_options=@f_matchall={{0xd}, {0x54, 0x2, [@TCA_MATCHALL_ACT={0x50, 0x2, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x6, 0x0, 0x102}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x88}}, 0x0) write(r1, &(0x7f0000000140)="00008847", 0x4) 132.914873ms ago: executing program 7 (id=886): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000004000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) 114.193187ms ago: executing program 6 (id=887): mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x174, 0x0) ioctl$KDGETKEYCODE(0xffffffffffffffff, 0x4b4c, &(0x7f0000000180)={0x2, 0x3}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff0000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000001000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) prlimit64(0x0, 0x6, &(0x7f0000000140)={0x0, 0x4}, 0x0) setuid(0xee00) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x2, 0x325}) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) io_uring_enter(r0, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 70.949605ms ago: executing program 4 (id=888): dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x121301, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r0, 0x0, 0x23, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, &(0x7f0000000040)=0x8, 0x4) setsockopt$MRT_ADD_MFC_PROXY(r1, 0x0, 0xd2, 0x0, 0x0) 37.817412ms ago: executing program 4 (id=889): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80c0}, 0x24000000) ioctl$OCFS2_IOC_GROUP_ADD(0xffffffffffffffff, 0x40186f02, &(0x7f00000000c0)={0x5, 0x2, 0xfffffff8, 0x5}) sched_setscheduler(0x0, 0x2, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) sendmsg$NFNL_MSG_ACCT_DEL(0xffffffffffffffff, 0x0, 0x4880) perf_event_open(&(0x7f00000003c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0x8, 0x6}, 0x220, 0x2, 0xfffffffe, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r0, 0x2000000) 30.453204ms ago: executing program 7 (id=890): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) r1 = dup(r0) r2 = epoll_create(0x9346) socket$unix(0x1, 0x5, 0x0) socket$xdp(0x2c, 0x3, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x5}, 0x0, &(0x7f0000000040)={0x3fd, 0x4, 0x400ffffffff, 0x9, 0x0, 0x0, 0x8000000000000000}, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000200)={0x90000009}) write$P9_RSTATFS(r1, 0x0, 0x0) 0s ago: executing program 4 (id=891): r0 = socket(0x1, 0x5, 0x0) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) openat(0xffffffffffffffff, 0x0, 0x80042, 0x4d) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000500)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000040)={0x80002017}) r2 = socket$nl_route(0x10, 0x3, 0x0) ppoll(&(0x7f00000001c0)=[{r2, 0x2417}, {r1, 0x480}], 0x2, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 2154 phy1 wpan1: encryption failed: -22 [ 46.002827][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.003548][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.004179][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.006824][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.007080][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.007589][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.008059][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.019933][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.021051][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.026373][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.029506][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.030018][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.039965][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.040245][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.040377][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.041004][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.041778][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.050741][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.053779][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.057648][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.060547][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.061099][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.063335][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.064166][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.070633][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.072834][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.073930][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.080599][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.085424][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.095416][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.107771][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.109032][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.129934][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.145291][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.155459][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.156117][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.163551][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.163840][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.179583][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.188069][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.192982][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.200208][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.200862][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.210107][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.219530][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.220115][ T4071] ieee802154 phy1 wpan1: encryption failed: -22 [ 46.676927][ T4088] netlink: 12 bytes leftover after parsing attributes in process `syz.3.187'. [ 46.726137][ T4094] sctp: [Deprecated]: syz.3.190 (pid 4094) Use of int in max_burst socket option. [ 46.726137][ T4094] Use struct sctp_assoc_value instead [ 46.797607][ T643] IPVS: starting estimator thread 0... [ 46.884131][ T4100] IPVS: using max 2304 ests per chain, 115200 per kthread [ 47.036986][ T4116] syz.5.199 uses obsolete (PF_INET,SOCK_PACKET) [ 47.071693][ T4118] loop3: detected capacity change from 0 to 4096 [ 47.081346][ T4118] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 47.114470][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 47.204734][ T3758] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 47.327059][ T4137] bridge_slave_0: left allmulticast mode [ 47.327086][ T4137] bridge_slave_0: left promiscuous mode [ 47.327252][ T4137] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.329566][ T4137] bridge_slave_1: left allmulticast mode [ 47.329658][ T4137] bridge_slave_1: left promiscuous mode [ 47.329785][ T4137] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.381670][ T4137] bond0: (slave bond_slave_0): Releasing backup interface [ 47.395686][ T4137] bond0: (slave bond_slave_1): Releasing backup interface [ 47.450928][ T4137] team0: Port device team_slave_0 removed [ 47.461681][ T4137] team0: Port device team_slave_1 removed [ 47.465346][ T4137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 47.465399][ T4137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 47.477744][ T4137] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 47.477803][ T4137] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 47.501606][ T4137] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 47.514626][ T4140] team0: Mode changed to "loadbalance" [ 47.617544][ T4160] FAULT_INJECTION: forcing a failure. [ 47.617544][ T4160] name failslab, interval 1, probability 0, space 0, times 0 [ 47.617578][ T4160] CPU: 1 UID: 0 PID: 4160 Comm: syz.5.218 Not tainted syzkaller #0 PREEMPT(lazy) [ 47.617609][ T4160] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 47.617704][ T4160] Call Trace: [ 47.617713][ T4160] [ 47.617748][ T4160] __dump_stack+0x1d/0x30 [ 47.617775][ T4160] dump_stack_lvl+0x95/0xd0 [ 47.617871][ T4160] dump_stack+0x15/0x1b [ 47.617898][ T4160] should_fail_ex+0x262/0x280 [ 47.617930][ T4160] ? tcf_block_get_ext+0x4d9/0xcf0 [ 47.617962][ T4160] should_failslab+0x8c/0xb0 [ 47.618001][ T4160] __kmalloc_cache_noprof+0x7a/0x400 [ 47.618046][ T4160] ? tcf_block_get_ext+0x4d9/0xcf0 [ 47.618081][ T4160] tcf_block_get_ext+0x4d9/0xcf0 [ 47.618115][ T4160] ? netlink_sendmsg+0x5be/0x6f0 [ 47.618158][ T4160] ? x64_sys_call+0x22ab/0x2550 [ 47.618222][ T4160] ? __pfx_drr_init_qdisc+0x10/0x10 [ 47.618243][ T4160] tcf_block_get+0x67/0xa0 [ 47.618270][ T4160] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 47.618305][ T4160] drr_init_qdisc+0x2c/0xb0 [ 47.618379][ T4160] qdisc_create+0x57f/0x9c0 [ 47.618404][ T4160] tc_modify_qdisc+0x102a/0x1550 [ 47.618431][ T4160] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 47.618517][ T4160] rtnetlink_rcv_msg+0x6a7/0x720 [ 47.618609][ T4160] netlink_rcv_skb+0x11e/0x220 [ 47.618641][ T4160] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 47.618699][ T4160] rtnetlink_rcv+0x1c/0x30 [ 47.618727][ T4160] netlink_unicast+0x5a9/0x680 [ 47.618827][ T4160] netlink_sendmsg+0x5be/0x6f0 [ 47.618877][ T4160] ? __pfx_netlink_sendmsg+0x10/0x10 [ 47.618976][ T4160] ____sys_sendmsg+0x532/0x580 [ 47.619009][ T4160] ___sys_sendmsg+0x195/0x1e0 [ 47.619072][ T4160] __x64_sys_sendmsg+0xd4/0x160 [ 47.619106][ T4160] x64_sys_call+0x22ab/0x2550 [ 47.619156][ T4160] do_syscall_64+0x112/0x360 [ 47.619180][ T4160] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 47.619209][ T4160] RIP: 0033:0x7f1f73e6e159 [ 47.619231][ T4160] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 47.619252][ T4160] RSP: 002b:00007f1f728c7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 47.619287][ T4160] RAX: ffffffffffffffda RBX: 00007f1f740f5fa0 RCX: 00007f1f73e6e159 [ 47.619301][ T4160] RDX: 0000000020000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 47.619360][ T4160] RBP: 00007f1f73f0506b R08: 0000000000000000 R09: 0000000000000000 [ 47.619380][ T4160] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 47.619397][ T4160] R13: 00007f1f740f6038 R14: 00007f1f740f5fa0 R15: 00007ffe809f0178 [ 47.619418][ T4160] [ 47.892513][ T4167] loop5: detected capacity change from 0 to 256 [ 47.909776][ T4167] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 47.956430][ T4163] loop3: detected capacity change from 0 to 8192 [ 47.963648][ T4163] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 48.213336][ T4182] macvlan2: entered promiscuous mode [ 48.213362][ T4182] macvlan2: entered allmulticast mode [ 48.219330][ T4182] dummy0: entered allmulticast mode [ 48.219403][ T4182] dummy0: entered promiscuous mode [ 48.236475][ T4182] team0: Port device macvlan2 added [ 48.251357][ T113] IPVS: starting estimator thread 0... [ 48.253201][ T4186] IPVS: rr: TCP [fe80::aa]:80 - no destination available [ 48.333994][ T4190] IPVS: using max 2304 ests per chain, 115200 per kthread [ 48.901754][ T4227] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.925117][ T4227] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.967792][ T4229] erspan0: entered promiscuous mode [ 48.978569][ T4229] netlink: 8 bytes leftover after parsing attributes in process `syz.2.245'. [ 49.068797][ T4230] loop3: detected capacity change from 0 to 1024 [ 49.091924][ T4230] EXT4-fs (loop3): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 49.103159][ T4230] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 49.235747][ T4241] netlink: 36 bytes leftover after parsing attributes in process `syz.2.249'. [ 49.258702][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 49.302737][ T4241] netlink: 12 bytes leftover after parsing attributes in process `syz.2.249'. [ 49.334149][ T4248] netlink: 12 bytes leftover after parsing attributes in process `syz.3.251'. [ 49.345570][ T4248] 8021q: adding VLAN 0 to HW filter on device bond1 [ 49.368303][ T4248] macvlan2: entered promiscuous mode [ 49.368373][ T4248] macvlan2: entered allmulticast mode [ 49.429549][ T4252] loop5: detected capacity change from 0 to 8192 [ 49.876994][ T4282] EXT4-fs (sda1): resizing filesystem from 262144 to 1 blocks [ 49.877036][ T4282] EXT4-fs warning (device sda1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 49.946665][ T4286] FAULT_INJECTION: forcing a failure. [ 49.946665][ T4286] name failslab, interval 1, probability 0, space 0, times 0 [ 49.946704][ T4286] CPU: 0 UID: 0 PID: 4286 Comm: syz.5.267 Not tainted syzkaller #0 PREEMPT(lazy) [ 49.946745][ T4286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 49.946763][ T4286] Call Trace: [ 49.946771][ T4286] [ 49.946781][ T4286] __dump_stack+0x1d/0x30 [ 49.946811][ T4286] dump_stack_lvl+0x95/0xd0 [ 49.946841][ T4286] dump_stack+0x15/0x1b [ 49.946882][ T4286] should_fail_ex+0x262/0x280 [ 49.946916][ T4286] ? create_filter_start+0xcf/0x140 [ 49.947051][ T4286] should_failslab+0x8c/0xb0 [ 49.947173][ T4286] __kmalloc_cache_noprof+0x7a/0x400 [ 49.947253][ T4286] ? create_filter_start+0xcf/0x140 [ 49.947298][ T4286] create_filter_start+0xcf/0x140 [ 49.947336][ T4286] apply_subsystem_event_filter+0x109/0xcd0 [ 49.947393][ T4286] ? __kmalloc_node_track_caller_noprof+0x2e4/0x500 [ 49.947446][ T4286] subsystem_filter_write+0x79/0xd0 [ 49.947495][ T4286] ? __pfx_subsystem_filter_write+0x10/0x10 [ 49.947526][ T4286] vfs_write+0x254/0x9a0 [ 49.947572][ T4286] ? __fget_files+0x184/0x1c0 [ 49.947601][ T4286] ? mutex_lock+0x57/0x90 [ 49.947679][ T4286] ksys_write+0xdc/0x1a0 [ 49.947720][ T4286] __x64_sys_write+0x40/0x50 [ 49.947775][ T4286] x64_sys_call+0x154e/0x2550 [ 49.947809][ T4286] do_syscall_64+0x112/0x360 [ 49.947837][ T4286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 49.947867][ T4286] RIP: 0033:0x7f1f73e6e159 [ 49.947909][ T4286] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 49.948009][ T4286] RSP: 002b:00007f1f728c7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 49.948035][ T4286] RAX: ffffffffffffffda RBX: 00007f1f740f5fa0 RCX: 00007f1f73e6e159 [ 49.948103][ T4286] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 49.948120][ T4286] RBP: 00007f1f73f0506b R08: 0000000000000000 R09: 0000000000000000 [ 49.948138][ T4286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 49.948155][ T4286] R13: 00007f1f740f6038 R14: 00007f1f740f5fa0 R15: 00007ffe809f0178 [ 49.948183][ T4286] [ 50.184938][ T4288] FAULT_INJECTION: forcing a failure. [ 50.184938][ T4288] name failslab, interval 1, probability 0, space 0, times 0 [ 50.184970][ T4288] CPU: 1 UID: 0 PID: 4288 Comm: syz.1.268 Not tainted syzkaller #0 PREEMPT(lazy) [ 50.185027][ T4288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.185039][ T4288] Call Trace: [ 50.185046][ T4288] [ 50.185053][ T4288] __dump_stack+0x1d/0x30 [ 50.185085][ T4288] dump_stack_lvl+0x95/0xd0 [ 50.185188][ T4288] dump_stack+0x15/0x1b [ 50.185209][ T4288] should_fail_ex+0x262/0x280 [ 50.185277][ T4288] ? __kernfs_new_node+0x70/0x440 [ 50.185304][ T4288] should_failslab+0x8c/0xb0 [ 50.185345][ T4288] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 50.185376][ T4288] ? rb_insert_color+0x291/0x2a0 [ 50.185425][ T4288] ? __kernfs_new_node+0x70/0x440 [ 50.185453][ T4288] __kernfs_new_node+0x70/0x440 [ 50.185530][ T4288] ? kernfs_add_one+0x2cf/0x350 [ 50.185560][ T4288] kernfs_new_node+0xcf/0xf0 [ 50.185653][ T4288] kernfs_create_link+0x70/0x130 [ 50.185685][ T4288] sysfs_do_create_link_sd+0x6a/0x100 [ 50.185732][ T4288] sysfs_create_link+0x51/0x70 [ 50.185781][ T4288] device_add_class_symlinks+0x8e/0x1d0 [ 50.185809][ T4288] device_add+0x359/0x790 [ 50.185836][ T4288] wakeup_source_sysfs_add+0x15a/0x1d0 [ 50.185871][ T4288] wakeup_source_register+0xfd/0x240 [ 50.185913][ T4288] ep_insert+0x86c/0xd70 [ 50.185962][ T4288] do_epoll_ctl_file+0x645/0x700 [ 50.186016][ T4288] __se_sys_epoll_ctl+0xf1/0x190 [ 50.186050][ T4288] __x64_sys_epoll_ctl+0x55/0x70 [ 50.186086][ T4288] x64_sys_call+0x6a5/0x2550 [ 50.186157][ T4288] do_syscall_64+0x112/0x360 [ 50.186185][ T4288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.186275][ T4288] RIP: 0033:0x7f9c0bc9e159 [ 50.186296][ T4288] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.186320][ T4288] RSP: 002b:00007f9c0a6f7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 50.186346][ T4288] RAX: ffffffffffffffda RBX: 00007f9c0bf25fa0 RCX: 00007f9c0bc9e159 [ 50.186366][ T4288] RDX: 0000000000000003 RSI: 0000000000000001 RDI: 0000000000000006 [ 50.186383][ T4288] RBP: 00007f9c0bd3506b R08: 0000000000000000 R09: 0000000000000000 [ 50.186400][ T4288] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000000 [ 50.186418][ T4288] R13: 00007f9c0bf26038 R14: 00007f9c0bf25fa0 R15: 00007ffff9ebd818 [ 50.186444][ T4288] [ 50.655325][ T29] kauditd_printk_skb: 67 callbacks suppressed [ 50.655339][ T4295] FAULT_INJECTION: forcing a failure. [ 50.655339][ T4295] name fail_futex, interval 1, probability 0, space 0, times 1 [ 50.655374][ T4295] CPU: 1 UID: 0 PID: 4295 Comm: syz.1.271 Not tainted syzkaller #0 PREEMPT(lazy) [ 50.655425][ T4295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.655438][ T4295] Call Trace: [ 50.655445][ T4295] [ 50.655456][ T4295] __dump_stack+0x1d/0x30 [ 50.655493][ T4295] dump_stack_lvl+0x95/0xd0 [ 50.655502][ T29] audit: type=1400 audit(1790401151.601:470): avc: denied { mount } for pid=4293 comm="syz.1.271" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 50.655525][ T4295] dump_stack+0x15/0x1b [ 50.655562][ T4295] should_fail_ex+0x262/0x280 [ 50.655650][ T4295] should_fail+0xb/0x20 [ 50.655677][ T4295] get_futex_key+0x12d/0xb10 [ 50.655773][ T4295] futex_wait_setup+0x49/0x3e0 [ 50.655870][ T4295] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 50.655906][ T4295] ? hrtimer_active+0xe4/0x110 [ 50.655934][ T4295] __futex_wait+0xa9/0x260 [ 50.655964][ T4295] ? __pfx_futex_wake_mark+0x10/0x10 [ 50.656073][ T4295] futex_wait+0x98/0x1c0 [ 50.656105][ T4295] do_futex+0x391/0x460 [ 50.656149][ T4295] __se_sys_futex+0x2f6/0x370 [ 50.656187][ T4295] ? __se_sys_mount+0x2b0/0x2e0 [ 50.656292][ T4295] __x64_sys_futex+0x78/0x90 [ 50.656332][ T4295] x64_sys_call+0x22e2/0x2550 [ 50.656360][ T4295] do_syscall_64+0x112/0x360 [ 50.656450][ T4295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 50.656560][ T4295] RIP: 0033:0x7f9c0bc9e159 [ 50.656580][ T4295] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.656645][ T4295] RSP: 002b:00007f9c0a6f70e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 50.656673][ T4295] RAX: ffffffffffffffda RBX: 00007f9c0bf25fa8 RCX: 00007f9c0bc9e159 [ 50.656694][ T4295] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9c0bf25fa8 [ 50.656711][ T4295] RBP: 00007f9c0bf25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 50.656727][ T4295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.656741][ T4295] R13: 00007f9c0bf26038 R14: 00007ffff9ebd730 R15: 00007ffff9ebd818 [ 50.656790][ T4295] [ 50.923924][ T4298] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 50.925102][ T29] audit: type=1400 audit(1790401151.871:471): avc: denied { read append } for pid=4293 comm="syz.1.271" name="trace_pipe" dev="tracefs" ino=191 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 51.141078][ T29] audit: type=1400 audit(1790401152.081:472): avc: denied { unmount } for pid=3296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 51.290165][ T29] audit: type=1400 audit(1790401152.231:473): avc: denied { create } for pid=4302 comm="syz.1.274" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 51.290538][ T4296] syzkaller0: entered promiscuous mode [ 51.290660][ T4296] syzkaller0: entered allmulticast mode [ 51.331757][ T4303] loop1: detected capacity change from 0 to 512 [ 51.332212][ T4303] ext4: Unknown parameter 'hash' [ 51.347045][ T29] audit: type=1400 audit(1790401152.291:474): avc: denied { ioctl } for pid=4302 comm="syz.1.274" path="socket:[8371]" dev="sockfs" ino=8371 ioctlcmd=0x89ee scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 51.436686][ T29] audit: type=1400 audit(1790401152.381:475): avc: denied { bind } for pid=4306 comm="syz.1.276" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 51.491093][ T29] audit: type=1400 audit(1790401152.431:476): avc: denied { name_bind } for pid=4308 comm="syz.1.277" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1 [ 51.574078][ T4313] futex_wake_op: syz.5.279 tries to shift op by -1; fix this program [ 51.574140][ T4313] futex_wake_op: syz.5.279 tries to shift op by -1; fix this program [ 51.574653][ T4313] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 51.696290][ T29] audit: type=1400 audit(1790401152.641:477): avc: denied { getattr } for pid=4320 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=512 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.759277][ T29] audit: type=1400 audit(1790401152.701:478): avc: denied { read } for pid=4324 comm="sed" name="eth0.dhcp" dev="tmpfs" ino=512 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.759393][ T29] audit: type=1400 audit(1790401152.701:479): avc: denied { open } for pid=4324 comm="sed" path="/run/dhcpcd/hook-state/resolv.conf/eth0.dhcp" dev="tmpfs" ino=512 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.952605][ T4344] ip_tables: iptables: counters copy to user failed while replacing table [ 52.182676][ T4355] loop3: detected capacity change from 0 to 512 [ 52.193723][ T4355] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 52.200554][ T4355] EXT4-fs error (device loop3): ext4_iget_extra_inode:5210: inode #17: comm syz.3.292: corrupted in-inode xattr: e_name out of bounds [ 52.200597][ T4355] loop3: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 52.203600][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 52.203720][ C1] EXT4-fs (loop3): initial error at time 1790401153: ext4_iget_extra_inode:5210: inode 17 [ 52.203960][ C1] EXT4-fs (loop3): last error at time 1790401153: ext4_iget_extra_inode:5210: inode 17 [ 52.263980][ T4355] EXT4-fs error (device loop3): ext4_orphan_get:1408: comm syz.3.292: couldn't read orphan inode 17 (err -117) [ 52.264017][ T4355] loop3: lost filesystem error report for type 5 error -117 [ 52.265850][ T4355] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 52.410694][ T3303] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 52.478295][ T4351] loop4: detected capacity change from 0 to 512 [ 52.507744][ T4373] SELinux: Context system_u:object_r:gpg_agent_exec_t:s0 is not valid (left unmapped). [ 52.522218][ T4351] EXT4-fs: Ignoring removed bh option [ 52.532955][ T4351] EXT4-fs: Ignoring removed mblk_io_submit option [ 52.589072][ T4351] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 52.688009][ T4351] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 52.693081][ T4351] EXT4-fs (loop4): orphan cleanup on readonly fs [ 52.700674][ T4351] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 52.707891][ T4351] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 52.709964][ T4351] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:487: comm syz.4.290: Invalid block bitmap block 0 in block_group 0 [ 52.710189][ T4351] loop4: lost filesystem error report for type 5 error -117 [ 52.711566][ T4351] EXT4-fs (loop4): Remounting filesystem read-only [ 52.711661][ T4351] EXT4-fs (loop4): 1 orphan inode deleted [ 52.717447][ T4351] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 52.817923][ T4351] netlink: 68 bytes leftover after parsing attributes in process `syz.4.290'. [ 52.880711][ T4388] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 52.914677][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 53.055264][ T4399] netlink: 20 bytes leftover after parsing attributes in process `syz.1.304'. [ 54.000469][ T4471] syzkaller0: entered promiscuous mode [ 54.000493][ T4471] syzkaller0: entered allmulticast mode [ 54.060434][ T4477] syzkaller0: entered promiscuous mode [ 54.060461][ T4477] syzkaller0: entered allmulticast mode [ 54.080573][ T4481] ip_tables: iptables: counters copy to user failed while replacing table [ 54.218513][ T4492] netlink: 'syz.2.331': attribute type 1 has an invalid length. [ 54.232319][ T4492] 8021q: adding VLAN 0 to HW filter on device bond1 [ 54.247421][ T4492] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 54.267819][ T4492] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 54.269476][ T4492] bond1 (unregistering): Released all slaves [ 54.380115][ T4501] loop4: detected capacity change from 0 to 512 [ 54.399132][ T4501] EXT4-fs (loop4): orphan cleanup on readonly fs [ 54.399592][ T4501] EXT4-fs warning (device loop4): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 54.399880][ T4501] EXT4-fs (loop4): Cannot turn on quotas: error -22 [ 54.400125][ T4501] EXT4-fs error (device loop4): ext4_ext_check_inode:521: inode #13: comm syz.4.334: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 54.400204][ T4501] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 54.400387][ T4501] EXT4-fs error (device loop4): ext4_orphan_get:1408: comm syz.4.334: couldn't read orphan inode 13 (err -117) [ 54.400416][ T4501] loop4: lost filesystem error report for type 5 error -117 [ 54.401076][ T4501] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 55.193385][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 55.207686][ T4509] ./dev/sda1: Can't lookup blockdev [ 55.532203][ T4524] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 55.547523][ T4524] bond1: (slave lo): Enslaving as an active interface with an up link [ 55.551151][ T4524] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 55.697645][ T4536] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 55.748490][ T29] kauditd_printk_skb: 81 callbacks suppressed [ 55.748508][ T29] audit: type=1400 audit(1790401156.681:560): avc: denied { create } for pid=4541 comm="syz.2.350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 55.801712][ T29] audit: type=1400 audit(1790401156.731:561): avc: denied { ioctl } for pid=4541 comm="syz.2.350" path="socket:[8003]" dev="sockfs" ino=8003 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.014542][ T4558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 56.014569][ T4558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.357'. [ 56.096295][ T29] audit: type=1400 audit(1790401157.031:562): avc: denied { cmd } for pid=4563 comm="syz.3.358" path="socket:[8045]" dev="sockfs" ino=8045 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 56.430042][ T29] audit: type=1400 audit(1790401157.362:563): avc: denied { setopt } for pid=4581 comm="syz.2.364" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.432047][ T29] audit: type=1400 audit(1790401157.362:564): avc: denied { write } for pid=4581 comm="syz.2.364" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 56.681506][ T4587] FAULT_INJECTION: forcing a failure. [ 56.681506][ T4587] name failslab, interval 1, probability 0, space 0, times 0 [ 56.681544][ T4587] CPU: 0 UID: 0 PID: 4587 Comm: syz.4.367 Not tainted syzkaller #0 PREEMPT(lazy) [ 56.681577][ T4587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.681594][ T4587] Call Trace: [ 56.681604][ T4587] [ 56.681630][ T4587] __dump_stack+0x1d/0x30 [ 56.681664][ T4587] dump_stack_lvl+0x95/0xd0 [ 56.681692][ T4587] dump_stack+0x15/0x1b [ 56.681720][ T4587] should_fail_ex+0x262/0x280 [ 56.681818][ T4587] ? skb_clone+0x151/0x1f0 [ 56.681846][ T4587] should_failslab+0x8c/0xb0 [ 56.681887][ T4587] kmem_cache_alloc_noprof+0x7c/0x3f0 [ 56.681928][ T4587] ? skb_clone+0x151/0x1f0 [ 56.682003][ T4587] skb_clone+0x151/0x1f0 [ 56.682082][ T4587] nfnetlink_rcv+0x310/0x1740 [ 56.682124][ T4587] ? __kfree_skb+0x109/0x150 [ 56.682158][ T4587] ? nlmon_xmit+0x4f/0x60 [ 56.682192][ T4587] ? consume_skb+0x4b/0x130 [ 56.682239][ T4587] ? nlmon_xmit+0x4f/0x60 [ 56.682270][ T4587] ? dev_hard_start_xmit+0x34e/0x380 [ 56.682308][ T4587] ? __dev_queue_xmit+0x1361/0x1e90 [ 56.682336][ T4587] ? __dev_queue_xmit+0x151/0x1e90 [ 56.682434][ T4587] ? ref_tracker_free+0x380/0x3f0 [ 56.682465][ T4587] ? skb_clone+0x151/0x1f0 [ 56.682498][ T4587] netlink_unicast+0x5a9/0x680 [ 56.682570][ T4587] netlink_sendmsg+0x5be/0x6f0 [ 56.682616][ T4587] ? __pfx_netlink_sendmsg+0x10/0x10 [ 56.682695][ T4587] ____sys_sendmsg+0x532/0x580 [ 56.682729][ T4587] ___sys_sendmsg+0x195/0x1e0 [ 56.682834][ T4587] __x64_sys_sendmsg+0xd4/0x160 [ 56.682869][ T4587] x64_sys_call+0x22ab/0x2550 [ 56.682931][ T4587] do_syscall_64+0x112/0x360 [ 56.682961][ T4587] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 56.682987][ T4587] RIP: 0033:0x7fd9ff45e159 [ 56.683008][ T4587] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.683115][ T4587] RSP: 002b:00007fd9fdeb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 56.683180][ T4587] RAX: ffffffffffffffda RBX: 00007fd9ff6e5fa0 RCX: 00007fd9ff45e159 [ 56.683198][ T4587] RDX: 000000000000c860 RSI: 0000200000007dc0 RDI: 0000000000000005 [ 56.683216][ T4587] RBP: 00007fd9ff4f506b R08: 0000000000000000 R09: 0000000000000000 [ 56.683322][ T4587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.683339][ T4587] R13: 00007fd9ff6e6038 R14: 00007fd9ff6e5fa0 R15: 00007fffc3a85c18 [ 56.683360][ T4587] [ 57.018847][ T4593] loop3: detected capacity change from 0 to 128 [ 57.039482][ T4593] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 57.039747][ T4593] ext4 filesystem being mounted at /90/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 57.062695][ T29] audit: type=1400 audit(1790401157.972:565): avc: denied { write } for pid=4592 comm="syz.3.371" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.062917][ T29] audit: type=1400 audit(1790401157.972:566): avc: denied { add_name } for pid=4592 comm="syz.3.371" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.063090][ T29] audit: type=1400 audit(1790401157.972:567): avc: denied { write } for pid=4592 comm="syz.3.371" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.063165][ T29] audit: type=1400 audit(1790401157.972:568): avc: denied { create } for pid=4592 comm="syz.3.371" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 57.063303][ T29] audit: type=1400 audit(1790401157.972:569): avc: denied { write } for pid=4592 comm="syz.3.371" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 57.244615][ T3303] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 57.288877][ T4599] loop3: detected capacity change from 0 to 512 [ 57.326393][ T4599] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 57.326420][ T4599] EXT4-fs (loop3): couldn't mount as ext2 due to feature incompatibilities [ 57.349935][ T4599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.374'. [ 59.500116][ T4612] FAULT_INJECTION: forcing a failure. [ 59.500116][ T4612] name failslab, interval 1, probability 0, space 0, times 0 [ 59.500178][ T4612] CPU: 1 UID: 0 PID: 4612 Comm: syz.4.380 Not tainted syzkaller #0 PREEMPT(lazy) [ 59.500204][ T4612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 59.500224][ T4612] Call Trace: [ 59.500230][ T4612] [ 59.500237][ T4612] __dump_stack+0x1d/0x30 [ 59.500320][ T4612] dump_stack_lvl+0x95/0xd0 [ 59.500343][ T4612] dump_stack+0x15/0x1b [ 59.500370][ T4612] should_fail_ex+0x262/0x280 [ 59.500446][ T4612] ? x509_cert_parse+0x3b/0x450 [ 59.500471][ T4612] should_failslab+0x8c/0xb0 [ 59.500537][ T4612] __kmalloc_cache_noprof+0x7a/0x400 [ 59.500578][ T4612] ? x509_cert_parse+0x3b/0x450 [ 59.500599][ T4612] x509_cert_parse+0x3b/0x450 [ 59.500653][ T4612] x509_key_preparse+0x3c/0x420 [ 59.500681][ T4612] asymmetric_key_preparse+0x68/0xb0 [ 59.500713][ T4612] __key_create_or_update+0x2df/0x840 [ 59.500796][ T4612] key_create_or_update+0x42/0x60 [ 59.500836][ T4612] __se_sys_add_key+0x2a5/0x360 [ 59.500867][ T4612] __x64_sys_add_key+0x67/0x80 [ 59.501011][ T4612] x64_sys_call+0x1fa9/0x2550 [ 59.501037][ T4612] do_syscall_64+0x112/0x360 [ 59.501059][ T4612] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 59.501082][ T4612] RIP: 0033:0x7fd9ff45e159 [ 59.501134][ T4612] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 59.501180][ T4612] RSP: 002b:00007fd9fdeb7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 59.501204][ T4612] RAX: ffffffffffffffda RBX: 00007fd9ff6e5fa0 RCX: 00007fd9ff45e159 [ 59.501221][ T4612] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 59.501239][ T4612] RBP: 00007fd9ff4f506b R08: ffffffffffffffff R09: 0000000000000000 [ 59.501257][ T4612] R10: 00000000000002c1 R11: 0000000000000246 R12: 0000000000000000 [ 59.501320][ T4612] R13: 00007fd9ff6e6038 R14: 00007fd9ff6e5fa0 R15: 00007fffc3a85c18 [ 59.501346][ T4612] [ 59.856213][ T4624] capability: warning: `syz.4.385' uses deprecated v2 capabilities in a way that may be insecure [ 60.342074][ T4659] netlink: 8 bytes leftover after parsing attributes in process `syz.5.400'. [ 60.342103][ T4659] netlink: 8 bytes leftover after parsing attributes in process `syz.5.400'. [ 60.613141][ T4674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 60.614829][ T4674] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 60.630261][ T4674] netlink: 'syz.5.406': attribute type 1 has an invalid length. [ 60.693981][ T4674] 8021q: adding VLAN 0 to HW filter on device bond2 [ 60.721323][ T4679] bond2: (slave veth3): Enslaving as an active interface with a down link [ 60.786284][ T4674] bond2: (slave dummy0): making interface the new active one [ 60.788734][ T4674] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 61.059986][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 61.060005][ T29] audit: type=1400 audit(1790401161.992:604): avc: denied { watch watch_reads } for pid=4684 comm="syz.3.409" path="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 61.098406][ T4683] loop4: detected capacity change from 0 to 512 [ 61.128539][ T29] audit: type=1400 audit(1790401162.062:605): avc: denied { read } for pid=4686 comm="syz.3.410" name="event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 61.128618][ T29] audit: type=1400 audit(1790401162.062:606): avc: denied { open } for pid=4686 comm="syz.3.410" path="/dev/input/event0" dev="devtmpfs" ino=242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 61.160142][ T4683] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 61.169490][ T4683] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 61.169638][ T4683] System zones: 1-12 [ 61.176933][ T29] audit: type=1400 audit(1790401162.112:607): avc: denied { read write } for pid=4686 comm="syz.3.410" name="rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 61.177039][ T29] audit: type=1400 audit(1790401162.112:608): avc: denied { open } for pid=4686 comm="syz.3.410" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 61.233140][ T4683] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.408: bad orphan inode 131072 [ 61.233232][ T4683] loop4: lost filesystem error report for type 5 error -117 [ 61.236413][ T4683] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 61.266919][ T29] audit: type=1400 audit(1790401162.202:609): avc: denied { append } for pid=4682 comm="syz.4.408" name="001" dev="devtmpfs" ino=147 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 61.324382][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 61.411622][ T4691] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 61.479325][ T29] audit: type=1400 audit(1790401162.412:610): avc: denied { connect } for pid=4696 comm="syz.4.412" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 61.853460][ T29] audit: type=1400 audit(1790401162.782:611): avc: denied { watch_reads } for pid=4712 comm="syz.2.418" path="/90" dev="tmpfs" ino=489 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 61.889613][ T29] audit: type=1400 audit(1790401162.822:612): avc: denied { write } for pid=4714 comm="syz.1.419" name="001" dev="devtmpfs" ino=168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 61.917977][ T29] audit: type=1326 audit(1790401162.852:613): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=4716 comm="syz.2.420" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdc1eaae159 code=0x0 [ 62.111130][ T4724] netlink: 'syz.3.422': attribute type 1 has an invalid length. [ 62.121942][ T4724] 8021q: adding VLAN 0 to HW filter on device bond2 [ 62.142538][ T4724] bond2: (slave geneve2): making interface the new active one [ 62.144108][ T4724] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 62.169113][ T4724] syz.3.422 (4724) used greatest stack depth: 10160 bytes left [ 62.253101][ T4733] netlink: 64 bytes leftover after parsing attributes in process `syz.5.426'. [ 62.260703][ T4733] syzkaller1: entered promiscuous mode [ 62.260754][ T4733] syzkaller1: entered allmulticast mode [ 63.535022][ T4774] netlink: 20 bytes leftover after parsing attributes in process `syz.2.441'. [ 63.706460][ T4786] loop5: detected capacity change from 0 to 512 [ 63.708816][ T4786] EXT4-fs: Ignoring removed nobh option [ 63.733883][ T4786] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a84ec018, mo2=0002] [ 63.733928][ T4786] System zones: 0-2, 18-18, 34-35 [ 63.739248][ T4786] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 63.739383][ T4786] ext4 filesystem being mounted at /59/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 63.796779][ T4786] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #2: comm syz.5.447: corrupted inode contents [ 63.796978][ T4786] EXT4-fs error (device loop5): ext4_dirty_inode:6736: inode #2: comm syz.5.447: mark_inode_dirty error [ 63.797203][ T4786] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #2: comm syz.5.447: corrupted inode contents [ 63.797394][ T4786] EXT4-fs error (device loop5): __ext4_ext_dirty:207: inode #2: comm syz.5.447: mark_inode_dirty error [ 63.800155][ T4786] EXT4-fs warning (device loop5): ext4_es_cache_extent:1082: inode #2: comm syz.5.447: ES cache extent failed: add [0,1,21,0x1] conflict with existing [0,8,576460752303423487,0x18] [ 63.800155][ T4786] [ 63.800422][ T4786] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #2: comm syz.5.447: corrupted inode contents [ 63.800668][ T4786] EXT4-fs error (device loop5): ext4_append:88: inode #2: comm syz.5.447: mark_inode_dirty error [ 63.800900][ T4786] EXT4-fs error (device loop5) in ext4_append:100: Corrupt filesystem [ 63.903202][ T4786] EXT4-fs error (device loop5): ext4_do_update_inode:5801: inode #2: comm syz.5.447: corrupted inode contents [ 63.904142][ T4786] EXT4-fs error (device loop5): add_dirent_to_buf:2153: inode #2: comm syz.5.447: mark_inode_dirty error [ 63.946977][ T3726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 64.080948][ T4801] ip6gre1: entered promiscuous mode [ 64.080990][ T4801] ip6gre1: entered allmulticast mode [ 64.787150][ T4827] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 66.170975][ T4869] netlink: 'syz.3.481': attribute type 1 has an invalid length. [ 66.199753][ T4869] 8021q: adding VLAN 0 to HW filter on device bond3 [ 66.255683][ T4869] bond3: (slave veth3): Enslaving as an active interface with a down link [ 66.271664][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 66.271682][ T29] audit: type=1400 audit(1790401173.206:700): avc: denied { shutdown } for pid=4870 comm="syz.5.482" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 66.313431][ T4869] veth0_virt_wifi: entered promiscuous mode [ 66.319847][ T4869] bond3: (slave veth0_virt_wifi): making interface the new active one [ 66.338845][ T4869] bond3: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 66.374597][ T4869] bond3: (slave veth0_virt_wifi): Releasing active interface [ 66.431208][ T29] audit: type=1400 audit(1790401173.366:701): avc: denied { watch } for pid=4875 comm="syz.2.483" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 66.550780][ T29] audit: type=1400 audit(1790401173.486:702): avc: denied { write } for pid=4880 comm="syz.2.485" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 66.599330][ T4883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.486'. [ 66.933033][ T4894] tipc: Started in network mode [ 66.933072][ T4894] tipc: Node identity 1000001, cluster identity 4369 [ 66.933087][ T4894] tipc: Node number set to 16777217 [ 66.937068][ T4894] tipc: New replicast peer: 127.0.0.1 [ 66.937405][ T4894] tipc: Enabled bearer , priority 10 [ 67.003206][ T4896] ./dev/sda1: Can't lookup blockdev [ 67.931152][ T29] audit: type=1400 audit(1790401174.866:703): avc: denied { create } for pid=4922 comm="syz.2.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 67.945364][ T113] IPVS: starting estimator thread 0... [ 67.945457][ T29] audit: type=1400 audit(1790401174.876:704): avc: denied { setopt } for pid=4922 comm="syz.2.502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 68.042250][ T4924] IPVS: using max 2304 ests per chain, 115200 per kthread [ 68.194036][ T4937] tipc: Started in network mode [ 68.194072][ T4937] tipc: Node identity 2add1fa22d45, cluster identity 4711 [ 68.194122][ T4937] tipc: Enabled bearer , priority 0 [ 68.338995][ T4937] syzkaller0: entered promiscuous mode [ 68.339016][ T4937] syzkaller0: entered allmulticast mode [ 68.363834][ T4937] tipc: Resetting bearer [ 68.364038][ T29] audit: type=1400 audit(1790401175.306:705): avc: denied { mounton } for pid=4945 comm="syz.3.512" path="/126/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 68.374439][ T31] tipc: Resetting bearer [ 68.433801][ T4936] tipc: Resetting bearer [ 68.485954][ T4936] tipc: Disabling bearer [ 68.580709][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.580768][ T31] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.629401][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.629451][ T31] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.685503][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.685559][ T31] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.751991][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 68.752103][ T31] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 68.923691][ T31] bond2 (unregistering): (slave geneve2): Releasing active interface [ 68.933169][ T31] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.975785][ T31] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.980744][ T31] bond0 (unregistering): Released all slaves [ 69.013755][ T31] bond1 (unregistering): Released all slaves [ 69.018426][ T31] bond2 (unregistering): Released all slaves [ 69.038332][ T4968] netlink: 40 bytes leftover after parsing attributes in process `syz.5.520'. [ 69.045986][ T31] bond3 (unregistering): (slave veth3): Releasing active interface [ 69.069133][ T31] bond3 (unregistering): Released all slaves [ 69.144642][ T31] hsr_slave_0: left promiscuous mode [ 69.145766][ T31] hsr_slave_1: left promiscuous mode [ 69.146304][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.146323][ T31] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 69.146831][ T31] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.146844][ T31] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 69.153472][ T4973] loop4: detected capacity change from 0 to 256 [ 69.183620][ T31] veth1_vlan: left promiscuous mode [ 69.183870][ T31] veth0_vlan: left promiscuous mode [ 69.386111][ T29] audit: type=1400 audit(1790401176.326:706): avc: denied { write } for pid=4979 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.447040][ T31] team0 (unregistering): Port device team_slave_1 removed [ 69.467926][ T31] team0 (unregistering): Port device team_slave_0 removed [ 69.488706][ T29] audit: type=1400 audit(1790401176.426:707): avc: denied { write } for pid=4998 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.558961][ T29] audit: type=1326 audit(1790401176.496:708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5002 comm="syz.4.528" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ff45e159 code=0x7ffc0000 [ 69.559077][ T29] audit: type=1326 audit(1790401176.496:709): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5002 comm="syz.4.528" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ff45e159 code=0x7ffc0000 [ 69.673581][ T3022] 8021q: adding VLAN 0 to HW filter on device eth6 [ 70.083647][ T3022] 8021q: adding VLAN 0 to HW filter on device eth5 [ 70.084959][ T4957] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.084993][ T4957] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.085056][ T4957] bridge_slave_0: entered allmulticast mode [ 70.085762][ T4957] bridge_slave_0: entered promiscuous mode [ 70.092538][ T4957] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.092573][ T4957] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.092721][ T4957] bridge_slave_1: entered allmulticast mode [ 70.151319][ T4957] bridge_slave_1: entered promiscuous mode [ 70.238635][ T4957] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.244989][ T4957] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.335421][ T4957] team0: Port device team_slave_0 added [ 70.339746][ T4957] team0: Port device team_slave_1 added [ 70.408224][ T4957] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.408244][ T4957] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.408305][ T4957] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.459144][ T4957] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.459159][ T4957] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.459260][ T4957] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.576069][ T4957] hsr_slave_0: entered promiscuous mode [ 70.576527][ T4957] hsr_slave_1: entered promiscuous mode [ 70.579004][ T4957] debugfs: 'hsr0' already exists in 'hsr' [ 70.579018][ T4957] Cannot create hsr debugfs directory [ 70.647922][ T3022] 8021q: adding VLAN 0 to HW filter on device eth7 [ 70.990994][ T4957] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 71.007453][ T4957] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.009619][ T4957] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 71.037567][ T4957] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.039876][ T4957] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 71.074006][ T4957] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.074661][ T4957] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 71.104711][ T4957] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.215022][ T3022] 8021q: adding VLAN 0 to HW filter on device eth8 [ 71.223050][ T5086] ./dev/sda1: Can't lookup blockdev [ 71.339626][ T4957] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.359072][ T4957] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.378960][ T643] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.379004][ T643] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.400770][ T643] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.400870][ T643] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.433054][ T5093] loop4: detected capacity change from 0 to 512 [ 71.447012][ T5093] EXT4-fs: inline encryption not supported [ 71.452821][ T5093] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 71.475234][ T5093] EXT4-fs (loop4): 1 truncate cleaned up [ 71.477278][ T5093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 71.531148][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 71.866134][ T4957] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.056438][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 72.056457][ T29] audit: type=1400 audit(1790401178.996:754): avc: denied { getopt } for pid=5115 comm="syz.4.544" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.253300][ T4957] veth0_vlan: entered promiscuous mode [ 72.268129][ T4957] veth1_vlan: entered promiscuous mode [ 72.285973][ T4957] veth0_macvtap: entered promiscuous mode [ 72.288259][ T4957] veth1_macvtap: entered promiscuous mode [ 72.306431][ T4957] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.310732][ T4957] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.432233][ T29] audit: type=1400 audit(1790401179.366:755): avc: denied { mounton } for pid=4957 comm="syz-executor" path="/root/syzkaller.L8Dz7w/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=11092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 72.434452][ T31] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.438012][ T38] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.438058][ T38] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.438111][ T38] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.447783][ T29] audit: type=1400 audit(1790401179.386:756): avc: denied { mount } for pid=4957 comm="syz-executor" name="/" dev="gadgetfs" ino=4665 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 72.643651][ T29] audit: type=1400 audit(1790401179.586:757): avc: denied { bind } for pid=5143 comm="syz.2.548" lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 72.643690][ T29] audit: type=1400 audit(1790401179.586:758): avc: denied { node_bind } for pid=5143 comm="syz.2.548" saddr=172.20.20.170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 72.658933][ T29] audit: type=1400 audit(1790401179.596:759): avc: denied { connect } for pid=5143 comm="syz.2.548" laddr=172.20.20.170 lport=127 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 73.300549][ T5158] loop4: detected capacity change from 0 to 128 [ 73.325938][ T5158] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 73.326229][ T5158] ext4 filesystem being mounted at /97/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.355881][ T29] audit: type=1400 audit(1790401180.296:760): avc: denied { write } for pid=5157 comm="syz.4.552" name="/" dev="loop4" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 73.373110][ T29] audit: type=1400 audit(1790401180.316:761): avc: denied { setattr } for pid=5157 comm="syz.4.552" path="pipe:[2542]" dev="pipefs" ino=2542 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 73.585263][ T3302] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 73.956796][ T5189] syz_tun: entered allmulticast mode [ 73.958889][ T5189] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 73.958908][ T5189] mroute: pending queue full, dropping entries [ 73.961048][ T5188] syz_tun: left allmulticast mode [ 74.036671][ T29] audit: type=1400 audit(1790401180.976:762): avc: denied { listen } for pid=5190 comm="syz.6.560" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 74.095362][ T29] audit: type=1400 audit(1790401181.036:763): avc: denied { read } for pid=5195 comm="syz.2.562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 74.281088][ T5202] loop5: detected capacity change from 0 to 512 [ 74.307662][ T5202] EXT4-fs error (device loop5): ext4_orphan_get:1403: inode #15: comm syz.5.565: inode has both inline data and extents flags [ 74.307747][ T5202] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 74.308021][ T5202] EXT4-fs error (device loop5): ext4_orphan_get:1408: comm syz.5.565: couldn't read orphan inode 15 (err -117) [ 74.308080][ T5202] loop5: lost filesystem error report for type 5 error -117 [ 74.308762][ T5202] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 75.041583][ T5208] loop6: detected capacity change from 0 to 128 [ 75.059447][ T5208] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 75.059699][ T5208] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 75.154018][ T5212] xt_hashlimit: size too large, truncated to 1048576 [ 75.154036][ T5212] xt_hashlimit: max too large, truncated to 1048576 [ 75.210820][ T4957] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 75.281155][ T3726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 75.721458][ T5224] netlink: 12 bytes leftover after parsing attributes in process `syz.6.573'. [ 75.721522][ T5224] netlink: 'syz.6.573': attribute type 11 has an invalid length. [ 75.751798][ T5224] netlink: 12 bytes leftover after parsing attributes in process `syz.6.573'. [ 75.751832][ T5224] netlink: 'syz.6.573': attribute type 11 has an invalid length. [ 75.772320][ T12] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.772452][ T12] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.772620][ T12] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 75.772805][ T12] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 76.190187][ T5228] syz_tun: entered allmulticast mode [ 76.190475][ T5228] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 76.190496][ T5228] mroute: pending queue full, dropping entries [ 76.191150][ T5226] syz_tun: left allmulticast mode [ 76.301464][ T5231] netlink: 'syz.6.576': attribute type 2 has an invalid length. [ 76.342357][ T5231] 0: entered promiscuous mode [ 76.535294][ T5243] netlink: 'syz.2.582': attribute type 1 has an invalid length. [ 76.562752][ T5243] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.675570][ T5243] bond1: (slave geneve2): making interface the new active one [ 76.678508][ T5243] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 76.774975][ T5243] syz.2.582 (5243) used greatest stack depth: 8656 bytes left [ 76.951324][ T5260] syz_tun: entered allmulticast mode [ 76.962237][ T5260] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 76.962262][ T5260] mroute: pending queue full, dropping entries [ 76.992988][ T5259] syz_tun: left allmulticast mode [ 77.136413][ T5267] xt_hashlimit: size too large, truncated to 1048576 [ 77.136435][ T5267] xt_hashlimit: max too large, truncated to 1048576 [ 77.711976][ T5273] netlink: 'syz.4.590': attribute type 2 has an invalid length. [ 77.742406][ T5273] 0: entered promiscuous mode [ 78.130990][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 78.131010][ T29] audit: type=1400 audit(1790403745.062:770): avc: denied { create } for pid=5283 comm="syz.4.594" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 78.246398][ T5271] netlink: 'syz.6.600': attribute type 15 has an invalid length. [ 78.246425][ T5271] netlink: 24 bytes leftover after parsing attributes in process `syz.6.600'. [ 78.253900][ T5271] netlink: 'syz.6.600': attribute type 4 has an invalid length. [ 78.365646][ T5290] netlink: 'syz.4.596': attribute type 1 has an invalid length. [ 78.391038][ T5286] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 78.410260][ T5290] 8021q: adding VLAN 0 to HW filter on device bond1 [ 78.452677][ T5290] bond1: (slave geneve2): making interface the new active one [ 78.458424][ T5290] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 78.500585][ T5295] netlink: 64 bytes leftover after parsing attributes in process `syz.2.597'. [ 78.699241][ T4933] syz.4.507 (4933) used greatest stack depth: 7496 bytes left [ 78.875543][ T5320] loop5: detected capacity change from 0 to 512 [ 78.887988][ T5320] EXT4-fs (loop5): invalid journal inode [ 78.888020][ T5320] EXT4-fs (loop5): can't get journal size [ 78.890020][ T5320] EXT4-fs (loop5): 1 truncate cleaned up [ 78.897478][ T5320] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 78.922771][ T29] audit: type=1400 audit(1790403745.852:771): avc: denied { write } for pid=5319 comm="syz.5.604" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.948770][ T29] audit: type=1400 audit(1790403745.872:772): avc: denied { write } for pid=3726 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.948908][ T29] audit: type=1400 audit(1790403745.872:773): avc: denied { remove_name } for pid=3726 comm="syz-executor" name="lost+found" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.948998][ T29] audit: type=1400 audit(1790403745.872:774): avc: denied { rmdir } for pid=3726 comm="syz-executor" name="lost+found" dev="loop5" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.950514][ T29] audit: type=1400 audit(1790403745.872:775): avc: denied { write } for pid=3726 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.950610][ T29] audit: type=1400 audit(1790403745.872:776): avc: denied { unlink } for pid=3726 comm="syz-executor" name="file2" dev="loop5" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 78.956068][ T29] audit: type=1400 audit(1790403745.902:777): avc: denied { write } for pid=3726 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.956152][ T29] audit: type=1400 audit(1790403745.902:778): avc: denied { rmdir } for pid=3726 comm="syz-executor" name="proc_mnt" dev="loop5" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=dir permissive=1 [ 78.957053][ T29] audit: type=1400 audit(1790403745.902:779): avc: denied { write } for pid=3726 comm="syz-executor" name="/" dev="loop5" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 78.959111][ T3726] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 78.959973][ T3726] EXT4-fs error (device loop5): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 39 [ 79.093923][ T113] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.176726][ T113] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.242898][ T113] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.277177][ T5329] netlink: 'syz.6.607': attribute type 1 has an invalid length. [ 79.322954][ T113] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.364061][ T3726] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 79.421287][ T5309] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.423275][ T5309] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.423485][ T5309] bridge_slave_0: entered allmulticast mode [ 79.426249][ T5309] bridge_slave_0: entered promiscuous mode [ 79.442533][ T5309] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.442635][ T5309] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.442895][ T5309] bridge_slave_1: entered allmulticast mode [ 79.445185][ T5309] bridge_slave_1: entered promiscuous mode [ 79.534854][ T5309] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.553650][ T5309] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.639541][ T5309] team0: Port device team_slave_0 added [ 79.640682][ T5309] team0: Port device team_slave_1 added [ 79.701423][ T113] bridge_slave_1: left allmulticast mode [ 79.701458][ T113] bridge_slave_1: left promiscuous mode [ 79.701545][ T113] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.702269][ T113] bridge_slave_0: left allmulticast mode [ 79.702363][ T113] bridge_slave_0: left promiscuous mode [ 79.702529][ T113] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.914557][ T113] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.943582][ T113] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.946078][ T113] bond0 (unregistering): Released all slaves [ 79.962681][ T5309] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.962730][ T5309] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.962867][ T5309] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.976655][ T3022] 8021q: adding VLAN 0 to HW filter on device eth9 [ 79.990246][ T5309] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.990283][ T5309] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.990376][ T5309] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.010578][ T113] 0: left promiscuous mode [ 80.103145][ T113] hsr_slave_0: left promiscuous mode [ 80.103427][ T113] hsr_slave_1: left promiscuous mode [ 80.104026][ T113] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 80.104044][ T113] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 80.105965][ T113] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 80.106036][ T113] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 80.114446][ T113] veth1_macvtap: left promiscuous mode [ 80.114534][ T113] veth0_macvtap: left promiscuous mode [ 80.114714][ T113] veth1_vlan: left promiscuous mode [ 80.114876][ T113] veth0_vlan: left promiscuous mode [ 80.137915][ T5380] xt_hashlimit: size too large, truncated to 1048576 [ 80.137933][ T5380] xt_hashlimit: max too large, truncated to 1048576 [ 80.264480][ T113] team0 (unregistering): Port device team_slave_1 removed [ 80.270611][ T113] team0 (unregistering): Port device team_slave_0 removed [ 80.320105][ T5309] hsr_slave_0: entered promiscuous mode [ 80.320543][ T5309] hsr_slave_1: entered promiscuous mode [ 80.320973][ T5309] debugfs: 'hsr0' already exists in 'hsr' [ 80.320991][ T5309] Cannot create hsr debugfs directory [ 80.546230][ T3022] 8021q: adding VLAN 0 to HW filter on device eth10 [ 80.548716][ T113] IPVS: stop unused estimator thread 0... [ 80.550801][ T5309] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 80.560524][ T5309] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.591442][ T5340] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.591484][ T5340] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.591570][ T5340] bridge_slave_0: entered allmulticast mode [ 80.592142][ T5340] bridge_slave_0: entered promiscuous mode [ 80.600132][ T5309] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 80.612801][ T5309] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.613546][ T5340] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.613648][ T5340] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.613869][ T5340] bridge_slave_1: entered allmulticast mode [ 80.615162][ T5340] bridge_slave_1: entered promiscuous mode [ 80.648572][ T5309] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 80.658116][ T5309] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.659475][ T5309] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 80.665658][ T5309] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.718182][ T5340] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.736045][ T113] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.740212][ T5340] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.785584][ T5340] team0: Port device team_slave_0 added [ 80.803960][ T113] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.808367][ T5340] team0: Port device team_slave_1 added [ 80.845653][ T5340] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.845672][ T5340] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.845768][ T5340] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.846555][ T5340] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.846571][ T5340] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 80.846704][ T5340] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.946902][ T113] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.977984][ T5340] hsr_slave_0: entered promiscuous mode [ 80.980031][ T5340] hsr_slave_1: entered promiscuous mode [ 80.980285][ T5340] debugfs: 'hsr0' already exists in 'hsr' [ 80.980298][ T5340] Cannot create hsr debugfs directory [ 81.008609][ T113] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.024869][ T5309] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.042516][ T5309] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.045775][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.045812][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.074255][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.074287][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.200877][ T113] bond0 (unregistering): Released all slaves [ 81.210021][ T113] bond1 (unregistering): (slave lo): Releasing backup interface [ 81.210258][ T113] bond1 (unregistering): (slave lo): last VLAN challenged slave left bond - VLAN blocking is removed [ 81.210961][ T113] bond1 (unregistering): Released all slaves [ 81.230873][ T113] bond2 (unregistering): (slave veth3): Releasing active interface [ 81.245814][ T113] bond2 (unregistering): (slave dummy0): Releasing active interface [ 81.246887][ T113] bond2 (unregistering): Released all slaves [ 81.269016][ T3022] 8021q: adding VLAN 0 to HW filter on device eth11 [ 81.313795][ T113] hsr_slave_0: left promiscuous mode [ 81.314226][ T113] hsr_slave_1: left promiscuous mode [ 81.316076][ T113] veth1_macvtap: left promiscuous mode [ 81.316105][ T113] veth0_macvtap: left promiscuous mode [ 81.316161][ T113] veth1_vlan: left promiscuous mode [ 81.316202][ T113] veth0_vlan: left promiscuous mode [ 81.362588][ T5440] loop4: detected capacity change from 0 to 512 [ 81.365952][ T5440] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 81.377143][ T5440] EXT4-fs error (device loop4): ext4_orphan_get:1429: comm syz.4.627: bad orphan inode 13 [ 81.377247][ T5440] loop4: lost filesystem error report for type 5 error -117 [ 81.377625][ T5440] ext4_test_bit(bit=12, block=18) = 1 [ 81.377658][ T5440] is_bad_inode(inode)=0 [ 81.377666][ T5440] NEXT_ORPHAN(inode)=0 [ 81.377675][ T5440] max_ino=32 [ 81.377696][ T5440] i_nlink=1 [ 81.379487][ T5440] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 81.570544][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 81.606408][ T5450] netlink: 28 bytes leftover after parsing attributes in process `syz.4.628'. [ 81.646590][ T5340] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 81.656991][ T5340] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 81.662578][ T5340] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 81.670690][ T5340] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 81.677396][ T5340] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 81.689210][ T5340] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 81.694019][ T5340] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 81.726093][ T5340] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 81.762590][ T38] rpcbind: server 127.0.0.1 not responding, timed out [ 81.787630][ T5340] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.807689][ T5340] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.819155][ T51] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.819194][ T51] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.825750][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.825854][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.925252][ T5472] netlink: 8 bytes leftover after parsing attributes in process `syz.6.631'. [ 81.997740][ T5340] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.081395][ T5309] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.082483][ T3022] 8021q: adding VLAN 0 to HW filter on device eth12 [ 82.146841][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.147016][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.147168][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.147297][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.147425][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.147565][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.147724][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.147856][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.148032][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.148197][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.148377][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.148473][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.148621][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.148785][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.148916][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.149162][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.149246][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.149390][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.149493][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.149738][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.150016][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.150098][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.150230][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.150393][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.150606][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.150809][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.151033][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.325257][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.325440][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.325652][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.325783][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.325964][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.326060][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.326162][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.326259][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.326409][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.326509][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.326604][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.326786][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.326967][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.327165][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.327276][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.327378][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.327557][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.327788][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.337472][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.337642][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.337828][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.337943][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.338022][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.338140][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.338302][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.338646][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.446535][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.446732][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.446848][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.446978][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.447074][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.447160][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.447270][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.447338][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.447435][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.447517][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.447716][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.511462][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.511676][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.511791][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.512019][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.512167][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.512347][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.512513][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.512759][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.512972][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.513071][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.513301][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.513594][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.513825][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.514431][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.514989][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.515381][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.515982][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.516598][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.517366][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.517777][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.518331][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.519101][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.519558][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.519732][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.519914][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.520061][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.520225][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.520472][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.521177][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.521537][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.524453][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.524593][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.525516][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.528450][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.528872][ T5517] ./dev/sda1: Can't lookup blockdev [ 82.530260][ T5502] ieee802154 phy1 wpan1: encryption failed: -22 [ 82.847726][ T5340] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.971527][ T5309] veth0_vlan: entered promiscuous mode [ 82.995801][ T5309] veth1_vlan: entered promiscuous mode [ 83.022199][ T5309] veth0_macvtap: entered promiscuous mode [ 83.023730][ T5309] veth1_macvtap: entered promiscuous mode [ 83.028387][ T5309] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.056874][ T5309] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.121086][ T38] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.121620][ T38] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.122096][ T38] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.148562][ T38] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.222967][ T5565] loop7: detected capacity change from 0 to 512 [ 83.231180][ T5565] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 83.239439][ T29] kauditd_printk_skb: 37 callbacks suppressed [ 83.239492][ T29] audit: type=1400 audit(1790406310.178:817): avc: denied { write } for pid=5546 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.267830][ T5340] veth0_vlan: entered promiscuous mode [ 83.284586][ T5340] veth1_vlan: entered promiscuous mode [ 83.305426][ T5565] EXT4-fs warning (device loop7): dx_probe:837: inode #2: comm syz.7.601: Unimplemented hash flags: 0x0001 [ 83.305540][ T5565] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.601: Corrupt directory, running e2fsck is recommended [ 83.356835][ T5340] veth0_macvtap: entered promiscuous mode [ 83.373505][ T5340] veth1_macvtap: entered promiscuous mode [ 83.375291][ T29] audit: type=1400 audit(1790406310.318:818): avc: denied { write } for pid=5572 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.401515][ T5340] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.420571][ T5340] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.452811][ T51] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.454476][ T643] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.454530][ T643] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.454604][ T643] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.554570][ T5309] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 83.680310][ T29] audit: type=1400 audit(1790406310.618:819): avc: denied { write } for pid=5575 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 83.785972][ T29] audit: type=1400 audit(1790406310.728:820): avc: denied { write } for pid=5604 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.129759][ T29] audit: type=1400 audit(1790408871.067:821): avc: denied { write } for pid=5610 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.194848][ T29] audit: type=1400 audit(1790408871.137:822): avc: denied { write } for pid=5630 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.368937][ T5640] sctp: [Deprecated]: syz.7.654 (pid 5640) Use of int in max_burst socket option. [ 84.368937][ T5640] Use struct sctp_assoc_value instead [ 84.512785][ T5648] loop6: detected capacity change from 0 to 512 [ 84.539652][ T5648] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 84.554810][ T5648] EXT4-fs warning (device loop6): dx_probe:837: inode #2: comm syz.6.656: Unimplemented hash flags: 0x0001 [ 84.554840][ T5648] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.656: Corrupt directory, running e2fsck is recommended [ 84.694499][ T29] audit: type=1400 audit(1790408871.637:823): avc: denied { write } for pid=5644 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.766337][ T29] audit: type=1400 audit(1790408871.707:824): avc: denied { write } for pid=5672 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 84.799512][ T4957] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 84.824138][ T3022] 8021q: adding VLAN 0 to HW filter on device eth13 [ 84.980159][ T29] audit: type=1400 audit(1790408871.917:825): avc: denied { write } for pid=5677 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.028273][ T29] audit: type=1400 audit(1790408871.967:826): avc: denied { write } for pid=5696 comm="rm" name="hook-state" dev="tmpfs" ino=486 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 85.068069][ T3022] 8021q: adding VLAN 0 to HW filter on device eth14 [ 85.337304][ T3022] 8021q: adding VLAN 0 to HW filter on device eth15 [ 85.545393][ T5746] loop4: detected capacity change from 0 to 512 [ 85.548671][ T5746] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 85.572238][ T5746] EXT4-fs warning (device loop4): dx_probe:837: inode #2: comm syz.4.675: Unimplemented hash flags: 0x0001 [ 85.572269][ T5746] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.675: Corrupt directory, running e2fsck is recommended [ 85.677473][ T3022] 8021q: adding VLAN 0 to HW filter on device eth16 [ 85.812920][ T5759] macvlan2: entered promiscuous mode [ 85.812975][ T5759] macvlan2: entered allmulticast mode [ 85.813169][ T5759] dummy0: entered allmulticast mode [ 85.813204][ T5759] dummy0: entered promiscuous mode [ 85.819301][ T5759] team0: Port device macvlan2 added [ 85.940686][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 86.270878][ T5785] sctp: [Deprecated]: syz.4.686 (pid 5785) Use of int in max_burst socket option. [ 86.270878][ T5785] Use struct sctp_assoc_value instead [ 86.324560][ T5787] loop7: detected capacity change from 0 to 4096 [ 86.363594][ T5787] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 86.647006][ T5309] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.119670][ T5825] loop6: detected capacity change from 0 to 4096 [ 87.134640][ T5825] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 87.262875][ T5831] netlink: 36 bytes leftover after parsing attributes in process `syz.4.703'. [ 87.293418][ T4957] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.324224][ T5836] netlink: 12 bytes leftover after parsing attributes in process `syz.4.703'. [ 87.374549][ T5839] netlink: 12 bytes leftover after parsing attributes in process `syz.6.704'. [ 87.406284][ T5839] 8021q: adding VLAN 0 to HW filter on device bond1 [ 87.481366][ T5839] macvlan2: entered promiscuous mode [ 87.481386][ T5839] macvlan2: entered allmulticast mode [ 87.618217][ T5857] loop8: detected capacity change from 0 to 1024 [ 87.630350][ T5857] EXT4-fs (loop8): stripe (31) is not aligned with cluster size (16), stripe is disabled [ 87.654400][ T5857] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 87.819519][ T5340] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 87.876495][ T5875] FAULT_INJECTION: forcing a failure. [ 87.876495][ T5875] name failslab, interval 1, probability 0, space 0, times 0 [ 87.876589][ T5875] CPU: 1 UID: 0 PID: 5875 Comm: syz.8.720 Not tainted syzkaller #0 PREEMPT(lazy) [ 87.876619][ T5875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 87.876635][ T5875] Call Trace: [ 87.876644][ T5875] [ 87.876651][ T5875] __dump_stack+0x1d/0x30 [ 87.876677][ T5875] dump_stack_lvl+0x95/0xd0 [ 87.876745][ T5875] dump_stack+0x15/0x1b [ 87.876773][ T5875] should_fail_ex+0x262/0x280 [ 87.876800][ T5875] ? create_filter_start+0xcf/0x140 [ 87.876831][ T5875] should_failslab+0x8c/0xb0 [ 87.876929][ T5875] __kmalloc_cache_noprof+0x7a/0x400 [ 87.876969][ T5875] ? create_filter_start+0xcf/0x140 [ 87.877002][ T5875] create_filter_start+0xcf/0x140 [ 87.877073][ T5875] apply_subsystem_event_filter+0x109/0xcd0 [ 87.877116][ T5875] ? __kmalloc_node_track_caller_noprof+0x2e4/0x500 [ 87.877249][ T5875] subsystem_filter_write+0x79/0xd0 [ 87.877280][ T5875] ? __pfx_subsystem_filter_write+0x10/0x10 [ 87.877311][ T5875] vfs_write+0x254/0x9a0 [ 87.877489][ T5875] ? __fget_files+0x184/0x1c0 [ 87.877519][ T5875] ? mutex_lock+0x57/0x90 [ 87.877565][ T5875] ksys_write+0xdc/0x1a0 [ 87.877674][ T5875] __x64_sys_write+0x40/0x50 [ 87.877712][ T5875] x64_sys_call+0x154e/0x2550 [ 87.877739][ T5875] do_syscall_64+0x112/0x360 [ 87.877760][ T5875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.877813][ T5875] RIP: 0033:0x7fd541c5e159 [ 87.877830][ T5875] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.877903][ T5875] RSP: 002b:00007fd5406b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 87.877930][ T5875] RAX: ffffffffffffffda RBX: 00007fd541ee5fa0 RCX: 00007fd541c5e159 [ 87.877949][ T5875] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 87.877965][ T5875] RBP: 00007fd541cf506b R08: 0000000000000000 R09: 0000000000000000 [ 87.878018][ T5875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.878099][ T5875] R13: 00007fd541ee6038 R14: 00007fd541ee5fa0 R15: 00007ffd90a01a68 [ 87.878188][ T5875] [ 87.956027][ T5876] loop7: detected capacity change from 0 to 4096 [ 87.975931][ T5876] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.238670][ T5309] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.395492][ T12] IPVS: starting estimator thread 0... [ 88.481751][ T5888] IPVS: using max 1728 ests per chain, 86400 per kthread [ 88.498251][ T5899] futex_wake_op: syz.7.729 tries to shift op by -1; fix this program [ 88.498318][ T5899] futex_wake_op: syz.7.729 tries to shift op by -1; fix this program [ 88.509568][ T5899] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 88.695583][ T5911] loop7: detected capacity change from 0 to 512 [ 88.711647][ T5911] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 88.718763][ T5911] EXT4-fs error (device loop7): ext4_iget_extra_inode:5210: inode #17: comm syz.7.735: corrupted in-inode xattr: e_name out of bounds [ 88.718803][ T5911] loop7: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 88.719767][ C1] EXT4-fs (loop7): error count since last fsck: 1 [ 88.719799][ C1] EXT4-fs (loop7): initial error at time 1790408875: ext4_iget_extra_inode:5210: inode 17 [ 88.719834][ C1] EXT4-fs (loop7): last error at time 1790408875: ext4_iget_extra_inode:5210: inode 17 [ 88.741930][ T5911] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.735: couldn't read orphan inode 17 (err -117) [ 88.742018][ T5911] loop7: lost filesystem error report for type 5 error -117 [ 88.743385][ T5911] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 88.867805][ T5309] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 88.891896][ T5923] loop8: detected capacity change from 0 to 512 [ 88.936129][ T5923] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 88.936276][ T5923] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 88.994671][ T643] IPVS: starting estimator thread 0... [ 88.999819][ T5340] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 89.079650][ T5929] IPVS: using max 2016 ests per chain, 100800 per kthread [ 89.136528][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 89.136548][ T29] audit: type=1326 audit(1790408876.078:835): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5940 comm="syz.4.746" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ff45e159 code=0x7ffc0000 [ 89.138969][ T29] audit: type=1326 audit(1790408876.078:836): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5940 comm="syz.4.746" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=426 compat=0 ip=0x7fd9ff45e159 code=0x7ffc0000 [ 89.206065][ T29] audit: type=1326 audit(1790408876.148:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5940 comm="syz.4.746" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ff45e159 code=0x7ffc0000 [ 89.206246][ T29] audit: type=1326 audit(1790408876.148:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5940 comm="syz.4.746" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9ff45e159 code=0x7ffc0000 [ 89.352520][ T29] audit: type=1400 audit(1790408876.298:839): avc: denied { bind } for pid=5951 comm="syz.7.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.353146][ T29] audit: type=1400 audit(1790408876.298:840): avc: denied { listen } for pid=5951 comm="syz.7.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.353855][ T29] audit: type=1400 audit(1790408876.298:841): avc: denied { accept } for pid=5951 comm="syz.7.752" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 89.595101][ T5960] FAULT_INJECTION: forcing a failure. [ 89.595101][ T5960] name failslab, interval 1, probability 0, space 0, times 0 [ 89.595215][ T5960] CPU: 1 UID: 0 PID: 5960 Comm: syz.6.756 Not tainted syzkaller #0 PREEMPT(lazy) [ 89.595255][ T5960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 89.595275][ T5960] Call Trace: [ 89.595284][ T5960] [ 89.595367][ T5960] __dump_stack+0x1d/0x30 [ 89.595393][ T5960] dump_stack_lvl+0x95/0xd0 [ 89.595415][ T5960] dump_stack+0x15/0x1b [ 89.595441][ T5960] should_fail_ex+0x262/0x280 [ 89.595518][ T5960] ? tcf_block_get_ext+0x4d9/0xcf0 [ 89.595543][ T5960] should_failslab+0x8c/0xb0 [ 89.595576][ T5960] __kmalloc_cache_noprof+0x7a/0x400 [ 89.595692][ T5960] ? tcf_block_get_ext+0x4d9/0xcf0 [ 89.595733][ T5960] tcf_block_get_ext+0x4d9/0xcf0 [ 89.595765][ T5960] ? netlink_sendmsg+0x5be/0x6f0 [ 89.595932][ T5960] ? x64_sys_call+0x22ab/0x2550 [ 89.596024][ T5960] ? __pfx_drr_init_qdisc+0x10/0x10 [ 89.596055][ T5960] tcf_block_get+0x67/0xa0 [ 89.596132][ T5960] ? __pfx_tcf_chain_head_change_dflt+0x10/0x10 [ 89.596161][ T5960] drr_init_qdisc+0x2c/0xb0 [ 89.596181][ T5960] qdisc_create+0x57f/0x9c0 [ 89.596203][ T5960] tc_modify_qdisc+0x102a/0x1550 [ 89.596239][ T5960] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 89.596315][ T5960] rtnetlink_rcv_msg+0x6a7/0x720 [ 89.596355][ T5960] netlink_rcv_skb+0x11e/0x220 [ 89.596405][ T5960] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 89.596494][ T5960] rtnetlink_rcv+0x1c/0x30 [ 89.596527][ T5960] netlink_unicast+0x5a9/0x680 [ 89.596571][ T5960] netlink_sendmsg+0x5be/0x6f0 [ 89.596669][ T5960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 89.596717][ T5960] ____sys_sendmsg+0x532/0x580 [ 89.596751][ T5960] ___sys_sendmsg+0x195/0x1e0 [ 89.596803][ T5960] __x64_sys_sendmsg+0xd4/0x160 [ 89.596899][ T5960] x64_sys_call+0x22ab/0x2550 [ 89.596943][ T5960] do_syscall_64+0x112/0x360 [ 89.596974][ T5960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.597007][ T5960] RIP: 0033:0x7fd8abe7e159 [ 89.597029][ T5960] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.597057][ T5960] RSP: 002b:00007fd8aa8d7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.597084][ T5960] RAX: ffffffffffffffda RBX: 00007fd8ac105fa0 RCX: 00007fd8abe7e159 [ 89.597104][ T5960] RDX: 0000000020000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 89.597119][ T5960] RBP: 00007fd8abf1506b R08: 0000000000000000 R09: 0000000000000000 [ 89.597171][ T5960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.597189][ T5960] R13: 00007fd8ac106038 R14: 00007fd8ac105fa0 R15: 00007ffdc8253c08 [ 89.597218][ T5960] [ 90.468795][ T5986] syzkaller0: entered promiscuous mode [ 90.468823][ T5986] syzkaller0: entered allmulticast mode [ 90.597185][ T5992] FAULT_INJECTION: forcing a failure. [ 90.597185][ T5992] name failslab, interval 1, probability 0, space 0, times 0 [ 90.597226][ T5992] CPU: 0 UID: 0 PID: 5992 Comm: syz.8.767 Not tainted syzkaller #0 PREEMPT(lazy) [ 90.597256][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 90.597269][ T5992] Call Trace: [ 90.597275][ T5992] [ 90.597282][ T5992] __dump_stack+0x1d/0x30 [ 90.597316][ T5992] dump_stack_lvl+0x95/0xd0 [ 90.597383][ T5992] dump_stack+0x15/0x1b [ 90.597410][ T5992] should_fail_ex+0x262/0x280 [ 90.597444][ T5992] should_failslab+0x8c/0xb0 [ 90.597483][ T5992] __kvmalloc_node_noprof+0x168/0x5c0 [ 90.597579][ T5992] ? qdisc_class_hash_init+0x29/0xa0 [ 90.597616][ T5992] ? qdisc_class_hash_init+0x29/0xa0 [ 90.597726][ T5992] ? __pfx_drr_init_qdisc+0x10/0x10 [ 90.597746][ T5992] qdisc_class_hash_init+0x29/0xa0 [ 90.597855][ T5992] drr_init_qdisc+0x4e/0xb0 [ 90.597874][ T5992] qdisc_create+0x57f/0x9c0 [ 90.597895][ T5992] tc_modify_qdisc+0x102a/0x1550 [ 90.597934][ T5992] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 90.597961][ T5992] rtnetlink_rcv_msg+0x6a7/0x720 [ 90.598117][ T5992] netlink_rcv_skb+0x11e/0x220 [ 90.598148][ T5992] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 90.598183][ T5992] rtnetlink_rcv+0x1c/0x30 [ 90.598292][ T5992] netlink_unicast+0x5a9/0x680 [ 90.598330][ T5992] netlink_sendmsg+0x5be/0x6f0 [ 90.598418][ T5992] ? __pfx_netlink_sendmsg+0x10/0x10 [ 90.598504][ T5992] ____sys_sendmsg+0x532/0x580 [ 90.598528][ T5992] ___sys_sendmsg+0x195/0x1e0 [ 90.598629][ T5992] __x64_sys_sendmsg+0xd4/0x160 [ 90.598662][ T5992] x64_sys_call+0x22ab/0x2550 [ 90.598697][ T5992] do_syscall_64+0x112/0x360 [ 90.598724][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.598800][ T5992] RIP: 0033:0x7fd541c5e159 [ 90.598822][ T5992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.598847][ T5992] RSP: 002b:00007fd5406b7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.598921][ T5992] RAX: ffffffffffffffda RBX: 00007fd541ee5fa0 RCX: 00007fd541c5e159 [ 90.598940][ T5992] RDX: 0000000020000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 90.598958][ T5992] RBP: 00007fd541cf506b R08: 0000000000000000 R09: 0000000000000000 [ 90.598991][ T5992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.599003][ T5992] R13: 00007fd541ee6038 R14: 00007fd541ee5fa0 R15: 00007ffd90a01a68 [ 90.599027][ T5992] [ 91.173748][ T29] audit: type=1400 audit(1790408878.119:842): avc: denied { map } for pid=6027 comm="syz.8.780" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15067 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.173825][ T29] audit: type=1400 audit(1790408878.119:843): avc: denied { read write } for pid=6027 comm="syz.8.780" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=15067 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 91.252982][ T6032] FAULT_INJECTION: forcing a failure. [ 91.252982][ T6032] name failslab, interval 1, probability 0, space 0, times 0 [ 91.253018][ T6032] CPU: 1 UID: 0 PID: 6032 Comm: syz.7.781 Not tainted syzkaller #0 PREEMPT(lazy) [ 91.253062][ T6032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 91.253080][ T6032] Call Trace: [ 91.253086][ T6032] [ 91.253093][ T6032] __dump_stack+0x1d/0x30 [ 91.253119][ T6032] dump_stack_lvl+0x95/0xd0 [ 91.253200][ T6032] dump_stack+0x15/0x1b [ 91.253231][ T6032] should_fail_ex+0x262/0x280 [ 91.253266][ T6032] should_failslab+0x8c/0xb0 [ 91.253363][ T6032] __kmalloc_node_noprof+0xdb/0x500 [ 91.253401][ T6032] ? qdisc_alloc+0x65/0x410 [ 91.253436][ T6032] ? qdisc_alloc+0x65/0x410 [ 91.253471][ T6032] qdisc_alloc+0x65/0x410 [ 91.253578][ T6032] qdisc_create+0xf0/0x9c0 [ 91.253677][ T6032] tc_modify_qdisc+0x102a/0x1550 [ 91.253715][ T6032] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 91.253811][ T6032] rtnetlink_rcv_msg+0x6a7/0x720 [ 91.253863][ T6032] netlink_rcv_skb+0x11e/0x220 [ 91.253906][ T6032] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 91.254110][ T6032] rtnetlink_rcv+0x1c/0x30 [ 91.254147][ T6032] netlink_unicast+0x5a9/0x680 [ 91.254189][ T6032] netlink_sendmsg+0x5be/0x6f0 [ 91.254310][ T6032] ? __pfx_netlink_sendmsg+0x10/0x10 [ 91.254353][ T6032] ____sys_sendmsg+0x532/0x580 [ 91.254387][ T6032] ___sys_sendmsg+0x195/0x1e0 [ 91.254467][ T6032] __x64_sys_sendmsg+0xd4/0x160 [ 91.254500][ T6032] x64_sys_call+0x22ab/0x2550 [ 91.254536][ T6032] do_syscall_64+0x112/0x360 [ 91.254564][ T6032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.254588][ T6032] RIP: 0033:0x7f702c7ce159 [ 91.254609][ T6032] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.254635][ T6032] RSP: 002b:00007f702b227028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 91.254713][ T6032] RAX: ffffffffffffffda RBX: 00007f702ca55fa0 RCX: 00007f702c7ce159 [ 91.254735][ T6032] RDX: 0000000020000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 91.254754][ T6032] RBP: 00007f702c86506b R08: 0000000000000000 R09: 0000000000000000 [ 91.254772][ T6032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.254789][ T6032] R13: 00007f702ca56038 R14: 00007f702ca55fa0 R15: 00007fff755e65d8 [ 91.254815][ T6032] [ 91.545858][ T6036] bond2: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 91.557661][ T6036] bond2: (slave lo): Enslaving as an active interface with an up link [ 91.573429][ T6036] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 92.064616][ T6069] netlink: 'syz.7.795': attribute type 1 has an invalid length. [ 92.081588][ T6069] 8021q: adding VLAN 0 to HW filter on device bond1 [ 92.123232][ T6069] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 92.169809][ T6069] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 92.177533][ T6069] bond1 (unregistering): Released all slaves [ 92.205470][ T6075] FAULT_INJECTION: forcing a failure. [ 92.205470][ T6075] name failslab, interval 1, probability 0, space 0, times 0 [ 92.205573][ T6075] CPU: 0 UID: 0 PID: 6075 Comm: syz.4.797 Not tainted syzkaller #0 PREEMPT(lazy) [ 92.205603][ T6075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 92.205620][ T6075] Call Trace: [ 92.205629][ T6075] [ 92.205645][ T6075] __dump_stack+0x1d/0x30 [ 92.205707][ T6075] dump_stack_lvl+0x95/0xd0 [ 92.205815][ T6075] dump_stack+0x15/0x1b [ 92.205915][ T6075] should_fail_ex+0x262/0x280 [ 92.205942][ T6075] should_failslab+0x8c/0xb0 [ 92.206019][ T6075] __kmalloc_node_noprof+0xdb/0x500 [ 92.206055][ T6075] ? qdisc_alloc+0x65/0x410 [ 92.206087][ T6075] ? qdisc_alloc+0x65/0x410 [ 92.206192][ T6075] qdisc_alloc+0x65/0x410 [ 92.206228][ T6075] qdisc_create+0xf0/0x9c0 [ 92.206277][ T6075] tc_modify_qdisc+0x102a/0x1550 [ 92.206314][ T6075] ? __mutex_lock_slowpath+0xa/0x10 [ 92.206348][ T6075] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 92.206375][ T6075] rtnetlink_rcv_msg+0x6a7/0x720 [ 92.206463][ T6075] netlink_rcv_skb+0x11e/0x220 [ 92.206494][ T6075] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 92.206539][ T6075] rtnetlink_rcv+0x1c/0x30 [ 92.206621][ T6075] netlink_unicast+0x5a9/0x680 [ 92.206672][ T6075] netlink_sendmsg+0x5be/0x6f0 [ 92.206783][ T6075] ? __pfx_netlink_sendmsg+0x10/0x10 [ 92.206829][ T6075] ____sys_sendmsg+0x532/0x580 [ 92.206870][ T6075] ___sys_sendmsg+0x195/0x1e0 [ 92.206924][ T6075] __x64_sys_sendmsg+0xd4/0x160 [ 92.206960][ T6075] x64_sys_call+0x22ab/0x2550 [ 92.206995][ T6075] do_syscall_64+0x112/0x360 [ 92.207066][ T6075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.207096][ T6075] RIP: 0033:0x7fd9ff45e159 [ 92.207118][ T6075] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.207143][ T6075] RSP: 002b:00007fd9fdeb7028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 92.207207][ T6075] RAX: ffffffffffffffda RBX: 00007fd9ff6e5fa0 RCX: 00007fd9ff45e159 [ 92.207221][ T6075] RDX: 0000000020000000 RSI: 0000200000000200 RDI: 0000000000000005 [ 92.207235][ T6075] RBP: 00007fd9ff4f506b R08: 0000000000000000 R09: 0000000000000000 [ 92.207253][ T6075] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.207309][ T6075] R13: 00007fd9ff6e6038 R14: 00007fd9ff6e5fa0 R15: 00007fffc3a85c18 [ 92.207337][ T6075] [ 92.612346][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.804'. [ 92.612372][ T6093] netlink: 8 bytes leftover after parsing attributes in process `syz.4.804'. [ 92.671304][ T6085] loop7: detected capacity change from 0 to 512 [ 92.821780][ T6085] EXT4-fs (loop7): orphan cleanup on readonly fs [ 92.825637][ T6085] EXT4-fs warning (device loop7): ext4_enable_quotas:7304: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix. [ 92.843097][ T6085] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 92.843787][ T6085] EXT4-fs error (device loop7): ext4_ext_check_inode:521: inode #13: comm syz.7.799: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 92.843956][ T6085] loop7: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117 [ 92.844781][ T6085] EXT4-fs error (device loop7): ext4_orphan_get:1408: comm syz.7.799: couldn't read orphan inode 13 (err -117) [ 92.844892][ T6085] loop7: lost filesystem error report for type 5 error -117 [ 92.846635][ T6085] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 92.949329][ T5309] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 93.185355][ T29] audit: type=1400 audit(1790408880.129:844): avc: denied { create } for pid=6105 comm="syz.6.811" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 93.322178][ T6120] EXT4-fs (sda1): resizing filesystem from 262144 to 1 blocks [ 93.322305][ T6120] EXT4-fs warning (device sda1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 94.389276][ T6131] loop4: detected capacity change from 0 to 4096 [ 94.413026][ T6131] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 94.490176][ T6139] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 94.490213][ T6139] FAULT_INJECTION: forcing a failure. [ 94.490213][ T6139] name failslab, interval 1, probability 0, space 0, times 0 [ 94.490248][ T6139] CPU: 1 UID: 0 PID: 6139 Comm: syz.6.824 Not tainted syzkaller #0 PREEMPT(lazy) [ 94.490283][ T6139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 94.490332][ T6139] Call Trace: [ 94.490340][ T6139] [ 94.490352][ T6139] __dump_stack+0x1d/0x30 [ 94.490432][ T6139] dump_stack_lvl+0x95/0xd0 [ 94.490463][ T6139] dump_stack+0x15/0x1b [ 94.490603][ T6139] should_fail_ex+0x262/0x280 [ 94.490632][ T6139] should_failslab+0x8c/0xb0 [ 94.490674][ T6139] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 94.490796][ T6139] ? kstrdup_const+0x3e/0x50 [ 94.490826][ T6139] ? kstrdup_const+0x3e/0x50 [ 94.490859][ T6139] kstrdup+0x3e/0xd0 [ 94.490882][ T6139] kstrdup_const+0x3e/0x50 [ 94.490975][ T6139] alloc_vfsmnt+0xe2/0x2f0 [ 94.491012][ T6139] vfs_create_mount+0x3b/0x1d0 [ 94.491071][ T6139] fc_mount+0x61/0x70 [ 94.491156][ T6139] trace_automount+0x101/0x120 [ 94.491225][ T6139] ? __pfx_trace_automount+0x10/0x10 [ 94.491254][ T6139] debugfs_automount+0x5d/0x70 [ 94.491363][ T6139] __traverse_mounts+0x256/0x420 [ 94.491400][ T6139] step_into_slowpath+0x2d5/0x4c0 [ 94.491438][ T6139] link_path_walk+0x947/0xdd0 [ 94.491482][ T6139] path_openat+0xe7/0x10d0 [ 94.491578][ T6139] do_file_open+0x16c/0x290 [ 94.491676][ T6139] do_sys_openat2+0xa0/0x130 [ 94.491708][ T6139] __x64_sys_openat+0xf2/0x120 [ 94.491743][ T6139] x64_sys_call+0x1f72/0x2550 [ 94.491795][ T6139] do_syscall_64+0x112/0x360 [ 94.491826][ T6139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 94.491936][ T6139] RIP: 0033:0x7fd8abe7e159 [ 94.491959][ T6139] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.491985][ T6139] RSP: 002b:00007fd8aa8d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 94.492012][ T6139] RAX: ffffffffffffffda RBX: 00007fd8ac105fa0 RCX: 00007fd8abe7e159 [ 94.492032][ T6139] RDX: 0000000000020480 RSI: 0000200000000cc0 RDI: ffffffffffffff9c [ 94.492050][ T6139] RBP: 00007fd8abf1506b R08: 0000000000000000 R09: 0000000000000000 [ 94.492096][ T6139] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 94.492113][ T6139] R13: 00007fd8ac106038 R14: 00007fd8ac105fa0 R15: 00007ffdc8253c08 [ 94.492174][ T6139] [ 94.576836][ T6142] netlink: 12 bytes leftover after parsing attributes in process `syz.7.823'. [ 94.604854][ T6136] netlink: 36 bytes leftover after parsing attributes in process `syz.7.823'. [ 94.606369][ T3302] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 94.801304][ T29] audit: type=1400 audit(1790408881.740:845): avc: denied { setopt } for pid=6148 comm="syz.4.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 94.804589][ T29] audit: type=1400 audit(1790408881.750:846): avc: denied { bind } for pid=6148 comm="syz.4.826" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 94.810699][ T29] audit: type=1326 audit(1790408881.760:847): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6143 comm="syz.2.836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1eaae159 code=0x7ffc0000 [ 94.812314][ T29] audit: type=1326 audit(1790408881.760:848): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6143 comm="syz.2.836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1eaae159 code=0x7ffc0000 [ 94.814219][ T29] audit: type=1326 audit(1790408881.760:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6143 comm="syz.2.836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1eaae159 code=0x7ffc0000 [ 94.815480][ T29] audit: type=1326 audit(1790408881.760:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6143 comm="syz.2.836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1eaae159 code=0x7ffc0000 [ 94.817766][ T29] audit: type=1326 audit(1790408881.760:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6143 comm="syz.2.836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7fdc1eaae159 code=0x7ffc0000 [ 94.818113][ T29] audit: type=1326 audit(1790408881.760:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6143 comm="syz.2.836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1eaae159 code=0x7ffc0000 [ 94.819956][ T29] audit: type=1326 audit(1790408881.770:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6143 comm="syz.2.836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1eaae159 code=0x7ffc0000 [ 94.822321][ T29] audit: type=1326 audit(1790408881.770:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6143 comm="syz.2.836" exe="/root/ci2-upstream-kcsan-gce/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdc1eaae159 code=0x7ffc0000 [ 94.831716][ T6147] loop6: detected capacity change from 0 to 512 [ 94.833323][ T6147] ext4: Unknown parameter 'hash' [ 95.097472][ T6159] EXT4-fs (sda1): resizing filesystem from 262144 to 1 blocks [ 95.097496][ T6159] EXT4-fs warning (device sda1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 95.342647][ T6182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 95.342749][ T6182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 95.344643][ T6182] netlink: 'syz.4.843': attribute type 1 has an invalid length. [ 95.369533][ T6179] loop8: detected capacity change from 0 to 512 [ 95.384444][ T6182] 8021q: adding VLAN 0 to HW filter on device bond2 [ 95.416755][ T6184] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000 [ 95.424528][ T6179] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 95.432704][ T6179] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 95.432816][ T6179] System zones: 1-12 [ 95.433003][ T6179] EXT4-fs error (device loop8): ext4_orphan_get:1429: comm syz.8.841: bad orphan inode 131072 [ 95.433068][ T6179] loop8: lost filesystem error report for type 5 error -117 [ 95.436381][ T6179] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.504865][ T6182] bond2: (slave veth3): Enslaving as an active interface with a down link [ 95.520266][ T6189] bond2: (slave dummy0): making interface the new active one [ 95.520926][ T6189] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 95.528773][ T5340] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.553458][ T6191] FAULT_INJECTION: forcing a failure. [ 95.553458][ T6191] name failslab, interval 1, probability 0, space 0, times 0 [ 95.553561][ T6191] CPU: 0 UID: 0 PID: 6191 Comm: syz.7.845 Not tainted syzkaller #0 PREEMPT(lazy) [ 95.553657][ T6191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.553705][ T6191] Call Trace: [ 95.553727][ T6191] [ 95.553751][ T6191] __dump_stack+0x1d/0x30 [ 95.553834][ T6191] dump_stack_lvl+0x95/0xd0 [ 95.553917][ T6191] dump_stack+0x15/0x1b [ 95.554048][ T6191] should_fail_ex+0x262/0x280 [ 95.554250][ T6191] should_failslab+0x8c/0xb0 [ 95.554424][ T6191] __kmalloc_node_track_caller_noprof+0xd6/0x500 [ 95.554563][ T6191] ? x509_cert_parse+0x278/0x450 [ 95.554625][ T6191] ? x509_cert_parse+0x278/0x450 [ 95.554757][ T6191] kmemdup_noprof+0x2b/0x70 [ 95.554841][ T6191] x509_cert_parse+0x278/0x450 [ 95.554925][ T6191] x509_key_preparse+0x3c/0x420 [ 95.555001][ T6191] asymmetric_key_preparse+0x68/0xb0 [ 95.555155][ T6191] __key_create_or_update+0x2df/0x840 [ 95.555285][ T6191] key_create_or_update+0x42/0x60 [ 95.555400][ T6191] __se_sys_add_key+0x2a5/0x360 [ 95.555540][ T6191] __x64_sys_add_key+0x67/0x80 [ 95.555612][ T6191] x64_sys_call+0x1fa9/0x2550 [ 95.555705][ T6191] do_syscall_64+0x112/0x360 [ 95.555728][ T6191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.555750][ T6191] RIP: 0033:0x7f702c7ce159 [ 95.555766][ T6191] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.555814][ T6191] RSP: 002b:00007f702b227028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 95.555964][ T6191] RAX: ffffffffffffffda RBX: 00007f702ca55fa0 RCX: 00007f702c7ce159 [ 95.556016][ T6191] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 95.556059][ T6191] RBP: 00007f702c86506b R08: ffffffffffffffff R09: 0000000000000000 [ 95.556109][ T6191] R10: 0000000000000559 R11: 0000000000000246 R12: 0000000000000000 [ 95.556159][ T6191] R13: 00007f702ca56038 R14: 00007f702ca55fa0 R15: 00007fff755e65d8 [ 95.556238][ T6191] [ 95.819159][ T6199] EXT4-fs (sda1): resizing filesystem from 262144 to 1 blocks [ 95.819190][ T6199] EXT4-fs warning (device sda1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 95.917655][ T6206] FAULT_INJECTION: forcing a failure. [ 95.917655][ T6206] name failslab, interval 1, probability 0, space 0, times 0 [ 95.917695][ T6206] CPU: 0 UID: 0 PID: 6206 Comm: syz.6.850 Not tainted syzkaller #0 PREEMPT(lazy) [ 95.917731][ T6206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 95.917749][ T6206] Call Trace: [ 95.917759][ T6206] [ 95.917769][ T6206] __dump_stack+0x1d/0x30 [ 95.917877][ T6206] dump_stack_lvl+0x95/0xd0 [ 95.917911][ T6206] dump_stack+0x15/0x1b [ 95.917938][ T6206] should_fail_ex+0x262/0x280 [ 95.918021][ T6206] ? x509_cert_parse+0x3b/0x450 [ 95.918048][ T6206] should_failslab+0x8c/0xb0 [ 95.918083][ T6206] __kmalloc_cache_noprof+0x7a/0x400 [ 95.918126][ T6206] ? x509_cert_parse+0x3b/0x450 [ 95.918170][ T6206] x509_cert_parse+0x3b/0x450 [ 95.918195][ T6206] x509_key_preparse+0x3c/0x420 [ 95.918224][ T6206] asymmetric_key_preparse+0x68/0xb0 [ 95.918344][ T6206] __key_create_or_update+0x2df/0x840 [ 95.918393][ T6206] key_create_or_update+0x42/0x60 [ 95.918436][ T6206] __se_sys_add_key+0x2a5/0x360 [ 95.918544][ T6206] __x64_sys_add_key+0x67/0x80 [ 95.918572][ T6206] x64_sys_call+0x1fa9/0x2550 [ 95.918609][ T6206] do_syscall_64+0x112/0x360 [ 95.918639][ T6206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.918708][ T6206] RIP: 0033:0x7fd8abe7e159 [ 95.918729][ T6206] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.918754][ T6206] RSP: 002b:00007fd8aa8d7028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 95.918820][ T6206] RAX: ffffffffffffffda RBX: 00007fd8ac105fa0 RCX: 00007fd8abe7e159 [ 95.918847][ T6206] RDX: 0000200000000200 RSI: 0000000000000000 RDI: 0000200000000000 [ 95.918871][ T6206] RBP: 00007fd8abf1506b R08: ffffffffffffffff R09: 0000000000000000 [ 95.918890][ T6206] R10: 00000000000002c1 R11: 0000000000000246 R12: 0000000000000000 [ 95.918904][ T6206] R13: 00007fd8ac106038 R14: 00007fd8ac105fa0 R15: 00007ffdc8253c08 [ 95.918929][ T6206] [ 96.128103][ T6214] FAULT_INJECTION: forcing a failure. [ 96.128103][ T6214] name failslab, interval 1, probability 0, space 0, times 0 [ 96.128139][ T6214] CPU: 1 UID: 0 PID: 6214 Comm: syz.8.851 Not tainted syzkaller #0 PREEMPT(lazy) [ 96.128222][ T6214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 96.128235][ T6214] Call Trace: [ 96.128242][ T6214] [ 96.128251][ T6214] __dump_stack+0x1d/0x30 [ 96.128293][ T6214] dump_stack_lvl+0x95/0xd0 [ 96.128317][ T6214] dump_stack+0x15/0x1b [ 96.128409][ T6214] should_fail_ex+0x262/0x280 [ 96.128495][ T6214] ? alloc_fs_context+0x41/0x570 [ 96.128524][ T6214] should_failslab+0x8c/0xb0 [ 96.128800][ T6214] __kmalloc_cache_noprof+0x7a/0x400 [ 96.128836][ T6214] ? alloc_fs_context+0x41/0x570 [ 96.128859][ T6214] ? inode_doinit_with_dentry+0x98/0x7b0 [ 96.128932][ T6214] alloc_fs_context+0x41/0x570 [ 96.128962][ T6214] ? fs_context_for_submount+0x13/0x90 [ 96.128993][ T6214] fs_context_for_submount+0x28/0x90 [ 96.129025][ T6214] trace_automount+0x40/0x120 [ 96.129096][ T6214] ? lockref_get_not_dead+0x120/0x1c0 [ 96.129135][ T6214] ? __pfx_trace_automount+0x10/0x10 [ 96.129229][ T6214] debugfs_automount+0x5d/0x70 [ 96.129268][ T6214] __traverse_mounts+0x256/0x420 [ 96.129346][ T6214] step_into_slowpath+0x2d5/0x4c0 [ 96.129394][ T6214] link_path_walk+0x947/0xdd0 [ 96.129435][ T6214] path_openat+0xe7/0x10d0 [ 96.129480][ T6214] do_file_open+0x16c/0x290 [ 96.129595][ T6214] do_sys_openat2+0xa0/0x130 [ 96.129696][ T6214] __x64_sys_openat+0xf2/0x120 [ 96.129732][ T6214] x64_sys_call+0x1f72/0x2550 [ 96.129764][ T6214] do_syscall_64+0x112/0x360 [ 96.129794][ T6214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.129820][ T6214] RIP: 0033:0x7fd541c5e159 [ 96.129842][ T6214] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.129947][ T6214] RSP: 002b:00007fd5406b7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 96.129981][ T6214] RAX: ffffffffffffffda RBX: 00007fd541ee5fa0 RCX: 00007fd541c5e159 [ 96.130000][ T6214] RDX: 0000000000020480 RSI: 0000200000000cc0 RDI: ffffffffffffff9c [ 96.130019][ T6214] RBP: 00007fd541cf506b R08: 0000000000000000 R09: 0000000000000000 [ 96.130037][ T6214] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000000 [ 96.130066][ T6214] R13: 00007fd541ee6038 R14: 00007fd541ee5fa0 R15: 00007ffd90a01a68 [ 96.130094][ T6214] [ 96.395731][ T6222] netlink: 64 bytes leftover after parsing attributes in process `syz.2.864'. [ 97.729197][ T6312] loop6: detected capacity change from 0 to 512 [ 97.786961][ T6312] EXT4-fs: Ignoring removed bh option [ 97.795812][ T6312] EXT4-fs: Ignoring removed mblk_io_submit option [ 97.836548][ T6312] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 97.885066][ T6355] ip6gre1: entered promiscuous mode [ 97.885090][ T6355] ip6gre1: entered allmulticast mode [ 97.893986][ T6312] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 97.894659][ T6312] EXT4-fs (loop6): orphan cleanup on readonly fs [ 97.899243][ T6312] EXT4-fs warning (device loop6): ext4_enable_quotas:7304: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 97.909416][ T6312] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 97.924745][ T6312] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:487: comm syz.6.862: Invalid block bitmap block 0 in block_group 0 [ 97.927799][ T6312] loop6: lost filesystem error report for type 5 error -117 [ 97.929945][ T6312] EXT4-fs (loop6): Remounting filesystem read-only [ 97.930107][ T6312] EXT4-fs (loop6): 1 orphan inode deleted [ 97.953254][ T6312] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 98.035666][ T6312] netlink: 68 bytes leftover after parsing attributes in process `syz.6.862'. [ 98.122078][ T4957] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.243053][ T6386] loop6: detected capacity change from 0 to 4096 [ 98.253756][ T6386] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.303313][ T4957] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.424064][ T6401] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 98.675699][ T6394] netlink: 68 bytes leftover after parsing attributes in process `syz.2.892'. [ 98.722917][ T6396] loop8: detected capacity change from 0 to 512 [ 98.756610][ T6396] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.756949][ T6396] ext4 filesystem being mounted at /44/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 98.790901][ T5340] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.806700][ T2983] ================================================================== [ 98.806742][ T2983] BUG: KCSAN: data-race in dentry_unlink_inode / step_into_slowpath [ 98.806794][ T2983] [ 98.806802][ T2983] write to 0xffff8881061680f0 of 8 bytes by task 3620 on cpu 1: [ 98.806824][ T2983] dentry_unlink_inode+0x65/0x260 [ 98.806860][ T2983] d_delete+0x164/0x180 [ 98.806894][ T2983] d_delete_notify+0x32/0x100 [ 98.806933][ T2983] vfs_unlink+0x287/0x490 [ 98.806977][ T2983] filename_unlinkat+0x1dc/0x410 [ 98.807020][ T2983] __se_sys_unlink+0x2b/0xe0 [ 98.807043][ T2983] __x64_sys_unlink+0x1f/0x30 [ 98.807061][ T2983] x64_sys_call+0x18ee/0x2550 [ 98.807086][ T2983] do_syscall_64+0x112/0x360 [ 98.807104][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.807132][ T2983] [ 98.807140][ T2983] read to 0xffff8881061680f0 of 8 bytes by task 2983 on cpu 0: [ 98.807167][ T2983] step_into_slowpath+0x12c/0x4c0 [ 98.807200][ T2983] path_lookupat+0x2eb/0x4c0 [ 98.807228][ T2983] filename_lookup+0x18f/0x390 [ 98.807252][ T2983] do_readlinkat+0x74/0x2f0 [ 98.807283][ T2983] __x64_sys_readlink+0x47/0x60 [ 98.807306][ T2983] x64_sys_call+0x1d41/0x2550 [ 98.807337][ T2983] do_syscall_64+0x112/0x360 [ 98.807360][ T2983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 98.807386][ T2983] [ 98.807391][ T2983] value changed: 0xffff888103f9e948 -> 0x0000000000000000 [ 98.807407][ T2983] [ 98.807412][ T2983] Reported by Kernel Concurrency Sanitizer on: [ 98.807427][ T2983] CPU: 0 UID: 0 PID: 2983 Comm: udevd Not tainted syzkaller #0 PREEMPT(lazy) [ 98.807460][ T2983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 98.807476][ T2983] ==================================================================